Repack tarball without bundled jars

generate-tarball.sh

@@ -0,0 +1,21 @@
+#!/bin/bash
+set -e
+
+name=plexus-languages
+version="$(sed -n 's/Version:\s*//p' *.spec)"
+
+# RETRIEVE
+wget "https://github.com/codehaus-plexus/plexus-languages/archive/plexus-languages-${version}.tar.gz" -O "${name}-${version}.orig.tar.gz"
+
+rm -rf tarball-tmp
+mkdir tarball-tmp
+cd tarball-tmp
+tar xf "../${name}-${version}.orig.tar.gz"
+
+# CLEAN TARBALL
+find -name '*.jar' -delete
+find -name '*.class' -delete
+
+tar cf "../${name}-${version}.tar.gz" *
+cd ..
+rm -r tarball-tmp "${name}-${version}.orig.tar.gz"

plexus-languages.spec

@@ -1,13 +1,16 @@
 Name:           plexus-languages
 Version:        0.9.10
-Release:        2%{?dist}
+Release:        3%{?dist}
 Summary:        Plexus Languages
 License:        ASL 2.0
 URL:            https://github.com/codehaus-plexus/plexus-languages
 BuildArch:      noarch
 
-Source0:        https://github.com/codehaus-plexus/plexus-languages/archive/plexus-languages-%{version}.tar.gz
+# ./generate-tarball.sh
+Source0:        %{name}-%{version}.tar.gz
 Source1:        http://www.apache.org/licenses/LICENSE-2.0.txt
+# Sources contain bundled jars that we cannot verify for licensing
+Source2:        generate-tarball.sh
 
 BuildRequires:  maven-local
 BuildRequires:  mvn(com.thoughtworks.qdox:qdox)
@@ -27,9 +30,6 @@ language features.
 %prep
 %setup -q -n plexus-languages-plexus-languages-%{version}
 
-find -name '*.jar' -delete
-find -name '*.class' -delete
-
 cp %{SOURCE1} .
 
 %build
@@ -43,6 +43,9 @@ cp %{SOURCE1} .
 %license LICENSE-2.0.txt
 
 %changelog
+* Mon Jul 23 2018 Michael Simacek <msimacek@redhat.com> - 0.9.10-3
+- Repack tarball without bundled jars
+
 * Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.9.10-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
 

sources

@@ -1,2 +1,2 @@
-SHA512 (plexus-languages-0.9.10.tar.gz) = e22447b91ed576742a3f5f13e58ca6022c31f583b3332ba447801eae0502b7af25adf6ff2f953598824ad6b797226815e1625ed5064b9fa94a5ded6554d847d6
+SHA512 (plexus-languages-0.9.10.tar.gz) = fe071e50d2881ec524a9b08b6ac0c533d6a7d28b01f26044f8081fe80fe094db5ef17e9c7465f6d3dac843ecfc7cbe4832bbdc0f537f7567d27bb20890e20432
 SHA512 (LICENSE-2.0.txt) = 98f6b79b778f7b0a15415bd750c3a8a097d650511cb4ec8115188e115c47053fe700f578895c097051c9bc3dfb6197c2b13a15de203273e1a3218884f86e90e8