Thanks Arnout. I ran the reproducibleBuild commands just now and got the same results as you. The 1.1.0-RC1 jars for pekko-actor and pekko-actor-typed have diffs but the 1.1.0 jars seem ok. I don't know what went wrong with the 1.1.0-RC1 build. Those jars will be deleted when the 1.0.0 jars are released. If you have no objections, I will proceed with the 1.0.0 jar release later tonight - once the 24 hour period has concluded.
For future builds, I will spend more time on the reproducible checks to try to avoid a repeat of the 1.0.0-RC1 build issues. On Tue, 3 Sept 2024 at 09:44, Arnout Engelen <enge...@apache.org> wrote: > > On Tue, Sep 3, 2024 at 10:04 AM Arnout Engelen <enge...@apache.org> wrote: > > > I do see more concerning inconsistencies in the 2.13 artifacts: > > > > > > > https://arnout.engelen.eu/rb/reproducible-builds-diffoscope-output-pekko-actor_2.13-1.1.0-RC1.jar.html > > > > https://arnout.engelen.eu/rb/reproducible-builds-diffoscope-output-pekko-actor-typed_2.13-1.1.0-RC1.jar.html > > > > Somewhat reassuringly, I don't see these differences in the final staged > 1.1.0 jars. > > > Kind regards, > > -- > Arnout Engelen > ASF Security Response > Apache Pekko PMC member, ASF Member > NixOS Committer > Independent Open Source consultant --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@pekko.apache.org For additional commands, e-mail: dev-h...@pekko.apache.org
