Your message dated Sat, 12 Aug 2023 08:37:24 +0000 with message-id <e1quk7g-00ca0w...@fasolo.debian.org> and subject line Bug#1035362: fixed in node-mocha 10.2.0+ds1+~cs29.5.1-1 has caused the Debian Bug report #1035362, regarding node-mocha: reproducible-builds: build date in various .js files to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 1035362: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1035362 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: node-mocha Severity: normal Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org The build date is embedded in various .js files: https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/node-mocha.html /usr/share/nodejs/workerpool/dist/worker.js ·*·@date····2023-03-24 vs. ·*·@date····2024-04-26 The attached patch fixes this by removing the code which adds the build date and removing the date from the relevent template file. If a date is for some reason necessary to embed in these files, another option might be to use the SOURCE_DATE_EPOCH environment variable: https://reproducible-builds.org/docs/source-date-epoch/ Unfortunately, there may be other non-deterministic issues which prevent node-mocha from building reproducibly, but applying this patch should significant reduce the noise generated from timestamps. Thanks for maintaining node-mocha! live well, vagrantFrom e3664f17ccb2003f012d503191b76a7fd1b368b5 Mon Sep 17 00:00:00 2001 From: Vagrant Cascadian <vagr...@reproducible-builds.org> Date: Mon, 1 May 2023 16:17:23 -0700 Subject: [PATCH 1/3] workerpool/src/*.js: Do not embed the date. --- workerpool/gulpfile.js | 1 - workerpool/src/header.js | 1 - 2 files changed, 2 deletions(-) diff --git a/workerpool/gulpfile.js b/workerpool/gulpfile.js index dba3ab1..29ea1a8 100644 --- a/workerpool/gulpfile.js +++ b/workerpool/gulpfile.js @@ -16,7 +16,6 @@ function createBanner() { var version = require('./package.json').version; // module version return String(fs.readFileSync('./src/header.js')) - .replace('@@date', today) .replace('@@version', version); } diff --git a/workerpool/src/header.js b/workerpool/src/header.js index 8beef14..c8bc50a 100644 --- a/workerpool/src/header.js +++ b/workerpool/src/header.js @@ -5,7 +5,6 @@ * Offload tasks to a pool of workers on node.js and in the browser. * * @version @@version - * @date @@date * * @license * Copyright (C) 2014-2022 Jos de Jong <wjosdej...@gmail.com> -- 2.39.2
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---Source: node-mocha Source-Version: 10.2.0+ds1+~cs29.5.1-1 Done: Yadd <y...@debian.org> We believe that the bug you reported is fixed in the latest version of node-mocha, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1035...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Yadd <y...@debian.org> (supplier of updated node-mocha package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 12 Aug 2023 11:32:02 +0400 Source: node-mocha Built-For-Profiles: nocheck Architecture: source Version: 10.2.0+ds1+~cs29.5.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-de...@lists.alioth.debian.org> Changed-By: Yadd <y...