[jira] [Commented] (MASSEMBLY-986) Minimal default Manifest should be used by jar archiver

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/MASSEMBLY-986?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17718433#comment-17718433 ] 

ASF GitHub Bot commented on MASSEMBLY-986:
------------------------------------------

hboutemy commented on PR #134:
URL: https://github.com/apache/maven-assembly-plugin/pull/134#issuecomment-1530913494

   IIUC, what you are trying to achieve is to avoid Reproducible Builds output to change when changing `plexus-archiver` version (like proposed by dependabot in #119 




> Minimal default Manifest should be used by jar archiver
> -------------------------------------------------------
>
>                 Key: MASSEMBLY-986
>                 URL: https://issues.apache.org/jira/browse/MASSEMBLY-986
>             Project: Maven Assembly Plugin
>          Issue Type: Bug
>            Reporter: Slawomir Jaranowski
>            Assignee: Slawomir Jaranowski
>            Priority: Major
>             Fix For: 3.6.0
>
>
> When we configure plugin with:
> {code}
> <archive>
>   <manifest>
>     <addDefaultEntries>false</addDefaultEntries>
>    </manifest>
> </archive>
> {code}
> We expect that minimal Manifest will be created with content:
> {code}
> Manifest-Version: 1.0
> {code}
> but we have:
> {code}
> Manifest-Version: 1.0
> Created-By: Plexus Archiver 4.6.0
> {code}
> Manifest content depends on version of Plexus Archiver and in such case can break reproducible build.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)