On Tue, Sep 3, 2024 at 10:04 AM Arnout Engelen <enge...@apache.org> wrote:

> I do see more concerning inconsistencies in the 2.13 artifacts:
>

>
> https://arnout.engelen.eu/rb/reproducible-builds-diffoscope-output-pekko-actor_2.13-1.1.0-RC1.jar.html
>
> https://arnout.engelen.eu/rb/reproducible-builds-diffoscope-output-pekko-actor-typed_2.13-1.1.0-RC1.jar.html
>

Somewhat reassuringly, I don't see these differences in the final staged
1.1.0 jars.


Kind regards,

-- 
Arnout Engelen
ASF Security Response
Apache Pekko PMC member, ASF Member
NixOS Committer
Independent Open Source consultant

Reply via email to