Hello Robert,
on behalf of the Eclipse Maven integration (M2E) I would be interested to join
this discussion.
I also talked to Stephan Herrmann at OCX/EclipseCon and he's interested to join
for the Eclipse Java Compiler and Developer Tooling (JDT).
Hopefully my response isn't too late.
Thanks
if you rebuilt with artifact:compare, you have the diffoscope command printed,
that you can use with basic diff given it's a simple text file in the current
case:
❯ diffoscope
target/reference/org.apache.maven.surefire/surefire-3.5.2-cyclonedx.xml
target/bom.xml
--- target/reference/org.apach
Can you provide a diff because the SBOM is huge?
On 2024/10/31 07:01:41 Herve Boutemy wrote:
> +1
>
> Reproducible Builds near fully ok: reference build done with JDK 8 on Windows
>
> the only small difference in my rebuild is the aggregate CycloneDX SBOM: I
> don't know how you did, but in the
+1
Reproducible Builds ok: reference build done with JDK 21 on *nix
Regards,
Hervé
On 2024/10/29 09:50:40 Tamás Cservenák wrote:
> Howdy,
>
> This Resolver 2.0.3, respin 1 release is a bugfix release with several
> improvements as well.
>
> This release contains two important bug fixes regard
+1
Reproducible Builds near fully ok: reference build done with JDK 8 on Windows
the only small difference in my rebuild is the aggregate CycloneDX SBOM: I
don't know how you did, but in the reference files, if contains hash for the
plugin, which is supposed not to be built yet, hence in my reb
