Update dependency io.github.zlika:reproducible-build-maven-plugin to v0.17

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
io.github.zlika:reproducible-build-maven-plugin (source)	0.11 -> 0.17

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

Zlika/reproducible-build-maven-plugin (io.github.zlika:reproducible-build-maven-plugin)

v0.17

Compare Source

=========== Features

• #​71: Allow define lineseparator for strip-jaxb - @​rimuln.
• #​64: Support more archive formats (cpio, ar) - @​ebourg.

Non-functional changes

• Update commons-compress dependency.

v0.16

Compare Source

=========== Features

• #​59: Make strip-jaxb also work with the org.glassfish xjc implementation - @​nilsaellen.

Non-functional changes

• Upgrade maven plugins.
• Fix wrong scope for maven-plugin-api.

v0.15

Compare Source

=========== Features

• #​55: Remove (unreproducible) comments from spring.factories files - @​arobie1992.

v0.14

Compare Source

=========== Features

• #​50: Add .adapter as a supported ZIP type - @​rhysm.
• #​52: Handle nested jars/zips when stripping jars/zips - tobias-hammerschmidt

Non-functional changes

• Upgrade commons-compress to fix CVE.
• Upgrade junit to fix CVE.
• Upgrade Maven plugins.

v0.13

Compare Source

=========== Features

• #​36, #​46: Add configuration options to explicitly include/exclude files to be processed - @​io7m.

Bug Fixes

• Fix possible vulnerability (arbitrary file write during archive extraction) reported by Github CodeQL.

v0.12

Compare Source

=========== Bug Fixes

• #​43: Fix timestamps and unix permissions in TAR file entries.
• #​44: Fix generation of TAR archives including files with long names.

Non-functional changes

• Upgrade commons-compress to fix CVE.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.