On Sun, 19 Apr 2026 at 15:30, Piotr P. Karwasz <[email protected]>
wrote:
> Hi Alex,
>
> On 19.04.2026 15:21, Alex Herbert wrote:
> > The diffoscope is always for a character mismatch between '\' and 'd' so
> it
> > could be a platform encoding issue. E.g.
> >
> > $ diffoscope target/reference/commons-io/commons-io-2.22.0.jar
> > target/commons-io-2.22.0.jar
> >
> > --- target/reference/commons-io/commons-io-2.22.0.jar
> > +++ target/commons-io-2.22.0.jar
> > │┄ Command `'zipdetails --redact --utc {}'` failed with exit code 255.
> > Standard output:
> > │┄ Unknown option: redact
> > │┄ Unknown option: utc
> > │┄ Invalid command line option
> > │┄
> > │┄
> > │┄ zipdetails [OPTIONS] file
> > │┄
> > │┄ Display details about the internal structure of a Zip file.
> > │┄
> > │┄ This is zipdetails version 2.02 [...]
> > │┄ Archive contents identical but files differ, possibly due to different
> > compression levels. Falling back to binary comparison.
> > @@ -1,12 +1,12 @@
> > -00000000: 504b 0304 1400 0808 0800 eb5c 935c 0000 PK.........\.\..
> > +00000000: 504b 0304 1400 0808 0800 eb64 935c 0000 PK.........d.\..
> > 00000010: 0000 0000 0000 0000 0000 0900 0400 4d45 ..............ME
> > 00000020: 5441 2d49 4e46 2ffe ca00 0003 0050 4b07 TA-INF/......PK.
> > 00000030: 0800 0000 0002 0000 0000 0000 0050 4b03 .............PK.
> > -00000040: 0414 0008 0808 00eb 5c93 5c00 0000 0000 ........\.\.....
> > +00000040: 0414 0008 0808 00eb 6493 5c00 0000 0000 ........d.\.....
> > 00000050: 0000 0000 0000 0014 0000 004d 4554 412d ...........META-
> >
> > I am not sure this really matters.
>
>
> Thank you very much for checking reproducibility: almost nobody does.
>
> Try setting the TZ environment variable to UTC:
>
> export TZ=UTC
>
> These differences seem confined to the modification timestamp of the ZIP
> file, which should be equal to the one in the POM file:
>
>
> <project.build.outputTimestamp>2025-11-06T21:58:17Z</project.build.outputTimestamp>
>
> but expressed in your local time zone.
>
> We have a tacit convention with Gary (from one of the previous builds)
> that Gary sets its time zone to UTC during the release process and I do
> the same during verification.
>
Repeated using:
export TZ=UTC
mvn clean verify artifact:compare -DskipTests -Dreference.repo=
https://repository.apache.org/content/repositories/staging/
'-Dbuildinfo.ignore=*/*.spdx.json'
All OK on JDK 21. It did not work with JDK 1.8; 11; 17. I do not have 25 on
this machine.
Alex