@debian.org> Closes: 1035362 Changes: node-mocha (10.2.0+ds1+~cs29.5.1-1) unstable; urgency=medium . * Team upload . [ Vagrant Cascadian ] * Make build reproducible (build date in various .js files) (Closes: #1035362) . [ Yadd ] * Declare compliance with policy 4.6.2 * New upstream version 10.2.0+ds1+~cs29.5.1 * Unfuzz patches Checksums-Sha1: d7005d85c74379ff8ba23519fbafbfe0cdc02694 4988 node-mocha_10.2.0+ds1+~cs29.5.1-1.dsc c614c031bfcb1e47e1fc2da08abf14fa9a2d3f54 34880 node-mocha_10.2.0+ds1+~cs29.5.1.orig-flat.tar.xz cbf214769d6905794fbcabc4410e03181f0bef04 17188 node-mocha_10.2.0+ds1+~cs29.5.1.orig-log-symbols.tar.xz d21ae857c3c12ef1a9577b08071b9f8cfb0bbe83 13816 node-mocha_10.2.0+ds1+~cs29.5.1.orig-types-mocha.tar.xz 46f37638472bc1f8284b9de96703e307ef5b6a62 104836 node-mocha_10.2.0+ds1+~cs29.5.1.orig-workerpool.tar.xz 99190f73018b9ab0b174447a9087e04b2f94189b 60516 node-mocha_10.2.0+ds1+~cs29.5.1.orig-yargs-unparser.tar.xz c8faf19f8e8adbca1d12015a080b76f01c2e9f4f 1484408 node-mocha_10.2.0+ds1+~cs29.5.1.orig.tar.xz 33d4c9e6c12fc78e0f650c3bea5334ede572042d 14644 node-mocha_10.2.0+ds1+~cs29.5.1-1.debian.tar.xz Checksums-Sha256: eba5c6a25e46b41e0022397596ba27eb83a3e76845836bcc18eaa4f761f0d160 4988 node-mocha_10.2.0+ds1+~cs29.5.1-1.dsc f301b3310cf04424650cc69372e102c7324f46ee926dc646fdb7b84179074330 34880 node-mocha_10.2.0+ds1+~cs29.5.1.orig-flat.tar.xz a79bf5f15aaf0b96e8fa64abd3f0de79a4c7cdd00da15ffa8417bb4640547b19 17188 node-mocha_10.2.0+ds1+~cs29.5.1.orig-log-symbols.tar.xz e2c24557535455603a0be49b9cb1fceb65de59eda8cc1c75ba047cd08a324984 13816 node-mocha_10.2.0+ds1+~cs29.5.1.orig-types-mocha.tar.xz 2d2e439aaabb2ce74a67536827a79177e2136d231d956559ff9b1bb3212f49f8 104836 node-mocha_10.2.0+ds1+~cs29.5.1.orig-workerpool.tar.xz 1092e86ee0737e35e49affe7c147848fb627015c7b8aaedbf409524a4a09b3c3 60516 node-mocha_10.2.0+ds1+~cs29.5.1.orig-yargs-unparser.tar.xz a10c1a6712bfb7110d3cac1833695fc320b37e8c51c9f8fc75d51e1352900d94 1484408 node-mocha_10.2.0+ds1+~cs29.5.1.orig.tar.xz 9232f2c969fa358ab97b8cf746139a7fc92437187867d30256512c8d59763693 14644 node-mocha_10.2.0+ds1+~cs29.5.1-1.debian.tar.xz Files: 352041d14cdd9bf2cf3ef1caa7b8f4ac 4988 javascript optional node-mocha_10.2.0+ds1+~cs29.5.1-1.dsc 6f8154b530d017ed431a9ed044f8cda1 34880 javascript optional node-mocha_10.2.0+ds1+~cs29.5.1.orig-flat.tar.xz 6098aa80dda0cd04a0956b870e4db62b 17188 javascript optional node-mocha_10.2.0+ds1+~cs29.5.1.orig-log-symbols.tar.xz c3aab10b84c49e2b68c3922a29c7a9a7 13816 javascript optional node-mocha_10.2.0+ds1+~cs29.5.1.orig-types-mocha.tar.xz 18800e07784d9aeec28ef47ccef452e4 104836 javascript optional node-mocha_10.2.0+ds1+~cs29.5.1.orig-workerpool.tar.xz db417bcc47a7693b010a44eb2aa0885e 60516 javascript optional node-mocha_10.2.0+ds1+~cs29.5.1.orig-yargs-unparser.tar.xz 39c7f745a654ac306b03918271cc1ba4 1484408 javascript optional node-mocha_10.2.0+ds1+~cs29.5.1.orig.tar.xz cbba7a0da19c1fc5b9b704762b627c9f 14644 javascript optional node-mocha_10.2.0+ds1+~cs29.5.1-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmTXNooACgkQ9tdMp8mZ 7unHXw/9HTOo2YjGjB6vWQTQhgxq4Rfxl+0iCtqXxneVCOADvauu6znru3E/hN7x tOfE8312rBffZ49uIWi6bL17dEFbgTc8UH10f5o7ID/oYCT5YlbOtZlnLfbvnybF T/1ALcNcNrORcuSLdzfhlu1Rh0PRUYeQlE8u1YY/l1Bww6UL55K03rHdeb5Hi5aj zph5I2iIYqc8sNlCPyFZt6cuAV/8NEqCDUqp4GCJQ1HNbg5VNfdvJl+Qxctl42IQ RUYtjE/OTXVE9nnHJJQwsSIdPlMoH7eeT1iXDOEt0OW8SeJRAi83RkbzFtMk2SXr v6fmIyUeDvL1mdZ2saQ4D1+gcniaoYj60odJ3vQX92xp5py/8GuvtJsm80T3mynp HeINNiG6EEVnklabZL1HPXLU/zthkt6Mhg1Keg1r3Pn/Crp1OQXtSShgEiurQCDC hsx7phPSKRgSudRYXySYLNejs96JO8lFBpaLn0xiX9ZI2x1/+QMwkAflW/VnyOEV ujMil22T70GysnYg0R+QWvSahJobPb+Q2EGxGSsboC4qa4TeHofCCVZGbkyCXm6w 80eJvZ+9iReTn0XekKWnyPtksuhnTEweLUJfqQ/lmXUbLDDWOqQk7vYYinPaEJSv cYHLkaUU9AWmHbq0VYJgpdaoi1TIGrUynzs4GJee8XGOqrjpdR0= =dCwD -----END PGP SIGNATURE-----
--- End Message ---
-- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
