Bug#784265: maven-plugin-tools: please create reproducible plugin descriptors

[Reiner Herrmann]

Source: maven-plugin-tools
Version: 3.3-1
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps toolchain
X-Debbugs-CC: reproducible-builds at lists.alioth.debian.org

Hi!

While working on Debian's “reproducible builds” effort [1], we have
noticed that maven-plugin-tools generates unreproducible plugin descriptors
(example [2]), because it embeds the build date into a comment inside the file.

As the date provides no valuable information, it would be nice if it was removed,
so that more packages using it become reproducible.
A proposal for this is in the attached patch.

Regards,
 Reiner

[1]: https://wiki.debian.org/ReproducibleBuilds
[2]: https://reproducible.debian.net/rb-pkg/unstable/amd64/java-comment-preprocessor.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: maven-plugin-tools.patch
Type: text/x-patch
Size: 2031 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-java-maintainers/attachments/20150504/5be03f7e/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-java-maintainers/attachments/20150504/5be03f7e/attachment.sig>