Debian Bug report logs - #930769
node-d3-contour: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>

To: submit@bugs.debian.org

Subject: node-d3-contour: please make the build reproducible

Date: Thu, 20 Jun 2019 09:23:35 +0100

[Message part 1 (text/plain, inline)]

Source: node-d3-contour
Version: 1.3.2-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed
that node-d3-contour could not be built reproducibly.

This is because it was embedding the build date in a "banner"
comment:

│ │ │ │ │ -// https://d3js.org/d3-contour/ v1.3.2 Copyright 2020 Mike Bostock
│ │ │ │ │ +// https://d3js.org/d3-contour/ v1.3.2 Copyright 2019 Mike Bostock

Patch attached that uses SOURCE_DATE_EPOCH.

 [0] https://reproducible-builds.org/
 [1] https://reproducible-builds.org/specs/source-date-epoch/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[node-d3-contour.diff.txt (text/plain, attachment)]

Message #10 received at 930769-close@bugs.debian.org (full text, mbox, reply):

From: Pirate Praveen <praveen@debian.org>

To: 930769-close@bugs.debian.org

Subject: Bug#930769: fixed in node-d3-contour 1.3.2-2

Date: Mon, 08 Jul 2019 08:46:30 +0000

Source: node-d3-contour
Source-Version: 1.3.2-2

We believe that the bug you reported is fixed in the latest version of
node-d3-contour, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 930769@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Pirate Praveen <praveen@debian.org> (supplier of updated node-d3-contour package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 08 Jul 2019 13:51:32 +0530
Source: node-d3-contour
Architecture: source
Version: 1.3.2-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>
Changed-By: Pirate Praveen <praveen@debian.org>
Closes: 930769
Changes:
 node-d3-contour (1.3.2-2) unstable; urgency=medium
 .
   * Team upload.
   * Make build reproducible (Closes: #930769)
   * Remove commonjs plugin in rollup.config.js (ES module of d3-array is now
     installed)
   * Bump Standards-Version to 4.4.0 (no changes needed)
Checksums-Sha1:
 1b944115d9de8e48404dba6b0c4ad65318f70c04 2127 node-d3-contour_1.3.2-2.dsc
 2081088c581f405a5f236059da2417cee89ef46d 3372 node-d3-contour_1.3.2-2.debian.tar.xz
 7f1f70bab6f9b27e4b42b6c852f6507dba19e5db 6969 node-d3-contour_1.3.2-2_source.buildinfo
Checksums-Sha256:
 827fc90aa09a9c478b3bda5bcc44c9ac54f3ee2aa36875ed6aa27a0569a21874 2127 node-d3-contour_1.3.2-2.dsc
 b388c0fa1ec72c7158fb587928b337b8942130e4f48e1b18bbc23846a3b554e1 3372 node-d3-contour_1.3.2-2.debian.tar.xz
 dec30e932bd76c9c67516891f977a12b360dc0c82cce9096d4e928da992866c5 6969 node-d3-contour_1.3.2-2_source.buildinfo
Files:
 cf1198027773cd5caa0300acc647b2be 2127 javascript optional node-d3-contour_1.3.2-2.dsc
 95b79dc965ba5f292cff3240375b24ea 3372 javascript optional node-d3-contour_1.3.2-2.debian.tar.xz
 a73c29bcbb5b10966c1774e5d389ebb4 6969 javascript optional node-d3-contour_1.3.2-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=TZwD
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.