Debian Bug report logs -
#975958
requirejs: please make the build reproducible
Reported by: "Chris Lamb" <lamby@debian.org>
Date: Fri, 27 Nov 2020 10:45:04 UTC
Severity: wishlist
Tags: patch
Found in version requirejs/2.3.6+ds-1
Fixed in version requirejs/2.3.6+ds+~2.1.34-1
Done: Yadd <yadd@debian.org>
Bug is archived. No further changes may be made.
Toggle useless messages
Report forwarded
to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#975958; Package src:requirejs.
(Fri, 27 Nov 2020 10:45:06 GMT) (full text, mbox, link).
Acknowledgement sent
to "Chris Lamb" <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>.
(Fri, 27 Nov 2020 10:45:06 GMT) (full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Source: requirejs
Version: 2.3.6+ds-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org
Hi,
Whilst working on the Reproducible Builds effort [0] we noticed that
requirejs could not be built reproducibly.
This is because the build system was adding in the current build date
and time to the generated files:
- version = '2.3.6 Thu, 26 Nov 2020 10:12:52 GMT',
+ version = '2.3.6 Wed, 29 Dec 2021 16:36:37 GMT',
Patch attached that uses SOURCE_DATE_EPOCH.
[0] https://reproducible-builds.org/
[1] https://reproducible-builds.org/specs/source-date-epoch/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-
[requirejs.diff.txt (text/plain, attachment)]
Message sent on
to "Chris Lamb" <lamby@debian.org>:
Bug#975958.
(Fri, 27 Nov 2020 11:09:05 GMT) (full text, mbox, link).
Message #8 received at 975958-submitter@bugs.debian.org (full text, mbox, reply):
Control: tag -1 pending
Hello,
Bug #975958 in requirejs reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:
https://salsa.debian.org/js-team/requirejs/-/commit/614e8c144daf3d36249ed5ea1a7186e5d67e09d0
------------------------------------------------------------------------
Make the build reproducible
Closes: #975958
------------------------------------------------------------------------
(this message was generated automatically)
--
Greetings
https://bugs.debian.org/975958
Added tag(s) pending.
Request was from Xavier Guimard <noreply@salsa.debian.org>
to 975958-submitter@bugs.debian.org.
(Fri, 27 Nov 2020 11:09:05 GMT) (full text, mbox, link).
Reply sent
to Yadd <yadd@debian.org>:
You have taken responsibility.
(Thu, 07 Jul 2022 13:36:03 GMT) (full text, mbox, link).
Notification sent
to "Chris Lamb" <lamby@debian.org>:
Bug acknowledged by developer.
(Thu, 07 Jul 2022 13:36:03 GMT) (full text, mbox, link).
Message #15 received at 975958-close@bugs.debian.org (full text, mbox, reply):
Source: requirejs
Source-Version: 2.3.6+ds+~2.1.34-1
Done: Yadd <yadd@debian.org>
We believe that the bug you reported is fixed in the latest version of
requirejs, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 975958@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Yadd <yadd@debian.org> (supplier of updated requirejs package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 07 Jul 2022 15:09:03 +0200
Source: requirejs
Architecture: source
Version: 2.3.6+ds+~2.1.34-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>
Changed-By: Yadd <yadd@debian.org>
Closes: 975958
Changes:
requirejs (2.3.6+ds+~2.1.34-1) unstable; urgency=medium
.
[ Chris Lamb ]
* Make the build reproducible (Closes: #975958)
.
[ Debian Janitor ]
* Apply multi-arch hints.
+ libjs-requirejs, node-requirejs: Add Multi-Arch: foreign.
.
[ Yadd ]
* Declare compliance with policy 4.6.1
* Add ctype=nodejs to component(s)
* Fix debian/watch
* Update lintian overrides
* Use uscan group and repack
Checksums-Sha1:
ee90ef5a2ac55a0b04050ec171905a2db65e71fe 2530 requirejs_2.3.6+ds+~2.1.34-1.dsc
2c6c16aaa050ef110374439363b3f9cb7a5a6c37 4464 requirejs_2.3.6+ds+~2.1.34.orig-types-requirejs.tar.xz
a94e92da4d29e97db2fa8c5ba64d2242c142f047 7320336 requirejs_2.3.6+ds+~2.1.34.orig.tar.xz
d45e7c8e4fbff7672c6fc9bd4c24b6485a1fac23 7164 requirejs_2.3.6+ds+~2.1.34-1.debian.tar.xz
Checksums-Sha256:
5666fafcb7b60917043df5a4164f5c2589c684d2f7995bf84dad3900384235b0 2530 requirejs_2.3.6+ds+~2.1.34-1.dsc
3a12a3a7b1561ee06de3e74a39c027980f5bb70a3233cf71542350a4e8507642 4464 requirejs_2.3.6+ds+~2.1.34.orig-types-requirejs.tar.xz
d122aa9f215b220587f2e68b5bd5ff33a1c6f4f5683c92bf437bb502cc4c79af 7320336 requirejs_2.3.6+ds+~2.1.34.orig.tar.xz
6e129ab6af8a2e712358490fce9737776f84d71eaaebda2f71a088421e97cd90 7164 requirejs_2.3.6+ds+~2.1.34-1.debian.tar.xz
Files:
df5de327638a185bca9cc2a480bc95e5 2530 javascript optional requirejs_2.3.6+ds+~2.1.34-1.dsc
d9aa991cef47fe788d040c6e66a91063 4464 javascript optional requirejs_2.3.6+ds+~2.1.34.orig-types-requirejs.tar.xz
49cb8ca6f4d4aff78ff452d219d3266a 7320336 javascript optional requirejs_2.3.6+ds+~2.1.34.orig.tar.xz
fd9cb166d93cf987d36164616e9b13c7 7164 javascript optional requirejs_2.3.6+ds+~2.1.34-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=SLAN
-----END PGP SIGNATURE-----
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Wed, 10 Aug 2022 07:26:43 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Wed May 17 10:57:47 2023;
Machine Name:
buxtehude
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.