Debian Bug report logs - #930768
node-d3-fetch: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>

To: submit@bugs.debian.org

Subject: node-d3-fetch: please make the build reproducible

Date: Thu, 20 Jun 2019 09:23:08 +0100

[Message part 1 (text/plain, inline)]

Source: node-d3-fetch
Version: 1.1.2+dfsg-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed
that node-d3-fetch could not be built reproducibly.

This is because it was embedding the build date in a "banner"
comment:

│ │ │ │ │ -// https://d3js.org/d3-fetch/ v1.3.2 Copyright 2020 Mike Bostock
│ │ │ │ │ +// https://d3js.org/d3-fetch/ v1.3.2 Copyright 2019 Mike Bostock

Patch attached that uses SOURCE_DATE_EPOCH.

 [0] https://reproducible-builds.org/
 [1] https://reproducible-builds.org/specs/source-date-epoch/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[node-d3-fetch.diff.txt (text/plain, attachment)]

Message #10 received at 930768-close@bugs.debian.org (full text, mbox, reply):

From: Pirate Praveen <praveen@debian.org>

To: 930768-close@bugs.debian.org

Subject: Bug#930768: fixed in node-d3-fetch 1.1.2+dfsg-2

Date: Mon, 08 Jul 2019 09:49:42 +0000

Source: node-d3-fetch
Source-Version: 1.1.2+dfsg-2

We believe that the bug you reported is fixed in the latest version of
node-d3-fetch, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 930768@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Pirate Praveen <praveen@debian.org> (supplier of updated node-d3-fetch package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 08 Jul 2019 14:56:26 +0530
Source: node-d3-fetch
Architecture: source
Version: 1.1.2+dfsg-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>
Changed-By: Pirate Praveen <praveen@debian.org>
Closes: 930768
Changes:
 node-d3-fetch (1.1.2+dfsg-2) unstable; urgency=medium
 .
   * Team upload.
   * Make build reproducible (Closes: #930768)
   * Remove commonjs plugin in rollup.config.js (ES modules of d3-dsv is now
     installed and available)
   * Bump Standards-Version to 4.4.0 (no changes needed)
Checksums-Sha1:
 b21467772317b983c2c2ba73721d85b258ffcea7 2104 node-d3-fetch_1.1.2+dfsg-2.dsc
 19641a35f807574b29877a28dffa050882aa63fe 3492 node-d3-fetch_1.1.2+dfsg-2.debian.tar.xz
 5c640bd6081cee960c2d0f06a985167dc9401e7b 6387 node-d3-fetch_1.1.2+dfsg-2_source.buildinfo
Checksums-Sha256:
 24522cad982a96c30ce700db2a2a9f3572a70a3582563ffccc945d51b0e3791e 2104 node-d3-fetch_1.1.2+dfsg-2.dsc
 4120000120fab6a7cf2a1419da680983b70a8238a34cac79f54b63d02aa7d0f1 3492 node-d3-fetch_1.1.2+dfsg-2.debian.tar.xz
 35647087f71c71883196e58ab2eddb1d1b814f57057e73680e657620a9b2d1d0 6387 node-d3-fetch_1.1.2+dfsg-2_source.buildinfo
Files:
 88d121e323a09ecc7978bf96672c604a 2104 javascript optional node-d3-fetch_1.1.2+dfsg-2.dsc
 f19d8003a4ccda278ac662521f32e0b4 3492 javascript optional node-d3-fetch_1.1.2+dfsg-2.debian.tar.xz
 fe322d7f098d8eaadc50aa3f60461c48 6387 javascript optional node-d3-fetch_1.1.2+dfsg-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=IJtA
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.