mthmulders opened a new issue, #817:
URL: https://github.com/apache/maven-shade-plugin/issues/817

   ### Affected version
   
   3.6.2
   
   ### Bug description
   
   The position of an **META-INF/services/** directory entry in a shaded JAR 
depends on which iteration order `project.getArtifacts()` returned the first 
dependency with a services file inside.
   
   The Shade plugin writes a **META-INF/services/** directory entry at the 
current output position as soon as it encounters the first file 
**META-INF/services/**. It then delegates writing the services file itself to 
`ServicesResourceTransformer` (which writes the file at the end). Since the 
order in which `project.getArtifacts()` returns artifacts is unpredictable, the 
directory entry position is also non-deterministic dependency, potentially 
causing an non-reproducible build.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to