Your message dated Wed, 29 Jul 2026 14:34:23 +0000
with message-id <[email protected]>
and subject line Bug#1138641: fixed in golang-github-cyclonedx-cyclonedx-go
0.11.0-1
has caused the Debian Bug report #1138641,
regarding golang-github-cyclonedx-cyclonedx-go: please make the build
reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1138641: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138641
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: golang-github-cyclonedx-cyclonedx-go
Version: 0.9.3-2
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: nocheck
X-Debbugs-Cc: [email protected]
Hi,
Whilst working on the Reproducible Builds effort [0], we noticed that
golang-github-cyclonedx-cyclonedx-go could not be built reproducibly.
This is because debian/rules deletes some files to prevent them from
being run during the testsuite. However, this means if the tests are
skipped, then the .deb package will _contain_ these files (although
they are, of course, not tested).
A patch is attached that removes these files regardless of whether
the tests are skipped by simply moving the 'rm' calls to a different
debian/rules target.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
--- a/debian/rules 2026-06-01 09:30:46.350877817 -0700
--- b/debian/rules 2026-06-01 09:46:10.175724771 -0700
@@ -4,7 +4,7 @@
dh $@ --builddirectory=_build --buildsystem=golang
# requires unpackaged github.com/terminalstatic/go-xsd-validate
-execute_before_dh_auto_test:
+execute_after_dh_auto_build:
rm -fv \
_build/src/github.com/CycloneDX/cyclonedx-go/validate_xml_test.go \
_build/src/github.com/CycloneDX/cyclonedx-go/cyclonedx_test.go \
--- End Message ---
--- Begin Message ---
Source: golang-github-cyclonedx-cyclonedx-go
Source-Version: 0.11.0-1
Done: Simon Josefsson <[email protected]>
We believe that the bug you reported is fixed in the latest version of
golang-github-cyclonedx-cyclonedx-go, which is due to be installed in the
Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Simon Josefsson <[email protected]> (supplier of updated
golang-github-cyclonedx-cyclonedx-go package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 29 Jul 2026 16:21:23 +0200
Source: golang-github-cyclonedx-cyclonedx-go
Architecture: source
Version: 0.11.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <[email protected]>
Changed-By: Simon Josefsson <[email protected]>
Closes: 1138641
Changes:
golang-github-cyclonedx-cyclonedx-go (0.11.0-1) unstable; urgency=medium
.
[ Simon Josefsson ]
* Drop newgateway pipeline
* Use gbp sign-tags
* Standards-Version: 4.7.4
* Use compat 14
.
[ Chris Lamb ]
* Make the build reproducible (Closes: #1138641)
Checksums-Sha1:
b96e34224d49800c8279ca404d9feb4b2c560e27 2774
golang-github-cyclonedx-cyclonedx-go_0.11.0-1.dsc
ddd87ee5217ebf2920c9521fa3dcc0faa57f64c9 238832
golang-github-cyclonedx-cyclonedx-go_0.11.0.orig.tar.xz
9677caa18a8d41c0b45510f5f20fcadd9c306a8c 2588
golang-github-cyclonedx-cyclonedx-go_0.11.0-1.debian.tar.xz
e6671cd1e900d4bb8a17a26a9d1a105caa38359a 1155992
golang-github-cyclonedx-cyclonedx-go_0.11.0-1.git.tar.xz
1499a70d90640d5a2eab0dbcecb502238ff290b2 17666
golang-github-cyclonedx-cyclonedx-go_0.11.0-1_source.buildinfo
Checksums-Sha256:
82b0dbd81dfc45946e9038dceca2d534bf3d9c5d550b3fe553c5fcb8e8c406e8 2774
golang-github-cyclonedx-cyclonedx-go_0.11.0-1.dsc
70976991bd3c03c78c192a9836f0aa03755ac6d9cdcb4bf258230658b3d0d05c 238832
golang-github-cyclonedx-cyclonedx-go_0.11.0.orig.tar.xz
1c6ad4122bc4ae89f213967d54773dacfe6915fee84ff040d8f74414efd4514e 2588
golang-github-cyclonedx-cyclonedx-go_0.11.0-1.debian.tar.xz
b0c7521adafbe379a959957dbc99157b595295c0248ab809242e9241c5419972 1155992
golang-github-cyclonedx-cyclonedx-go_0.11.0-1.git.tar.xz
ba59f9dfc792021b1177e5ff54bd8437f2510db8570872e86e0d67041af1d070 17666
golang-github-cyclonedx-cyclonedx-go_0.11.0-1_source.buildinfo
Files:
540d8e2a276376d70a55865cf4f5fcfd 2774 golang optional
golang-github-cyclonedx-cyclonedx-go_0.11.0-1.dsc
0307b0d5ba9ae8d8fb63869c8cb62a1b 238832 golang optional
golang-github-cyclonedx-cyclonedx-go_0.11.0.orig.tar.xz
e91ca5c9a9925562c95af49f3d968ac4 2588 golang optional
golang-github-cyclonedx-cyclonedx-go_0.11.0-1.debian.tar.xz
d0f14a74883c5d01d4ba62a9513fc09c 1155992 golang None
golang-github-cyclonedx-cyclonedx-go_0.11.0-1.git.tar.xz
c70905f458589f9d8c3a0070b27fd506 17666 golang optional
golang-github-cyclonedx-cyclonedx-go_0.11.0-1_source.buildinfo
Git-Tag-Info: tag=f822dcb11e578323a6ba3fd87885d52c32fda779
fp=a3cc9c870b9d310abad4cf2f51722b08fe4745a2
Git-Tag-Tagger: Simon Josefsson <[email protected]>
-----BEGIN PGP SIGNATURE-----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=MwEA
-----END PGP SIGNATURE-----
pgptBYqV2KpL8.pgp
Description: PGP signature
--- End Message ---
