Your message dated Sat, 27 Jan 2024 21:21:57 +0000
with message-id <[email protected]>
and subject line Bug#1035365: fixed in lombok 1.18.24-2
has caused the Debian Bug report #1035365,
regarding lombok: reproducible-builds: build timestamps in files inside of .jar
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1035365: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1035365
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: lombok
Severity: normal
Tags: patch
User: [email protected]
Usertags: timestamps timezone
X-Debbugs-Cc: [email protected]
The build timestamp is embedded in various files inside
/usr/share/java/lombok-1.18.24.jar:
https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/lombok.html
META-INF/services/lombok.core.LombokApp
#·Thu,·25·Apr·2024·11:27:09·-1200
vs.
#·Sat,·25·Mar·2023·07:05:45·+1400
The attached patch fixes this by removing the code in
SpiProcessorPersistence.java which adds the build timestamp.
If a date is for some reason necessary to embed in these files, another
option might be to use the SOURCE_DATE_EPOCH environment variable:
https://reproducible-builds.org/docs/source-date-epoch/
Unfortunately, there may be other non-deterministic issues which prevent
lombok from building reproducibly, but applying this patch should
significantly reduce the noise generated from timestamps.
Thanks for maintaining lombok!
live well,
vagrant
From 9e2381870db66336dee2ac7b1ad6ef00f131cdac Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <[email protected]>
Date: Mon, 1 May 2023 16:27:59 -0700
Subject: [PATCH 1/3] src/spiProcessor/lombok/spi/SpiProcessorPersistence.java:
Avoid embedding the build timestamp.
https://reproducible-builds.org/docs/timestamps/
---
src/spiProcessor/lombok/spi/SpiProcessorPersistence.java | 1 -
1 file changed, 1 deletion(-)
diff --git a/src/spiProcessor/lombok/spi/SpiProcessorPersistence.java b/src/spiProcessor/lombok/spi/SpiProcessorPersistence.java
index 794473a..2d91b02 100644
--- a/src/spiProcessor/lombok/spi/SpiProcessorPersistence.java
+++ b/src/spiProcessor/lombok/spi/SpiProcessorPersistence.java
@@ -141,7 +141,6 @@ class SpiProcessorPersistence {
FileObject output = filer.createResource(StandardLocation.CLASS_OUTPUT, "", path + serviceName);
Writer writer = output.openWriter();
writer.write("# Generated by " + name + "\n");
- writer.write("# " + new SimpleDateFormat("EEE, d MMM yyyy HH:mm:ss Z", Locale.US).format(new Date()) + "\n");
writer.write(value);
writer.close();
}
--
2.39.2
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: lombok
Source-Version: 1.18.24-2
Done: tony mancill <[email protected]>
We believe that the bug you reported is fixed in the latest version of
lombok, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
tony mancill <[email protected]> (supplier of updated lombok package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 27 Jan 2024 12:19:09 -0800
Source: lombok
Architecture: source
Version: 1.18.24-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers
<[email protected]>
Changed-By: tony mancill <[email protected]>
Closes: 1035365 1057524
Changes:
lombok (1.18.24-2) unstable; urgency=medium
.
* Team upload
.
[ Vladimir Petko ]
* d/p/java21_compatibility.patch: add eclipse-jface-text to the
classpath to fix the ftbfs (Closes: #1057524).
.
[ Debian Janitor ]
* Apply multi-arch hints. + liblombok-java: Add Multi-Arch: foreign.
.
[ tony mancill ]
* Set Rules-Requires-Root: no in debian/control
* Freshen years in debian/copyright
* Use debian/watch version 4
* Bump Standards-Version to 4.6.2
* Apply reproducible builds patch for SpiProcessorPersistence class
(Closes: #1035365)
Checksums-Sha1:
e0f43d0e67f62432e082c2d89e06bc976a1b1e1d 2259 lombok_1.18.24-2.dsc
5232c5aeae86876da67b94d48a6995b747e7f1db 11184 lombok_1.18.24-2.debian.tar.xz
109e40ea31b994ed75277df835f2978cde48da18 16651 lombok_1.18.24-2_amd64.buildinfo
Checksums-Sha256:
1faba9b1f5021d624c209de49a72a62a413b644fc6383bd856a70291ec32a7ed 2259
lombok_1.18.24-2.dsc
5a1b9d0ebea363637282f8a421f27c2a8ad0eea0e3e71bfa3a042a4b92d4a44b 11184
lombok_1.18.24-2.debian.tar.xz
9e87e855bdaf9f2a5624d6241a44a8c87422c71bb06aed05e5af5de5c291310f 16651
lombok_1.18.24-2_amd64.buildinfo
Files:
c072f08cd98e0764ba165f8ceb597042 2259 java optional lombok_1.18.24-2.dsc
d112b290301c229d6a0826f7c0d04f2c 11184 java optional
lombok_1.18.24-2.debian.tar.xz
b37c860335420fdcbd6fb796da9b02f9 16651 java optional
lombok_1.18.24-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=1Edd
-----END PGP SIGNATURE-----
--- End Message ---
__
This is the maintainer address of Debian's Java team
<https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-java-maintainers>.
Please use
[email protected] for discussions and questions.
