laeubi commented on PR #1726: URL: https://github.com/apache/maven/pull/1726#issuecomment-2373651297
> f yes, what about instead developing a new Maven plugin or modifying `maven-deploy-plugin` with a new goal? Instead of deploying to the server, it would download from the server and compare the ZIP **content**. Differences in timestamp and compression would be ignored. We could also ignore a limited set of `META-INF` attributes. Tycho has exactly this kind of "semantic equivalency" here: - https://github.com/eclipse-tycho/tycho/tree/main/tycho-artifactcomparator/src/main/java/org/eclipse/tycho/zipcomparator/internal it is not used for "reproducibility" instead it is used to check if an artifact only differs in version, and in this case the artifact is not deployed. Additionally if it differs but version has not changed one gets an error / warning that one needs to increment the version (this is similar to this use-case here: If i build the same version the jar should be "semantic equivalent". This currently even can detect if a file only differs in line endings (e.g.`\r\n` versus `\n`) and some normalization of Manifests (e.g. order does not matter) and other types like XML (e.g. only attribute ordering changed) and even properties files (e.g. order of properties is ignored). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
