Debian Bug report logs - #1003646
node-ramda: please make the build reproducible

version graph

Package: src:node-ramda; Maintainer for src:node-ramda is Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>;

Reported by: "Chris Lamb" <lamby@debian.org>

Date: Thu, 13 Jan 2022 08:27:01 UTC

Severity: wishlist

Tags: patch

Found in version node-ramda/0.27.2+dfsg+~0.27.63-1

Fixed in version node-ramda/0.27.2+dfsg+~0.27.63-2

Done: Yadd <yadd@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#1003646; Package src:node-ramda. (Thu, 13 Jan 2022 08:27:03 GMT) (full text, mbox, link).


Acknowledgement sent to "Chris Lamb" <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>. (Thu, 13 Jan 2022 08:27:03 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>
To: submit@bugs.debian.org
Subject: node-ramda: please make the build reproducible
Date: Thu, 13 Jan 2022 08:23:32 +0000
[Message part 1 (text/plain, inline)]
Source: node-ramda
Version: 0.27.2+dfsg+~0.27.63-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0] we noticed that
node-ramda could not be built reproducibly.

This is because the copyright message automatically updated to the
current year. Patch attached that uses SOURCE_DATE_EPOCH [1] instead.

 [0] https://reproducible-builds.org/
 [1] https://reproducible-builds.org/specs/source-date-epoch/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-
[node-ramda.diff.txt (text/plain, attachment)]

Message sent on to "Chris Lamb" <lamby@debian.org>:
Bug#1003646. (Thu, 13 Jan 2022 11:48:02 GMT) (full text, mbox, link).


Message #8 received at 1003646-submitter@bugs.debian.org (full text, mbox, reply):

From: Yadd <noreply@salsa.debian.org>
To: 1003646-submitter@bugs.debian.org
Subject: Bug#1003646 marked as pending in node-ramda
Date: Thu, 13 Jan 2022 11:45:45 +0000
Control: tag -1 pending

Hello,

Bug #1003646 in node-ramda reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/js-team/node-ramda/-/commit/dedb9e0147bc426f997dfe395ca08af93d5b3910

------------------------------------------------------------------------
Make the build reproducible

Closes: #1003646
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1003646



Added tag(s) pending. Request was from Yadd <noreply@salsa.debian.org> to 1003646-submitter@bugs.debian.org. (Thu, 13 Jan 2022 11:48:02 GMT) (full text, mbox, link).


Reply sent to Yadd <yadd@debian.org>:
You have taken responsibility. (Thu, 13 Jan 2022 12:09:19 GMT) (full text, mbox, link).


Notification sent to "Chris Lamb" <lamby@debian.org>:
Bug acknowledged by developer. (Thu, 13 Jan 2022 12:09:19 GMT) (full text, mbox, link).


Message #15 received at 1003646-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 1003646-close@bugs.debian.org
Subject: Bug#1003646: fixed in node-ramda 0.27.2+dfsg+~0.27.63-2
Date: Thu, 13 Jan 2022 12:05:08 +0000
Source: node-ramda
Source-Version: 0.27.2+dfsg+~0.27.63-2
Done: Yadd <yadd@debian.org>

We believe that the bug you reported is fixed in the latest version of
node-ramda, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1003646@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Yadd <yadd@debian.org> (supplier of updated node-ramda package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Jan 2022 12:42:55 +0100
Source: node-ramda
Architecture: source
Version: 0.27.2+dfsg+~0.27.63-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>
Changed-By: Yadd <yadd@debian.org>
Closes: 1003646
Changes:
 node-ramda (0.27.2+dfsg+~0.27.63-2) unstable; urgency=medium
 .
   * Team upload
 .
   [ Chris Lamb ]
   * Make the build reproducible (Closes: #1003646)
Checksums-Sha1: 
 4ef393fc21a742a9dc25f28ff6bb21d194dece2d 2486 node-ramda_0.27.2+dfsg+~0.27.63-2.dsc
 90b8553134b43a5a1ed9517a6c4d3ef92ac3d473 66560 node-ramda_0.27.2+dfsg+~0.27.63-2.debian.tar.xz
Checksums-Sha256: 
 06cd727cf2ebe63c07599e666afb9e79112b5f2f4dde543817741b9c2cee7245 2486 node-ramda_0.27.2+dfsg+~0.27.63-2.dsc
 19e8a8db462f7ddc1f082eb0011e9eae6f0e39c63d256ef0f24c5ea19a3345a6 66560 node-ramda_0.27.2+dfsg+~0.27.63-2.debian.tar.xz
Files: 
 5feb1403a4d8fee06e12e618df72ea4f 2486 javascript optional node-ramda_0.27.2+dfsg+~0.27.63-2.dsc
 0d26d63c8257de923087ed7e387e9adc 66560 javascript optional node-ramda_0.27.2+dfsg+~0.27.63-2.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=+aDH
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sat, 12 Feb 2022 07:27:54 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 11:03:30 2023; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.