hboutemy commented on PR #1726:
URL: https://github.com/apache/maven/pull/1726#issuecomment-2372386867

   > It is not part of the JAR file specification as far as I can see
   
   if anybody knows how to do a zip that does not contain any timestamp, I'm 
all ears open.
   I'll need the same for tar, please.
   
   > So this will be then only explicit opt-out?
   
   no, you have 2 options:
   1. opt-out
   2. define your own value, because you care about the exact value (I let you 
discover what value Gradle build tool puts and how they make it configurable, 
or not): for example continue as I promote a value overriden in build root pom, 
with update done by maven-release-plugin or versions-maven-plugin
   
   > There is a hidden config property ${maven.startTime}
   
   if you want, we can use this: impact is that to rebuild the exact same jar, 
we'll need to download the reference binary, extract the value used by the 
release manager, then inject to the rebuild recipe
   it is awfully complex, but we already do that for a few cases (like Maven 
core itself that wants the Git commit, even if we build from source tar.gz)
   BUT this has a **huge drawback**: you kill build cache, because on every 
build that does not change any source, timestamp changes, then every jar changes
   Then I'm against this choice as a default value: you can override on your 
own project if you wish (and kill your own build cache)
   
   if you prefer, we can put 1/1/1970, or any other conventional value that you 
prefer and looks "more common"


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to