Debian Bug report logs - #804249
python-setuptools: please make the generated requires.txt files reproducible

version graph

Package: src:python-setuptools; Maintainer for src:python-setuptools is Matthias Klose <doko@debian.org>;

Reported by: Chris Lamb <lamby@debian.org>

Date: Fri, 6 Nov 2015 15:18:02 UTC

Severity: wishlist

Tags: patch, upstream

Found in version python-setuptools/18.4-2

Fixed in version python-setuptools/33.1.1-1

Done: Matthias Klose <doko@debian.org>

Bug is archived. No further changes may be made.

Forwarded to https://bitbucket.org/pypa/setuptools/issues/458/please-make-the-generated-requirestxt

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-builds@lists.alioth.debian.org, Matthias Klose <doko@debian.org>:
Bug#804249; Package src:python-setuptools. (Fri, 06 Nov 2015 15:18:05 GMT) (full text, mbox, link).


Acknowledgement sent to Chris Lamb <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-builds@lists.alioth.debian.org, Matthias Klose <doko@debian.org>. (Fri, 06 Nov 2015 15:18:05 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>
To: submit@bugs.debian.org
Subject: python-setuptools: please make the generated requires.txt files reproducible
Date: Fri, 06 Nov 2015 15:14:42 +0000
[Message part 1 (text/plain, inline)]
Source: python-setuptools
Version: 18.4-2
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps toolchain
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi,

Whilst working on the "reproducible builds" effort [0], we noticed that
python-setuptools generates non-deterministic output when creating
requires.txt files:

│   │   │   │  [all]
│   │   │   │ -fake-factory==0.5.2
│   │   │   │ -pytz
│   │   │   │  numpy>=1.9.0
│   │   │   │  pytz
│   │   │   │ +pytz
│   │   │   │  django>=1.7
│   │   │   │ +fake-factory==0.5.2

Patch attached.

 [0] https://wiki.debian.org/ReproducibleBuilds


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-
[python-setuptools.diff.txt (text/plain, attachment)]

Added tag(s) upstream. Request was from Chris Lamb <lamby@debian.org> to control@bugs.debian.org. (Fri, 06 Nov 2015 15:21:16 GMT) (full text, mbox, link).


Set Bug forwarded-to-address to 'https://bitbucket.org/pypa/setuptools/issues/458/please-make-the-generated-requirestxt'. Request was from Chris Lamb <lamby@debian.org> to control@bugs.debian.org. (Fri, 06 Nov 2015 15:27:07 GMT) (full text, mbox, link).


Information forwarded to debian-bugs-dist@lists.debian.org, Matthias Klose <doko@debian.org>:
Bug#804249; Package src:python-setuptools. (Sun, 14 Aug 2016 19:15:52 GMT) (full text, mbox, link).


Acknowledgement sent to Chris Lamb <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Matthias Klose <doko@debian.org>. (Sun, 14 Aug 2016 19:15:52 GMT) (full text, mbox, link).


Message #14 received at 804249@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>
To: 804249@bugs.debian.org
Subject: Re: Bug#804249: python-setuptools: please make the generated requires.txt files reproducible
Date: Sun, 14 Aug 2016 20:12:35 +0100
Dear Maintainer,

> Source: python-setuptools
> Version: 5.5.1-1
> Tags: patch

There hasn't seem to be any update on this bug in 282 days, in which
time the Reproducible Builds effort has come on a long way. :)

Would you consider applying this patch and uploading?


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-



Information forwarded to debian-bugs-dist@lists.debian.org, Matthias Klose <doko@debian.org>:
Bug#804249; Package src:python-setuptools. (Mon, 16 Jan 2017 06:15:14 GMT) (full text, mbox, link).


Acknowledgement sent to Chris Lamb <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Matthias Klose <doko@debian.org>. (Mon, 16 Jan 2017 06:15:14 GMT) (full text, mbox, link).


Message #19 received at 804249@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>
To: 804249@bugs.debian.org
Subject: Re: Bug#804249: python-setuptools: please make the generated requires.txt files reproducible
Date: Mon, 16 Jan 2017 06:13:57 +0000
> Would you consider applying this patch and uploading?

Friendly ping on this :)


Best wishes,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-



Reply sent to Matthias Klose <doko@debian.org>:
You have taken responsibility. (Thu, 19 Jan 2017 17:39:05 GMT) (full text, mbox, link).


Notification sent to Chris Lamb <lamby@debian.org>:
Bug acknowledged by developer. (Thu, 19 Jan 2017 17:39:05 GMT) (full text, mbox, link).


Message #24 received at 804249-close@bugs.debian.org (full text, mbox, reply):

From: Matthias Klose <doko@debian.org>
To: 804249-close@bugs.debian.org
Subject: Bug#804249: fixed in python-setuptools 33.1.1-1
Date: Thu, 19 Jan 2017 17:35:25 +0000
Source: python-setuptools
Source-Version: 33.1.1-1

We believe that the bug you reported is fixed in the latest version of
python-setuptools, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 804249@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Matthias Klose <doko@debian.org> (supplier of updated python-setuptools package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 19 Jan 2017 18:02:25 +0100
Source: python-setuptools
Binary: python-pkg-resources python-setuptools python-setuptools-doc python3-pkg-resources python3-setuptools pypy-pkg-resources pypy-setuptools
Architecture: source
Version: 33.1.1-1
Distribution: unstable
Urgency: medium
Maintainer: Matthias Klose <doko@debian.org>
Changed-By: Matthias Klose <doko@debian.org>
Description:
 pypy-pkg-resources - Package Discovery and Resource Access using pkg_resources
 pypy-setuptools - PyPy Distutils Enhancements
 python-pkg-resources - Package Discovery and Resource Access using pkg_resources
 python-setuptools - Python Distutils Enhancements
 python-setuptools-doc - Python Distutils Enhancements (documentation)
 python3-pkg-resources - Package Discovery and Resource Access using pkg_resources
 python3-setuptools - Python3 Distutils Enhancements
Closes: 804249
Changes:
 python-setuptools (33.1.1-1) unstable; urgency=medium
 .
   * New upstream version.
   * Generate sorted requires.txt files. Closes: #804249.
Checksums-Sha1:
 629e2e0d5b9fac6b440387836cfbd8731cd48216 2394 python-setuptools_33.1.1-1.dsc
 053672a8c1712d7a752bb28c3e9e6309a1feb34b 415528 python-setuptools_33.1.1.orig.tar.xz
 b85534278a777a43cd7eb58293bf261bd69f19c2 14000 python-setuptools_33.1.1-1.debian.tar.xz
Checksums-Sha256:
 d77e52bb962b18a87acfb0f0f8840f11101d0b1d869b176e58bf8184d97b0ed7 2394 python-setuptools_33.1.1-1.dsc
 aeeac1aa49ab17fb2164c380eae40a11a90a21719325d668fba5bd31d5cf72e6 415528 python-setuptools_33.1.1.orig.tar.xz
 572403d5d2ab58bce77be68810369baa090457be188fbcd7075522972c1d186a 14000 python-setuptools_33.1.1-1.debian.tar.xz
Files:
 8e70c836b80e6d3d0082cf1b26eed6b6 2394 python optional python-setuptools_33.1.1-1.dsc
 397e9f57359c3fc7edb0678713673168 415528 python optional python-setuptools_33.1.1.orig.tar.xz
 8eac16213cb30ff8efd8591918742ad4 14000 python optional python-setuptools_33.1.1-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=hAxz
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Mon, 27 Feb 2017 07:29:30 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 14:10:14 2023; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.