Your message dated Fri, 29 Nov 2024 18:05:48 +0000
with message-id <[email protected]>
and subject line Bug#1064519: fixed in flask-limiter 3.9.2-1
has caused the Debian Bug report #1064519,
regarding flask-limiter-docs: please make the build reproducible.
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1064519: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1064519
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: python-flask-limiter-doc
Version: 3.5.1-1
Severity: wishlist
Tags: patch
Dear Maintainer,
I'm an occasional volunteer contributor to the Reproducible Builds[1] project,
and recently noticed that python-flask-limiter-docs package failed to build
reproducibly during automated reproducible build testing[2] and also during a
reprotest build[3] on Salsa-CI.
The origin of the non-reproducibility demonstrated in both of those cases is
that a command[4] invoked by the Sphinx-based documentation project markup
produces nondeterministic output.
In particular, the output involves iteration over a set of HTTP methods
associated with a flask (Python web framework) view. The methods are
placed[5] on the relevant Python object by the werkzeug Python library, and
are stored within an Python set object that is unordered[6].
Because the storage (and therefore retrieval) ordering of the elements in the
set is based on Python's object hashing, it is non-deterministic by default
and varies at build-time.
We can fix this within Debian's packaging by configuring the PYTHONHASHSEED[7]
to use a deterministic value. The value of zero (0) appears to be most common
within existing debian/rules files, based on codesearch[8].
I'll open a merge request on Salsa to suggest that modification and will link
that to the bug here.
Regards,
James
[1] - https://reproducible-builds.org/
[2] -
https://tests.reproducible-builds.org/debian/rb-pkg/trixie/amd64/diffoscope-results/flask-limiter.html
[3] - https://salsa.debian.org/python-team/packages/flask-limiter/-/jobs/5335790
[4] -
https://sources.debian.org/src/flask-limiter/3.5.1-1/doc/source/cli.rst/#L60-L61
[5] -
https://sources.debian.org/src/python-werkzeug/3.0.1-2/src/werkzeug/routing/rules.py/#L477
[6] - https://docs.python.org/3.11/library/stdtypes.html#set-types-set-frozenset
[7] - https://docs.python.org/3/using/cmdline.html#envvar-PYTHONHASHSEED
[8] -
https://codesearch.debian.net/search?q=path%3Adebian%2Frules+PYTHONHASHSEED
--- End Message ---
--- Begin Message ---
Source: flask-limiter
Source-Version: 3.9.2-1
Done: Carsten Schoenert <[email protected]>
We believe that the bug you reported is fixed in the latest version of
flask-limiter, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Carsten Schoenert <[email protected]> (supplier of updated flask-limiter
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 29 Nov 2024 18:44:15 +0100
Source: flask-limiter
Architecture: source
Version: 3.9.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <[email protected]>
Changed-By: Carsten Schoenert <[email protected]>
Closes: 1064519
Changes:
flask-limiter (3.9.2-1) unstable; urgency=medium
.
* Team upload.
.
[ James Addison ]
* docs: configure a zero PYTHONHASHSEED value during the Sphinx
documentation build
(Closes: #1064519)
.
[ Carsten Schoenert ]
* [a400b26] New upstream version 3.9.2
Checksums-Sha1:
1d1e7881db52a2b04b3b99d48994d4eac8667233 3019 flask-limiter_3.9.2-1.dsc
5a31c1b48322c3541f3f83a8b54ea82cc600c6f7 311603 flask-limiter_3.9.2.orig.tar.gz
16429b827b2c452cc25f848c4d88bd089cc7cbe6 7056
flask-limiter_3.9.2-1.debian.tar.xz
759cecd2013cde77a4f1b488613468e247e353da 10203
flask-limiter_3.9.2-1_amd64.buildinfo
Checksums-Sha256:
e7607e11818a0ef9cb452a6b9d64799850b0c134ac972629cf911a9251288f0f 3019
flask-limiter_3.9.2-1.dsc
5d51e1c57accfb5dcb32175e35e9192438558e05bf2047a1f7372d1a909404d6 311603
flask-limiter_3.9.2.orig.tar.gz
6fceb6aa80bf9930ce8413d008475510d7b01022ec090b3d557c151bacb28375 7056
flask-limiter_3.9.2-1.debian.tar.xz
34f04dca7cd551eb0858a6c2142ca228bc18f1e1233944cf1d45b58746beb181 10203
flask-limiter_3.9.2-1_amd64.buildinfo
Files:
552b06f98bd8312ab03a5d35199dcb76 3019 python optional flask-limiter_3.9.2-1.dsc
1a7ea6f8b86e78d6c300a892f43df818 311603 python optional
flask-limiter_3.9.2.orig.tar.gz
0e5963c2d9bd61f1cbb20a64dc4c947a 7056 python optional
flask-limiter_3.9.2-1.debian.tar.xz
f8b81ce436e0b778fa0093daabcb47fb 10203 python optional
flask-limiter_3.9.2-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=9JH2
-----END PGP SIGNATURE-----
pgpUThd1cWSfu.pgp
Description: PGP signature
--- End Message ---
