The GitHub Actions job "Required Checks" on texera.git/feat/reproducible-builds has failed. Run started by GitHub user parshimers (triggered by parshimers).
Head commit for run: 43b91701fb0cc3c1681dff6ec7c9054b8f3e805d / Ian Maxon <[email protected]> feat(release): make release artifacts reproducible Previously, a variety of things caused Texera images built from the same source to not have the same binary output from invocation to invocation. Having this kind of binary build reproducibility is a requirement when performing Apache releases not on developer-owned hardware, because the release has to be verified on developer owned hardware by rebuilding it and getting the exact same artifact. This change allows all release artifacts to be binary reproducible with effectively one piece of information, though in two different formats. These build arguments contain the date: SOURCE_DATE_EPOCH and PACKAGE_SNAPSHOT. The first sets a uniform timestamp wherever a timestamp is present, and the second sets the snapshot of the apt repositories used in image builds. One other piece of information is implicit, but important in practice. Binary reproducibility is inherently dependent on the versions of tools used to produce said binaries. Most of them are pinned within the container build files, but the container builder itself is another piece of necessary information (e.g. buildah vs. buildx) for reproducing a build from its source and time. Co-Authored-By: Claude Opus 5.5 <[email protected]> Report URL: https://github.com/apache/texera/actions/runs/39304587632 With regards, GitHub Actions via GitBox
