hboutemy commented on PR #1726: URL: https://github.com/apache/maven/pull/1726#issuecomment-2372386867
> It is not part of the JAR file specification as far as I can see if anybody knows how to do a zip that does not contain any timestamp, I'm all ears open. I'll need the same for tar, please. > So this will be then only explicit opt-out? no, you have 2 options: 1. opt-out 2. define your own value, because you care about the exact value (I let you discover what value Gradle build tool puts and how they make it configurable, or not): for example continue as I promote a value overriden in build root pom, with update done by maven-release-plugin or versions-maven-plugin > There is a hidden config property ${maven.startTime} if you want, we can use this: impact is that to rebuild the exact same jar, we'll need to download the reference binary, extract the value used by the release manager, then inject to the rebuild recipe it is awfully complex, but we already do that for a few cases (like Maven core itself that wants the Git commit, even if we build from source tar.gz) BUT this has a **huge drawback**: you kill build cache, because on every build that does not change any source, timestamp changes, then every jar changes Then I'm against this choice as a default value: you can override on your own project if you wish (and kill your own build cache) if you prefer, we can put 1/1/1970, or any other conventional value that you prefer and looks "more common" -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org