Debian Bug report logs - #974124
less.js: please make the build reproducible

version graph

Package: src:less.js; Maintainer for src:less.js is Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>;

Reported by: "Chris Lamb" <lamby@debian.org>

Date: Tue, 10 Nov 2020 10:24:02 UTC

Severity: wishlist

Tags: patch

Found in version less.js/3.13.0+dfsg-1

Fixed in version less.js/3.13.0+dfsg-2

Done: Xavier Guimard <yadd@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#974124; Package src:less.js. (Tue, 10 Nov 2020 10:24:04 GMT) (full text, mbox, link).


Acknowledgement sent to "Chris Lamb" <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>. (Tue, 10 Nov 2020 10:24:04 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>
To: submit@bugs.debian.org
Subject: less.js: please make the build reproducible
Date: Tue, 10 Nov 2020 10:20:36 +0000
[Message part 1 (text/plain, inline)]
Source: less.js
Version: 3.13.0+dfsg-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0] we noticed that
less.js could not be built reproducibly.

This is because it embeds the current build date. Patch attached that
uses SOURCE_DATE_EPOCH [1] if available.

 [0] https://reproducible-builds.org/
 [1] https://reproducible-builds.org/specs/source-date-epoch/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-
[less.js.diff.txt (text/plain, attachment)]

Message sent on to "Chris Lamb" <lamby@debian.org>:
Bug#974124. (Tue, 15 Dec 2020 10:33:03 GMT) (full text, mbox, link).


Message #8 received at 974124-submitter@bugs.debian.org (full text, mbox, reply):

From: Xavier Guimard <noreply@salsa.debian.org>
To: 974124-submitter@bugs.debian.org
Subject: Bug#974124 marked as pending in less.js
Date: Tue, 15 Dec 2020 10:30:24 +0000
Control: tag -1 pending

Hello,

Bug #974124 in less.js reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/js-team/less.js/-/commit/757d0cae54e3c5490edf72b6b30b0e606a8b0fbf

------------------------------------------------------------------------
Make the build reproducible

Closes: #974124
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/974124



Added tag(s) pending. Request was from Xavier Guimard <noreply@salsa.debian.org> to 974124-submitter@bugs.debian.org. (Tue, 15 Dec 2020 10:33:03 GMT) (full text, mbox, link).


Reply sent to Xavier Guimard <yadd@debian.org>:
You have taken responsibility. (Tue, 15 Dec 2020 10:51:05 GMT) (full text, mbox, link).


Notification sent to "Chris Lamb" <lamby@debian.org>:
Bug acknowledged by developer. (Tue, 15 Dec 2020 10:51:05 GMT) (full text, mbox, link).


Message #15 received at 974124-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 974124-close@bugs.debian.org
Subject: Bug#974124: fixed in less.js 3.13.0+dfsg-2
Date: Tue, 15 Dec 2020 10:49:22 +0000
Source: less.js
Source-Version: 3.13.0+dfsg-2
Done: Xavier Guimard <yadd@debian.org>

We believe that the bug you reported is fixed in the latest version of
less.js, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 974124@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Xavier Guimard <yadd@debian.org> (supplier of updated less.js package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 15 Dec 2020 11:26:10 +0100
Source: less.js
Architecture: source
Version: 3.13.0+dfsg-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>
Changed-By: Xavier Guimard <yadd@debian.org>
Closes: 974124 977309
Changes:
 less.js (3.13.0+dfsg-2) unstable; urgency=medium
 .
   * Team upload
 .
   [ Xavier Guimard ]
   * Remove all dependencies except node-tslin and nodejs (Closes: #977309)
   * Declare compliance with policy 4.5.1
   * Add ctype=nodejs to component(s)
 .
   [ Chris Lamb ]
   * Make the build reproducible (Closes: #974124)
Checksums-Sha1: 
 09d6d9c02d1eaec52f1bd8a47010ae658463ccce 2670 less.js_3.13.0+dfsg-2.dsc
 5315088469d07856967d5d92fb5da562f177abcc 11836 less.js_3.13.0+dfsg-2.debian.tar.xz
Checksums-Sha256: 
 dfe2608251548e0a76b477f2d790513513ba180a4827e19a53237b9da8f8ea78 2670 less.js_3.13.0+dfsg-2.dsc
 0b9f0b9ea1901115780aaef50dcbd1fd0dfe66320fe0601fd6582ca3fafea692 11836 less.js_3.13.0+dfsg-2.debian.tar.xz
Files: 
 09e3152834a984a3688b88b482e30606 2670 javascript optional less.js_3.13.0+dfsg-2.dsc
 c1c2e079cb7dafde942be9f8824736d1 11836 javascript optional less.js_3.13.0+dfsg-2.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAl/YkCQACgkQ9tdMp8mZ
7uloRRAAnWNkh7uYDlMY9ECW5cDHpIZIenGC/yZDX9yXwvgLcMtw4/VuwrwWo0Fu
Q8RKme6iZ6/03VXHSoD70h1qdnfY1wGRBFtham1lPgmbfyyv++eoFCaeYV0c3/N1
/mWBejRWxoay05JyXxwgbaYMFsCpO/Mi5Bq60mgvxsurOBgF12qSvaga25c/V1eD
Sv2F+PyiQwEUjP4cKRXYiAyEpRRbjI4az5Jc6E1Zq9v+lKLZQMElRhd/0NAH9334
RWyHwW1n88DezLQbmgUrYtNxGM8i4uGyq+oT2lbXDS03PNdZL41oIzdBgPnpihtR
uMWwpRSOh8zNFy2btWfMIcSeK1CMEPItzgIWVQnlgbz5jF0JV378xMBsgbo6Z8D+
qqNzAm5JUQjMtwB3b2VRzuN6UHJSys9rJQVRWRmDhQV+Qr5j0B0G10WLPStr8VH/
nOqjSeUqq+cQDqrm1YJcgzWBtMS341zSKrsMrcTPSiELYOM6Wqulic2ohzZ6q7hf
BGHKOFBKv4JXT0PBBKl7YdNqm2c9SdgW/PqstB7BrNDC4knknVQf4zksJ+QXyo7U
SSDgoJ6Zww4Pdv9AIDSY/Sc0Z75mfRpWxzPqtFCZ01Uh1wb/i21NQc3nNCCxyEhf
CTtrPyN/HmfyzIBHklTIij2Ge9ed+UA/Zve7v1EKJzC1F4KNdjA=
=US/y
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Wed, 13 Jan 2021 07:25:51 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 10:57:57 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.