[
https://issues.apache.org/jira/browse/JSPWIKI-1202?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17913306#comment-17913306
]
Jürgen Weber commented on JSPWIKI-1202:
---------------------------------------
Isn't it enough for a reproducible build to have all dependencies' and all
plugins' versions specified? And shouldn't a broken jar in the local reposity
be caught by the .jar.sha and be fixed by mvn -U ?
> JSPWiki release contains wrong commons-fileupload-1.5.jar
> ---------------------------------------------------------
>
> Key: JSPWIKI-1202
> URL: https://issues.apache.org/jira/browse/JSPWIKI-1202
> Project: JSPWiki
> Issue Type: Bug
> Components: Build system
> Affects Versions: 2.12.1, 2.12.2
> Reporter: Herve Boutemy
> Priority: Major
>
> when rebuilding JSPWiki releases, I found that commons-fileupload-1.5.jar
> included in every .war file is different from the official one in Maven
> Central
> https://repo1.maven.org/maven2/commons-fileupload/commons-fileupload/1.5/commons-fileupload-1.5.jar
> for more details and rebuild instructions, see
> https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/jspwiki/README.md
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
