Bug#1035365: lombok: reproducible-builds: build timestamps in files inside of .jar

[Vagrant Cascadian]

Source: lombok
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps timezone
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

The build timestamp is embedded in various files inside
/usr/share/java/lombok-1.18.24.jar:

  https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/lombok.html

  META-INF/services/lombok.core.LombokApp

  #·Thu,·25·Apr·2024·11:27:09·-1200
  vs.
  #·Sat,·25·Mar·2023·07:05:45·+1400

The attached patch fixes this by removing the code in
SpiProcessorPersistence.java which adds the build timestamp.

If a date is for some reason necessary to embed in these files, another
option might be to use the SOURCE_DATE_EPOCH environment variable:

  https://reproducible-builds.org/docs/source-date-epoch/


Unfortunately, there may be other non-deterministic issues which prevent
lombok from building reproducibly, but applying this patch should
significantly reduce the noise generated from timestamps.


Thanks for maintaining lombok!


live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-src-spiProcessor-lombok-spi-SpiProcessorPersistence..patch
Type: text/x-diff
Size: 1132 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20230501/dffc27f9/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20230501/dffc27f9/attachment.sig>