GoogleContainerTools/jib

Timestamped Snapshots are not well respected with jib

Opened this issue · 0 comments

Environment:

  • Jib version: 3.4.3
  • Build tool: maven
  • OS: Mac

Description of the issue:
When a timestamped version of a snapshot dependency is used, jib includes the jar representing the snapshot which is usually the latest timestamp, hence not being able to make a reproducible build.

Example:

<dependency>
    <groupId>com.example<groupId>
    <artifactId>artifact<artifactId>
    <version>4.127-20240621.201418-5</version>
</dependency>

In this case from debug logs I get:

Snapshot dependencies:
[DEBUG] 		/.m2/repository/com/example/artifact/4.127-SNAPSHOT/artifact-4.127-SNAPSHOT.jar

This will represent the latest version of the file.

Expected behavior:
Instead of generic snapshot, timestamped snapshot should be picked and added to the classpath