Robin Candau pushed to branch main at Arch Linux / Packaging / Packages / pdftk


Commits:
288224bc by Robin Candau at 2025-02-13T21:34:08+01:00
upgpkg: 3.3.3-4: Strip non-deterministic information from jar files (e.g. 
timestamps) for reproducible builds

- - - - -


2 changed files:

- .SRCINFO
- PKGBUILD


Changes:

=====================================
.SRCINFO
=====================================
@@ -1,18 +1,17 @@
 pkgbase = pdftk
        pkgdesc = Command-line tool for working with PDFs
        pkgver = 3.3.3
-       pkgrel = 3
+       pkgrel = 4
        url = https://gitlab.com/pdftk-java/pdftk
        arch = any
        license = GPL
        makedepends = jdk17-openjdk
        makedepends = gradle
+       makedepends = strip-nondeterminism
        depends = bcprov
        depends = java-commons-lang
        depends = java-runtime-headless>=8
        depends = sh
-       optdepends = bcprov: support for AES encrypted and signed PDF documents
-       optdepends = java-commons-lang: burst, dump_data, dump_data_fields and 
update_info operation support
        source = 
https://gitlab.com/pdftk-java/pdftk/-/archive/v3.3.3/pdftk-v3.3.3.tar.bz2
        source = pdftk.sh
        sha512sums = 
48173d0c4698bc984221b56dff3e6434df7cf144dddfdbf684f8fa28b9eacfd0ebf9ebca0b87df3f9534a1ed13caa4c0866bd3e7a8cd06a21b46dfaedda9ea21


=====================================
PKGBUILD
=====================================
@@ -1,7 +1,7 @@
 # Maintainer: Jonas Witschel <diabo...@archlinux.org>
 pkgname=pdftk
 pkgver=3.3.3
-pkgrel=3
+pkgrel=4
 pkgdesc='Command-line tool for working with PDFs'
 arch=('any')
 url='https://gitlab.com/pdftk-java/pdftk'
@@ -9,7 +9,7 @@ license=('GPL')
 _jrever=8
 _jdkver=17
 depends=('bcprov' 'java-commons-lang' "java-runtime-headless>=${_jrever}" 'sh')
-makedepends=("jdk${_jdkver}-openjdk" 'gradle')
+makedepends=("jdk${_jdkver}-openjdk" 'gradle' 'strip-nondeterminism')
 source=("$url/-/archive/v$pkgver/$pkgname-v$pkgver.tar.bz2" 'pdftk.sh')
 
sha512sums=('48173d0c4698bc984221b56dff3e6434df7cf144dddfdbf684f8fa28b9eacfd0ebf9ebca0b87df3f9534a1ed13caa4c0866bd3e7a8cd06a21b46dfaedda9ea21'
             
'd9b83165027de5cfe7b452cd9080384f5bd36e58ed0fd041a737d37f1a843fc75588fbac0f93fc77fb6ae1826c7df335a8b68db8265b707c4e909eed1c7bed82')
@@ -19,6 +19,10 @@ build() {
        export PATH="/usr/lib/jvm/java-${_jdkver}-openjdk/bin:$PATH"
        export JAVA_HOME="/usr/lib/jvm/java-${_jdkver}-openjdk"
        gradle -Dorg.gradle.daemon=false build
+
+       # Strip non-deterministic information from the jar file (e.g. 
timestamps)
+       # This is required for reproducible builds
+       find . -name "$pkgname.jar" -exec strip-nondeterminism {} +
 }
 
 check() {



View it on GitLab: 
https://gitlab.archlinux.org/archlinux/packaging/packages/pdftk/-/commit/288224bc58926ffadfb2aeb23e87fa967be255f1

-- 
View it on GitLab: 
https://gitlab.archlinux.org/archlinux/packaging/packages/pdftk/-/commit/288224bc58926ffadfb2aeb23e87fa967be255f1
You're receiving this email because of your account on gitlab.archlinux.org.


Reply via email to