Your message dated Sat, 24 Oct 2026 22:21:06 +0000
with message-id <[email protected]>
and subject line Bug#1135269: fixed in ruby-timers 4.4.0-2.1
has caused the Debian Bug report #1135269,
regarding ruby-timers: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1135269: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1135269
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: ruby-timers
Version: 4.4.0-2
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: environment
X-Debbugs-Cc: [email protected]
Hi,
Whilst working on the Reproducible Builds effort [0], we noticed that
ruby-timers could not be built reproducibly.
This is because the .gemspec file gets evaluated, causing this line:
File.expand_path("~/.gem/release.pem")
... to be rendered in the binary package, leading to the package
embedding the build user's home directory.
Patch attached.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
--- a/debian/patches/reproducible-build.patch 1969-12-31 16:00:00.000000000
-0800
--- b/debian/patches/reproducible-build.patch 2026-04-30 04:37:52.593631918
-0700
@@ -0,0 +1,16 @@
+Description: Make the build reproducible
+Author: Chris Lamb <[email protected]>
+Last-Update: 2026-04-30
+
+--- ruby-timers-4.4.0.orig/timers.gemspec
++++ ruby-timers-4.4.0/timers.gemspec
+@@ -10,9 +10,6 @@ Gem::Specification.new do |spec|
+ spec.authors = ["Tony Arcieri", "Samuel Williams", "Donovan Keme",
"Wander Hillen", "Utenmiki", "Jeremy Hinegardner", "Sean Gregory", "Chuck
Remes", "Olle Jonsson", "Ron Evans", "Tommy Ong Gia Phu", "Larry Lv", "Lin
Jen-Shin", "Ryunosuke Sato", "Atul Bhosale", "Bruno Enten", "Dimitrij
Denissenko", "Jesse Cooke", "Klaus Trainer", "Lavir the Whiolet", "Mike
Bourgeous", "Nicholas Evans", "Patrik Wenger", "Peter Goldstein", "Ryan
LeCompte", "Tim Smith", "Vít Ondruch", "Will Jessop", "Yoshiki Takagi"]
+ spec.license = "MIT"
+
+- spec.cert_chain = ["release.cert"]
+- spec.signing_key = File.expand_path("~/.gem/release.pem")
+-
+ spec.homepage = "https://github.com/socketry/timers";
+
+ spec.metadata = {
--- a/debian/patches/series 1969-12-31 16:00:00.000000000 -0800
--- b/debian/patches/series 2026-04-30 04:37:51.255121707 -0700
@@ -0,0 +1 @@
+reproducible-build.patch
--- End Message ---
--- Begin Message ---
Source: ruby-timers
Source-Version: 4.4.0-2.1
Done: Vagrant Cascadian <[email protected]>
We believe that the bug you reported is fixed in the latest version of
ruby-timers, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Vagrant Cascadian <[email protected]> (supplier of updated
ruby-timers package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 14 Oct 2026 14:39:23 -0700
Source: ruby-timers
Architecture: source
Version: 4.4.0-2.1
Distribution: unstable
Urgency: medium
Maintainer: Debian Ruby Team
<[email protected]>
Changed-By: Vagrant Cascadian <[email protected]>
Closes: 1135269
Changes:
ruby-timers (4.4.0-2.1) unstable; urgency=medium
.
* Non-maintainer upload.
.
[ Chris Lamb ]
* debian/patches: timers.gemspec: Drop cert_chain and signing_key for
reproducible builds. (Closes: #1135269)
Checksums-Sha1:
e441026216f98e6e33f07498abd7724fd38c9bf0 1445 ruby-timers_4.4.0-2.1.dsc
fe97ada032cb7d00ed2e9a85eecdee3627bef224 3820
ruby-timers_4.4.0-2.1.debian.tar.xz
0d6bff4233aeb0eaab0602131e400c3f00f059c9 6125
ruby-timers_4.4.0-2.1_amd64.buildinfo
Checksums-Sha256:
89df1f21dbb8b34bb1c05d4bcc990059de9ceb318fd5690b2ee04328a6838c83 1445
ruby-timers_4.4.0-2.1.dsc
cd9127d674336138e3ccf71e15f2672002abad3f0b3b7e9a1a0540830d080022 3820
ruby-timers_4.4.0-2.1.debian.tar.xz
a7980a2e6b331ddd6eb08394d8338d6f729504531aaa29c1524a4c8defa23273 6125
ruby-timers_4.4.0-2.1_amd64.buildinfo
Files:
1ccc36c824b2fd9ac9cfc57ab5b0941a 1445 ruby optional ruby-timers_4.4.0-2.1.dsc
699f0140114e5a7bc41fc9216c790bde 3820 ruby optional
ruby-timers_4.4.0-2.1.debian.tar.xz
4cdccdc9140f6331fc659e378a9ab384 6125 ruby optional
ruby-timers_4.4.0-2.1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iJYEARYKAD4WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCas/3yiAcdmFncmFudEBy
ZXByb2R1Y2libGUtYnVpbGRzLm9yZwAKCRDcUY/If5cWqi9GAP9W9lWliMLvd0MO
/bBQHqoLaqX9gJrQDuIfYf9lEn8VJAD/RR3pILvllQGSh2qZ5quYlEZUtLUPRnsN
2a9u6M5c8wk=
=PQnv
-----END PGP SIGNATURE-----
pgpnpOd8wvkoQ.pgp
Description: PGP signature
--- End Message ---
