Your message dated Tue, 15 Dec 2020 10:49:22 +0000
with message-id <[email protected]>
and subject line Bug#974124: fixed in less.js 3.13.0+dfsg-2
has caused the Debian Bug report #974124,
regarding less.js: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
974124: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=974124
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: less.js
Version: 3.13.0+dfsg-1
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: timestamps
X-Debbugs-Cc: [email protected]
Hi,
Whilst working on the Reproducible Builds effort [0] we noticed that
less.js could not be built reproducibly.
This is because it embeds the current build date. Patch attached that
uses SOURCE_DATE_EPOCH [1] if available.
[0] https://reproducible-builds.org/
[1] https://reproducible-builds.org/specs/source-date-epoch/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
--- a/debian/patches/reproducible-build.patch 1970-01-01 01:00:00.000000000
+0100
--- b/debian/patches/reproducible-build.patch 2020-11-10 10:16:10.357693628
+0000
@@ -0,0 +1,15 @@
+Description: Make the build reproducible
+Author: Chris Lamb <[email protected]>
+Last-Update: 2020-11-10
+
+--- less.js-3.13.0+dfsg.orig/packages/less/build/banner.js
++++ less.js-3.13.0+dfsg/packages/less/build/banner.js
+@@ -5,7 +5,7 @@ module.exports =
+ * Less - ${ pkg.description } v${ pkg.version }
+ * http://lesscss.org
+ *
+- * Copyright (c) 2009-${new Date().getFullYear()}, ${ pkg.author.name } <${
pkg.author.email }>
++ * Copyright (c) 2009-${(new Date(process.env.SOURCE_DATE_EPOCH ?
(process.env.SOURCE_DATE_EPOCH * 1000) : new Date().getTime())).getFullYear()},
${ pkg.author.name } <${ pkg.author.email }>
+ * Licensed under the ${ pkg.license } License.
+ *
+ * @license ${ pkg.license }
--- a/debian/patches/series 2020-11-10 10:12:01.127276693 +0000
--- b/debian/patches/series 2020-11-10 10:16:07.205662027 +0000
@@ -1 +1,2 @@
use-packaged-plugins.patch
+reproducible-build.patch
--- End Message ---
--- Begin Message ---
Source: less.js
Source-Version: 3.13.0+dfsg-2
Done: Xavier Guimard <[email protected]>
We believe that the bug you reported is fixed in the latest version of
less.js, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Xavier Guimard <[email protected]> (supplier of updated less.js package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 15 Dec 2020 11:26:10 +0100
Source: less.js
Architecture: source
Version: 3.13.0+dfsg-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers
<[email protected]>
Changed-By: Xavier Guimard <[email protected]>
Closes: 974124 977309
Changes:
less.js (3.13.0+dfsg-2) unstable; urgency=medium
.
* Team upload
.
[ Xavier Guimard ]
* Remove all dependencies except node-tslin and nodejs (Closes: #977309)
* Declare compliance with policy 4.5.1
* Add ctype=nodejs to component(s)
.
[ Chris Lamb ]
* Make the build reproducible (Closes: #974124)
Checksums-Sha1:
09d6d9c02d1eaec52f1bd8a47010ae658463ccce 2670 less.js_3.13.0+dfsg-2.dsc
5315088469d07856967d5d92fb5da562f177abcc 11836
less.js_3.13.0+dfsg-2.debian.tar.xz
Checksums-Sha256:
dfe2608251548e0a76b477f2d790513513ba180a4827e19a53237b9da8f8ea78 2670
less.js_3.13.0+dfsg-2.dsc
0b9f0b9ea1901115780aaef50dcbd1fd0dfe66320fe0601fd6582ca3fafea692 11836
less.js_3.13.0+dfsg-2.debian.tar.xz
Files:
09e3152834a984a3688b88b482e30606 2670 javascript optional
less.js_3.13.0+dfsg-2.dsc
c1c2e079cb7dafde942be9f8824736d1 11836 javascript optional
less.js_3.13.0+dfsg-2.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=US/y
-----END PGP SIGNATURE-----
--- End Message ---
--
Pkg-javascript-devel mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
