Unsign all dependency JARs during build

[gastaldi]

This will unsign all dependency JARs when building to prevent SecurityExceptions from happening

• Fixes Native executable cannot be built with signed Jars containing beans #47498

[maxandersen]

What is/was the fix ? On first glance code is just moved to another class? But otherwise called in the same places ?

[maxandersen]

+1 - i actually thought this was what we already did.

That this now unsign any signed jars (but only if signed) + That it is done using code that keep the same timestamps is a win.

[maxandersen]

I'm +1 on this but have suggestion on better logging but that can be done separatly if need be.

[quarkus-bot]

Status for workflow Quarkus CI

This is the status report for running Quarkus CI on commit fdf08f0.

✅ The latest workflow run for the pull request has completed successfully.

It should be safe to merge provided you have a look at the other checks in the summary.

You can consult the Develocity build scans.

---

Flaky tests - Develocity

⚙️ JVM Integration Tests - JDK 21

📦 integration-tests/opentelemetry-grpc-only

✖ io.quarkus.it.opentelemetry.grpc.HelloGrpcClientTest.testHello - History

• java.lang.RuntimeException: Failed to start quarkus - java.lang.RuntimeException

java.lang.RuntimeException: java.lang.RuntimeException: Failed to start quarkus
	at io.quarkus.test.junit.QuarkusTestExtension.throwBootFailureException(QuarkusTestExtension.java:695)
	at io.quarkus.test.junit.QuarkusTestExtension.interceptTestClassConstructor(QuarkusTestExtension.java:793)
	at java.base/java.util.Optional.orElseGet(Optional.java:364)
	at java.base/java.util.ArrayList.forEach(ArrayList.java:1596)
	at java.base/java.util.ArrayList.forEach(ArrayList.java:1596)
Caused by: java.lang.RuntimeException: Failed to start quarkus
	at io.quarkus.runner.ApplicationImpl.doStart(Unknown Source)