GoogleContainerTools / jib

🏗 Build container images for your Java applications.
Apache License 2.0
13.63k stars 1.44k forks source link

Timestamped Snapshots are not well respected with jib #4277

Open anuragagarwal561994 opened 3 months ago

anuragagarwal561994 commented 3 months ago

Environment:

Description of the issue: When a timestamped version of a snapshot dependency is used, jib includes the jar representing the snapshot which is usually the latest timestamp, hence not being able to make a reproducible build.

Example:

<dependency>
    <groupId>com.example<groupId>
    <artifactId>artifact<artifactId>
    <version>4.127-20240621.201418-5</version>
</dependency>

In this case from debug logs I get:

Snapshot dependencies:
[DEBUG]         /.m2/repository/com/example/artifact/4.127-SNAPSHOT/artifact-4.127-SNAPSHOT.jar

This will represent the latest version of the file.

Expected behavior: Instead of generic snapshot, timestamped snapshot should be picked and added to the classpath