Hi, > I admit I'm also no real expert if its about reproducible builds. If we > are lucky we might once get a patch. Otherwise you have to make yourself > comfortable with diffoscope.
The reason for the failed job in reproducible-builds is that the runtime of the Sphinx documentation generation is embedded within the final HTML documentation. Naturally, diffoscope detects a difference in the package hash because of this. I need to take a closer look at this to figure out how to patch or resolve it. For now, I am uploading the new package, and I will release a new version in the coming days. Best regards, Karsten -----Ursprüngliche Nachricht----- Von: Andreas Tille <[email protected]> Gesendet: Donnerstag, 7. Mai 2026 16:36 An: Schöke, Karsten <[email protected]> Cc: [email protected] Betreff: Re: update pydicom Hi Karsten, Am Thu, May 07, 2026 at 12:43:45PM +0000 schrieb Schöke, Karsten: > I updated pydicom to the latest version due to CVE-2026-32711. Thank you for doing so. > Unfortunately, the upstream developer made quite a few changes, requiring a > lot of adjustments. > I uploaded everything to Salsa: > https://salsa.debian.org/med-team/pydicom/-/tree/master > Locally, it only builds with a few warnings, but the job has problems in the > Salsa CI: > https://salsa.debian.org/med-team/pydicom/-/jobs/9554086 > Unfortunately, I can't figure out why. I admit I'm also no real expert if its about reproducible builds. If we are lucky we might once get a patch. Otherwise you have to make yourself comfortable with diffoscope. > Who has time to look at the changes? LGTM. > If it's okay, please finalize the release and upload it, or give me DM upload > rights so I can finalize it myself. DM permissions granted (by accident I also granted permissions for pyensembl - I don't mind if you feel any need to upload this as well) > Thanks and best regards, > Karsten > > PS: I'm also preparing a PU for stable to fix the CVE. Nice. I've seen your name tag here in Hamburg. Will you show up at the weekend? Thank you for your contribution Andreas. -- https://fam-tille.de
