for those interested, I add the "Reproducible Builds (free) Bounty" :)

instructions:
- use JDK 8 on an Unix (and please share if you find a trick to build on 
Windows, geting the same result)
- please install locally maven-buildinfo-plugin 
https://github.com/apache/maven-studies/tree/maven-buildinfo-plugin
- build with "mvn -Papache-release,run-its -Dgpg.skip verify buildinfo:save"
- check the content of target/buildinfo against reference in attachment
If you don't want to install maven-buildinfo-plugin, you can check the output 
checksums by hand, there are only 3 files to check in such a simple mono-module 
project: maven-source-plugin-3.2.1.jar, 
maven-source-plugin-3.2.1-source-release.zip and 
maven-source-plugin-3.2.1-sources.jar

Regards,

Hervé

Le lundi 16 décembre 2019, 19:37:00 CET Hervé BOUTEMY a écrit :
> Hi,
> 
> We solved 2 issues:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317924&ve
> rsion=12346480&styleName=Text
> 
> Staging repo:
> https://repository.apache.org/content/repositories/maven-1545/
> https://repository.apache.org/content/repositories/maven-1545/org/apache/mav
> en/plugins/maven-source-plugin/3.2.1/maven-source-plugin-3.2.1-source-releas
> e.zip
> 
> Source release checksum(s):
> maven-source-plugin-3.2.1-source-release.zip sha512:
> 4d7252839cc74dae8100a47adadbe6fc2c8f4d57e930fa695e4e6c75a8571b1246a63aa25de
> 0cf2d73601e599faea2a31be43b1fe442e36d463702d885ccf8b7
> 
> Staging site:
> https://maven.apache.org/plugins-archives/maven-source-plugin-LATEST/
> 
> Guide to testing staged releases:
> https://maven.apache.org/guides/development/guide-testing-releases.html
> 
> Vote open for at least 72 hours.
> 
> [ ] +1
> [ ] +0
> [ ] -1
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]

buildinfo.version=1.0-SNAPSHOT

name=Apache Maven Source Plugin
group-id=org.apache.maven.plugins
artifact-id=maven-source-plugin
version=3.2.1

# source information
# TBD source.* artifact, url should be parameters
source.scm.uri=scm:git:https://gitbox.apache.org/repos/asf/maven-source-plugin.git
source.scm.tag=maven-source-plugin-3.2.1

# build instructions
build-tool=mvn

# effective build environment information
java.version=1.8.0_161
java.vendor=Oracle Corporation
os.name=Linux

# Maven rebuild instructions and effective environment
mvn.rebuild-args=-DskipTests verify
mvn.version=Apache Maven 3.6.3 (cecedd343002696d0abb50b32b541b8a6ba2883f)
mvn.minimum.version=3.0

# output
outputs.0.filename=maven-source-plugin-3.2.1.jar
outputs.0.length=32159
outputs.0.checksums.sha512=afd93bc84239e5e6e725ee7aea79b3e3e7fb2003861dcb955d3687993085da6130a695689cd25fd824cab153ef08eebddb2bed31685d3bd458a8a0de8d66de07
outputs.1.filename=maven-source-plugin-3.2.1-source-release.zip
outputs.1.length=204286
outputs.1.checksums.sha512=4d7252839cc74dae8100a47adadbe6fc2c8f4d57e930fa695e4e6c75a8571b1246a63aa25de0cf2d73601e599faea2a31be43b1fe442e36d463702d885ccf8b7
outputs.2.filename=maven-source-plugin-3.2.1-sources.jar
outputs.2.length=23814
outputs.2.checksums.sha512=29549f3a61227c37d5207fc3eafa542a243b8a6a9778fae4e5a5eec57e7f0e6b79bfb421feca6ab162ea60dedc6ac0b72fa3e7b4d64de71f5796c020b0807929

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to