[jira] [Commented] (JSPWIKI-1202) JSPWiki release contains wrong commons-fileupload-1.5.jar

[Jira]

    [ 
https://issues.apache.org/jira/browse/JSPWIKI-1202?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17914344#comment-17914344
 ] 

Juan Pablo Santos Rodríguez commented on JSPWIKI-1202:
------------------------------------------------------

Hi [~hboutemy]

I've updated https://jspwiki-wiki.apache.org/Wiki.jsp?page=How%20to%20release 
to note how to check artifact's build reproducibility (Run a vote section), and 
moved all {{mvn install}} references to {{mvn verify}}. Would you mind checking 
if that content is accurate? If you find it is ok, then I think that this issue 
can be closed.

best regards, and thanks for caring about this :-)

> JSPWiki release contains wrong commons-fileupload-1.5.jar
> ---------------------------------------------------------
>
>                 Key: JSPWIKI-1202
>                 URL: https://issues.apache.org/jira/browse/JSPWIKI-1202
>             Project: JSPWiki
>          Issue Type: Bug
>          Components: Build system
>    Affects Versions: 2.12.1, 2.12.2
>            Reporter: Herve Boutemy
>            Priority: Major
>
> when rebuilding JSPWiki releases, I found that commons-fileupload-1.5.jar 
> included in every .war file is different from the official one in Maven 
> Central 
> https://repo1.maven.org/maven2/commons-fileupload/commons-fileupload/1.5/commons-fileupload-1.5.jar
> for more details and rebuild instructions, see 
> https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/jspwiki/README.md



--
This message was sent by Atlassian Jira
(v8.20.10#820010)