You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@knox.apache.org by sm...@apache.org on 2026/09/01 11:57:14 UTC
(knox) branch master updated: KNOX-3429: Harden source assembly to exclude build caches, runtime state, and staging dirs (#1368)
This is an automated email from the ASF dual-hosted git repository.
smolnar82 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/knox.git
The following commit(s) were added to refs/heads/master by this push:
new 1f5d5c061 KNOX-3429: Harden source assembly to exclude build caches, runtime state, and staging dirs (#1368)
1f5d5c061 is described below
commit 1f5d5c0617d500c8f46fad2eed60135984b3e414
Author: Sandor Molnar <sm...@apache.org>
AuthorDate: Tue Sep 1 13:57:08 2026 +0200
KNOX-3429: Harden source assembly to exclude build caches, runtime state, and staging dirs (#1368)
---
src/assembly.xml | 28 +++++++++++++++++++++++++++-
1 file changed, 27 insertions(+), 1 deletion(-)
diff --git a/src/assembly.xml b/src/assembly.xml
index 60565fa71..afe130bc7 100644
--- a/src/assembly.xml
+++ b/src/assembly.xml
@@ -27,12 +27,38 @@
<include>**</include>
</includes>
<excludes>
+ <!-- Build output and dependencies -->
<exclude>**/target/**</exclude>
+ <exclude>**/node_modules/**</exclude>
+ <exclude>**/.angular/**</exclude>
+ <!-- Release/verification dirs (build.xml candidate.dir &
+ install.dir), root-anchored. candidate/ holds downloaded
+ release artifacts incl. a previous *-src.zip; install/ is
+ a full unpacked binary release (with a generated master
+ secret) from install-test-home. Never re-bundle either. -->
+ <exclude>candidate/**</exclude>
+ <exclude>install/**</exclude>
+ <!-- IDE / tooling metadata -->
<exclude>**/.project</exclude>
<exclude>**/.settings/**</exclude>
<exclude>**/.idea/**</exclude>
<exclude>**/*.iml</exclude>
- <exclude>**/node_modules/**</exclude>
+ <exclude>**/.scannerwork/**</exclude>
+ <!-- Runtime state generated by running the gateway or tests.
+ These live outside target/ so `mvn clean` does not remove
+ them; without these excludes they bloat the source release
+ (and would ship generated keystores/credentials). -->
+ <exclude>**/data/security/**</exclude>
+ <exclude>**/data/deployments/**</exclude>
+ <exclude>**/data/ldap-server/**</exclude>
+ <exclude>**/logs/*.log</exclude>
+ <exclude>**/logs/*.out</exclude>
+ <exclude>**/logs/*.err</exclude>
+ <exclude>**/*.pid</exclude>
+ <!-- JVM crash / heap dumps -->
+ <exclude>**/*.hprof</exclude>
+ <exclude>**/hs_err_pid*.log</exclude>
+ <exclude>**/replay_pid*.log</exclude>
</excludes>
</fileSet>
</fileSets>