made build reproducible

[hboutemy]

Description

applied changes required as documented in https://maven.apache.org/guides/mini/guide-reproducible-builds.html
same as aws/aws-sdk-java#2223 waiting for merge...

Motivation and Context

Reproducible Builds is good for security and users trust

Testing

tested reproducibility using the recipe provided in the Maven guide (2 local builds checked against each other)

Screenshots (if appropriate)

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)

Checklist

• I have read the CONTRIBUTING document
• Local run of mvn install succeeds
• My code follows the code style of this project
• My change requires a change to the Javadoc documentation
• I have updated the Javadoc documentation accordingly
• I have read the README document
• I have added tests to cover my changes
• All new and existing tests passed
• A short description of the change has been added to the CHANGELOG
• My change is to implement 1.11 parity feature and I have updated LaunchChangelog

License

• I confirm that this pull request can be released under the Apache 2 license

[codecov-io]

Codecov Report

Merging #1759 into master will decrease coverage by 0.00%.
The diff coverage is n/a.

@@             Coverage Diff              @@
##             master    #1759      +/-   ##
============================================
- Coverage     76.31%   76.30%   -0.01%     
  Complexity      182      182              
============================================
  Files          1072     1073       +1     
  Lines         32247    32329      +82     
  Branches       2519     2536      +17     
============================================
+ Hits          24608    24670      +62     
- Misses         6400     6413      +13     
- Partials       1239     1246       +7     

Flag	Coverage Δ	Complexity Δ
#unittests	76.30% <ø> (-0.01%)	182.00 <ø> (ø)

Impacted Files	Coverage Δ	Complexity Δ
...ttp/nio/netty/internal/nrs/HttpStreamsHandler.java	60.76% <0.00%> (-3.85%)	0.00% <0.00%> (ø%)
...ssdk/core/internal/async/FileAsyncRequestBody.java	84.76% <0.00%> (-2.86%)	0.00% <0.00%> (ø%)
...ty/internal/http2/Http2StreamExceptionHandler.java	90.90% <0.00%> (-0.76%)	0.00% <0.00%> (ø%)
...azon/awssdk/services/s3/presigner/S3Presigner.java	35.00% <0.00%> (ø)	0.00% <0.00%> (ø%)
...ed/dynamodb/internal/operations/ScanOperation.java	100.00% <0.00%> (ø)	0.00% <0.00%> (ø%)
...d/dynamodb/internal/operations/QueryOperation.java	100.00% <0.00%> (ø)	0.00% <0.00%> (ø%)
...nal/http2/Http2ConnectionTerminatingException.java	100.00% <0.00%> (ø)	0.00% <0.00%> (?%)
...wssdk/http/nio/netty/internal/ResponseHandler.java	89.30% <0.00%> (+0.20%)	0.00% <0.00%> (ø%)
.../enhanced/dynamodb/model/QueryEnhancedRequest.java	61.64% <0.00%> (+0.24%)	0.00% <0.00%> (ø%)
...ices/s3/internal/presigner/DefaultS3Presigner.java	88.88% <0.00%> (+0.31%)	0.00% <0.00%> (ø%)
... and 3 more

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update d4ea84f...10b4e1e. Read the comment docs.

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities (and 0 Security Hotspots to review)
2 Code Smells

100.0% Coverage
0.0% Duplication

[hboutemy]

@zoewangg having this library providing Reproducible Builds would be a great security enhancement: can you review, please?

[millems]

Is this update still desired? We don't mind merging a quick XML change to make things reproducible right now, but we're not looking to guarantee reproducible builds at this time (as in, we do not want to start enforcing it with testing or promise we won't ever break reproducibility).

[debora-ito]

Closing this for now, as we don't intend to maintain build reproducibility at this time.