Your message dated Sun, 28 Nov 2021 21:07:07 +0000
with message-id <e1mrro7-000816...@fasolo.debian.org>
and subject line Bug#1000769: fixed in node-marked 4.0.5+ds-2
has caused the Debian Bug report #1000769,
regarding node-marked: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1000769: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000769
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: node-marked
Version: 4.0.5+ds-1
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org
Hi,
Whilst working on the Reproducible Builds effort [0] we noticed that
node-marked could not be built reproducibly.
This is because the existing reproducible.patch is not complete and
misses a copyright notice that has a nondeterministic date. A patch
to the current packaging is attached, but as this is a "diff of a
diff", I have also attached an updated reproducible.patch.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/reproducible.patch 2021-11-28 11:34:20.634085499 -0800
--- b/debian/patches/reproducible.patch 2021-11-28 11:37:35.838392663 -0800
@@ -3,9 +3,18 @@
Forwarded: not-needed
Last-Update: 2020-12-01
---- a/rollup.config.js
-+++ b/rollup.config.js
-@@ -19,7 +19,7 @@
+--- node-marked-4.0.5+ds.orig/rollup.config.js
++++ node-marked-4.0.5+ds/rollup.config.js
+@@ -19,7 +19,7 @@ The code in this file is generated from
+ license({
+ banner: `
+ marked - a markdown parser
+-Copyright (c) 2011-${new Date().getFullYear()}, Christopher Jeffrey. (MIT
Licensed)
++Copyright (c) 2011-${(new Date(process.env.SOURCE_DATE_EPOCH ?
(process.env.SOURCE_DATE_EPOCH * 1000) : new Date().getTime())).getFullYear()},
Christopher Jeffrey. (MIT Licensed)
+ https://github.com/markedjs/marked
+ `
+ }),
+@@ -46,7 +46,7 @@ The code in this file is generated from
license({
banner: `
marked - a markdown parser
--- a/rollup.config.js 2021-11-28 11:34:20.634085499 -0800
--- b/rollup.config.js 2021-11-28 11:37:32.802388038 -0800
@@ -46,7 +46,7 @@
license({
banner: `
marked - a markdown parser
-Copyright (c) 2011-${new Date().getFullYear()}, Christopher Jeffrey. (MIT
Licensed)
+Copyright (c) 2011-${(new Date(process.env.SOURCE_DATE_EPOCH ?
(process.env.SOURCE_DATE_EPOCH * 1000) : new Date().getTime())).getFullYear()},
Christopher Jeffrey. (MIT Licensed)
https://github.com/markedjs/marked
`
}),
Description: make build reproducible
Author: Xavier Guimard <y...@debian.org>
Forwarded: not-needed
Last-Update: 2020-12-01
--- node-marked-4.0.5+ds.orig/rollup.config.js
+++ node-marked-4.0.5+ds/rollup.config.js
@@ -19,7 +19,7 @@ The code in this file is generated from
license({
banner: `
marked - a markdown parser
-Copyright (c) 2011-${new Date().getFullYear()}, Christopher Jeffrey. (MIT Licensed)
+Copyright (c) 2011-${(new Date(process.env.SOURCE_DATE_EPOCH ? (process.env.SOURCE_DATE_EPOCH * 1000) : new Date().getTime())).getFullYear()}, Christopher Jeffrey. (MIT Licensed)
https://github.com/markedjs/marked
`
}),
@@ -46,7 +46,7 @@ The code in this file is generated from
license({
banner: `
marked - a markdown parser
-Copyright (c) 2011-${new Date().getFullYear()}, Christopher Jeffrey. (MIT Licensed)
+Copyright (c) 2011-${(new Date(process.env.SOURCE_DATE_EPOCH ? (process.env.SOURCE_DATE_EPOCH * 1000) : new Date().getTime())).getFullYear()}, Christopher Jeffrey. (MIT Licensed)
https://github.com/markedjs/marked
`
}),
--- End Message ---
--- Begin Message ---
Source: node-marked
Source-Version: 4.0.5+ds-2
Done: Yadd <y...@debian.org>
We believe that the bug you reported is fixed in the latest version of
node-marked, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1000...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Yadd <y...@debian.org> (supplier of updated node-marked package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 28 Nov 2021 21:40:36 +0100
Source: node-marked
Architecture: source
Version: 4.0.5+ds-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers
<pkg-javascript-de...@lists.alioth.debian.org>
Changed-By: Yadd <y...@debian.org>
Closes: 1000769
Changes:
node-marked (4.0.5+ds-2) unstable; urgency=medium
.
* Team upload
.
[ Chris Lamb ]
* Update reproducible patch (Closes: #1000769)
Checksums-Sha1:
413dd91f805bf81c7dd6a598bcd5c1456d3d0ec1 2611 node-marked_4.0.5+ds-2.dsc
8cefa882fe56b1d0d18cf0b4f3e50fa5e7384571 20360
node-marked_4.0.5+ds-2.debian.tar.xz
Checksums-Sha256:
b24a1724b9d7515a6dd81898b3b93920ab1f3c3ba17a818d59d264af257b69bb 2611
node-marked_4.0.5+ds-2.dsc
3e3e81f945cb92fda054911f8e0706204b3011f6427e83f1030860748ae78d73 20360
node-marked_4.0.5+ds-2.debian.tar.xz
Files:
07af46470f3ccc72c16b939cfd5769cc 2611 javascript optional
node-marked_4.0.5+ds-2.dsc
e69af675c862a13d4e1ac4d53ad7b506 20360 javascript optional
node-marked_4.0.5+ds-2.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmGj6YgACgkQ9tdMp8mZ
7umRvxAAnVgdiOhvJePsq55vIll7bm/psTQO5jH0cV277DMNMv3AXW7Qpl558zOu
LZ8Ysez+Nek9mgW3GW5UncxlSiSu2PLjYT3uyhkzeuHySiTUzPTwwOTElCEPkH9n
zdbJ305a/rudMpSjyA/5/T02heGkTSmkKGCXjwaRC6fZuBH9w84Aw8kJbr45dNdv
/2uBmX0dT/zBGKwmCE/12Pa/yccTN+Bf+SjZcxlwyoSOOr2kL8arEEtetKH4GpXi
whjRl4nAVWq0Vv6OaRewFAqUWKKi6ERtJBQWQVLBMXv3lMiGSbaJ+taYcj2tMlrl
d4qLV5ij5k7JrY1SKbQrI4P+8HAg0wUZE0TEKR8f5Al5w4wz3yyO6vJTztPHUM3l
dPCEUUl4mfJdX/H18ybQgzL/BQUb5HiYVRWM39y3lTU935BMU+/cWXKZH5riWSsB
edlWxWDUS/P6KLdc7B3D93GoebAAyHrkjxG+oZmGSoMy49sfr++T/XxMO6+E6am+
O84tVkVBMs9AnHK3NfM5WgtZwtjSyI+bufgXj4ffGN2mQ+kb5USPDG0G8tERdqk+
4bR+9HM77Aq2jQCy5AlJhm7ZbclMI6c83R76XzwbHowyAozty8V9ESXMFS1cOYOF
L2p2Y3ckYR5p26q/V24hR7hLIsBVxzvd1sBEgTbKCqYdTItY+js=
=cC8h
-----END PGP SIGNATURE-----
--- End Message ---
--
Pkg-javascript-devel mailing list
Pkg-javascript-devel@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
