From 921eefc900b9a5bf8ed3bb78fa71b49bcbf4b364 Mon Sep 17 00:00:00 2001 From: Rafael Winterhalter Date: Sat, 15 Aug 2026 09:46:06 +0200 Subject: [PATCH] Add Automatic-Module-Name to sigstore-java Declare a stable JPMS automatic module name so consumers building modular applications get a predictable module name instead of one derived from the jar file name. The name matches the jar's root package, dev.sigstore. Only sigstore-java is given a name. The CLIs are shipped as shadowed uber jars, and the Gradle and Maven plugins are loaded by their build tool's own classloader, so none of them are ever resolved on a module path. Signed-off-by: Rafael Winterhalter --- sigstore-java/build.gradle.kts | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/sigstore-java/build.gradle.kts b/sigstore-java/build.gradle.kts index ebe0d9be..73f04c44 100644 --- a/sigstore-java/build.gradle.kts +++ b/sigstore-java/build.gradle.kts @@ -10,6 +10,13 @@ plugins { description = "A Java client for signing and verifying using Sigstore" +tasks.jar { + manifest { + // Name of the automatic module for JPMS consumers. It must never change once released. + attributes["Automatic-Module-Name"] = "dev.sigstore" + } +} + dependencies { compileOnly("org.immutables:gson:2.12.2") compileOnly("org.immutables:value-annotations:2.12.2")