Description
According to https://github.com/jvm-repo-rebuild/reproducible-central#results builds with parent 38 are not fully reproducible yet. AFAICS this is caused by the fact, that we use a slightly outdated maven-source-plugin (https://github.com/apache/sling-parent/blob/129ae7a6d8426be32877eaed0b20b43c5cd7b223/sling-parent/pom.xml#L321). In general no version should be managed to a lower version than given in the ASF parent (e.g. https://github.com/apache/maven-apache-parent/blob/591f84284d4bce53ca2ee686c1d84b16e8029716/pom.xml#L288).
Attachments
Issue Links
- causes
-
MENFORCER-354 Enforce no conflicts in pluginManagement
- Closed
- relates to
-
SLING-9463 Document reproducible builds and check automatically via check-staged-release
- Open
-
SLING-8951 Enable reproducible builds by default
- Closed
- links to