Debian Bug report logs - #1005825
hatchling: please make the build reproducible

version graph

Package: src:hatchling; Maintainer for src:hatchling is Debian Python Team <team+python@tracker.debian.org>;

Reported by: "Chris Lamb" <lamby@debian.org>

Date: Tue, 15 Feb 2022 17:27:01 UTC

Severity: wishlist

Tags: patch

Found in version hatchling/0.12.0-1

Fixed in version hatchling/0.13.0-1

Done: Stefano Rivera <stefanor@debian.org>

Bug is archived. No further changes may be made.

Forwarded to https://github.com/ofek/hatch/issues/132

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Stefano Rivera <stefanor@debian.org>:
Bug#1005825; Package src:hatchling. (Tue, 15 Feb 2022 17:27:04 GMT) (full text, mbox, link).


Acknowledgement sent to "Chris Lamb" <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Stefano Rivera <stefanor@debian.org>. (Tue, 15 Feb 2022 17:27:04 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>
To: submit@bugs.debian.org
Subject: hatchling: please make the build reproducible
Date: Tue, 15 Feb 2022 09:22:40 -0800
[Message part 1 (text/plain, inline)]
Source: hatchling
Version: 0.12.0-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0] we noticed that
hatchling could not be built reproducibly.

This is because it included the checksums of (unshipped) .pyc files in
the 'RECORD' file. A patch is attached that strips them out; this change
is analogous to a similar conditional later in the wheel.py file.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-
[hatchling.diff.txt (text/plain, attachment)]

Set Bug forwarded-to-address to 'https://github.com/ofek/hatch/issues/132'. Request was from Stefano Rivera <stefanor@debian.org> to control@bugs.debian.org. (Tue, 15 Feb 2022 21:27:03 GMT) (full text, mbox, link).


Reply sent to Stefano Rivera <stefanor@debian.org>:
You have taken responsibility. (Wed, 16 Feb 2022 20:42:08 GMT) (full text, mbox, link).


Notification sent to "Chris Lamb" <lamby@debian.org>:
Bug acknowledged by developer. (Wed, 16 Feb 2022 20:42:08 GMT) (full text, mbox, link).


Message #12 received at 1005825-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 1005825-close@bugs.debian.org
Subject: Bug#1005825: fixed in hatchling 0.13.0-1
Date: Wed, 16 Feb 2022 20:39:52 +0000
Source: hatchling
Source-Version: 0.13.0-1
Done: Stefano Rivera <stefanor@debian.org>

We believe that the bug you reported is fixed in the latest version of
hatchling, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1005825@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Stefano Rivera <stefanor@debian.org> (supplier of updated hatchling package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 16 Feb 2022 15:38:44 -0400
Source: hatchling
Architecture: source
Version: 0.13.0-1
Distribution: unstable
Urgency: medium
Maintainer: Stefano Rivera <stefanor@debian.org>
Changed-By: Stefano Rivera <stefanor@debian.org>
Closes: 1005825
Changes:
 hatchling (0.13.0-1) unstable; urgency=medium
 .
   * New upstream release.
     - Excludes .pyc files by default. (Closes: #1005825)
Checksums-Sha1:
 6f7940fdfdd73b73553d64bf0ccba2446d15415d 1391 hatchling_0.13.0-1.dsc
 7d9f08bda2df367cd8b4ad75d808420fadbb8bd1 39461 hatchling_0.13.0.orig.tar.gz
 0cf19f4f5e6585f6572b5c9d7c06060d81e213e1 2152 hatchling_0.13.0-1.debian.tar.xz
 1a5bfc4955ce281e4077180558226eeb3b1eea3a 6259 hatchling_0.13.0-1_source.buildinfo
Checksums-Sha256:
 d6d8574d217bb3f94f3670ae79e706bb1b78f31f0ca5f12ca4c04eaf5e22b4ad 1391 hatchling_0.13.0-1.dsc
 52cfcc6491abd3d58e1cd280e805769169ec85e2723d427dbdaee2a5e0b7c598 39461 hatchling_0.13.0.orig.tar.gz
 435c3d37b42c18801bb0dd7ff490172b49acbdd1739386c0aaf5756a44445edf 2152 hatchling_0.13.0-1.debian.tar.xz
 cf66ad0a992e304571c3b9c7818fa56c9ccfbf27f1215a0d9518daf56cf728c0 6259 hatchling_0.13.0-1_source.buildinfo
Files:
 a2f588380f4199ff6280aea20589ae2d 1391 python optional hatchling_0.13.0-1.dsc
 86ffea93b1817676b2b1e04e739f7007 39461 python optional hatchling_0.13.0.orig.tar.gz
 754795fc7d7e8670cab72f1e091a02b1 2152 python optional hatchling_0.13.0-1.debian.tar.xz
 167ab4d96159e600c6776a2f04eb1d3f 6259 python optional hatchling_0.13.0-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iIoEARYKADIWIQTumtb5BSD6EfafSCRHew2wJjpU2AUCYg1TJRQcc3RlZmFub3JA
ZGViaWFuLm9yZwAKCRBHew2wJjpU2CsEAP4hshc4qQKPBB/sndfv5JtPSIXGJG+3
WqbZmTGdaOZopQEA3s0Uf3IoMibovYQv73rr0EAC7G1mH4ZWWN03ZqyI6Qg=
=T6EX
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Thu, 17 Mar 2022 07:25:27 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 10:18:26 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.