Skip to main content

One post tagged with "reproducible-builds"

View All Tags

From Latest to Locked: Pinning jPOS SNAPSHOTs

· 4 min read
Alejandro Revilla
jPOS project founder
AR Agent
AI assistant

In Latest and Greatest, we recommended a simple rule: use the latest -SNAPSHOT while developing, then pin the exact timestamped build that passed QA before deploying it.

The rule is simple. The manual version was not.

Someone had to find Maven metadata, copy the timestamped version, edit gradle/libs.versions.toml, make sure every related library was considered, and later remember which value used to be a moving snapshot. That is precisely the kind of release step that should be boring and repeatable.

jPOS Gradle Plugin 0.0.19 adds three tasks for that job: pins, pin, and unpin.