spring/spring-cloud-build
1
0
Fork 0
mirror of https://github.com/spring-cloud/spring-cloud-build.git synced 2026-09-17 12:49:00 +00:00
Code Issues Projects Releases Wiki Activity

Make Spring Cloud builds reproducible

Browse Source
This commit is contained in:
Ryan Baxter
2026-09-09 10:56:06 -04:00
parent 48bb05c102
commit a8ef18d5f2
3 changed files with 20 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pom.xml
+14
View File
@@ -24,6 +24,10 @@
<resource.delimiter>@</resource.delimiter>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
<!-- Reproducible builds. Inherited by every project that uses spring-cloud-build
as its parent, so it does not need to be repeated downstream.
Fixed constant, deliberately not tied to release time: it never needs to change. -->
<project.build.outputTimestamp>1980-02-01T00:00:00Z</project.build.outputTimestamp>
<maven.compiler.source>${java.version}</maven.compiler.source>
<maven.compiler.target>${java.version}</maven.compiler.target>
<main.basedir>${basedir}</main.basedir>
@@ -580,6 +584,16 @@
<configuration>
<verbose>true</verbose>
<dateFormat>yyyy-MM-dd'T'HH:mm:ssZ</dateFormat>
<!-- Reproducible builds: render all timestamps in UTC, otherwise git.properties
differs between build machines in different timezones. -->
<dateFormatTimeZone>UTC</dateFormatTimeZone>
<!-- Reproducible builds: these vary by build machine and user, and nothing
reads them. Keeping them would leak the builder's identity into the jar. -->
<excludeProperties>
<excludeProperty>git.build.host</excludeProperty>
<excludeProperty>git.build.user.name</excludeProperty>
<excludeProperty>git.build.user.email</excludeProperty>
</excludeProperties>
<generateGitPropertiesFile>true</generateGitPropertiesFile>
<generateGitPropertiesFilename>
${project.build.outputDirectory}/git.properties
spring-cloud-build-dependencies/pom.xml
+3
View File
@@ -20,6 +20,9 @@
<properties>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<spring-boot.version>4.2.0-SNAPSHOT</spring-boot.version>
<!-- Reproducible builds. This module does not inherit from spring-cloud-build,
so the property has to be repeated here. Keep in sync with the parent pom. -->
<project.build.outputTimestamp>1980-02-01T00:00:00Z</project.build.outputTimestamp>
<okhttp.version>4.12.0</okhttp.version>
<maven-gpg-plugin.version>3.2.8</maven-gpg-plugin.version>
<central-publishing-maven-plugin.version>0.9.0</central-publishing-maven-plugin.version>
spring-cloud-dependencies-parent/pom.xml
+3
View File
@@ -72,6 +72,9 @@
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<central-publishing-maven-plugin.version>0.9.0</central-publishing-maven-plugin.version>
<maven-deploy-plugin.version>3.1.4</maven-deploy-plugin.version>
<!-- Reproducible builds. This module does not inherit from spring-cloud-build,
so the property has to be repeated here. Keep in sync with the parent pom. -->
<project.build.outputTimestamp>1980-02-01T00:00:00Z</project.build.outputTimestamp>
</properties>
<distributionManagement>
<downloadUrl>https://github.com/spring-cloud</downloadUrl>