Your message dated Wed, 19 Mar 2025 19:52:37 +0000
with message-id <e1tuzsv-009zch...@fasolo.debian.org>
and subject line Bug#1098251: fixed in node-svgdotjs-svg.js 3.2.4-3
has caused the Debian Bug report #1098251,
regarding node-svgdotjs-svg.js: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1098251: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098251
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: node-svgdotjs-svg.js
Version: 3.2.4-2
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org
Hi,
Whilst working on the Reproducible Builds effort [0], we noticed that
node-svgdotjs-svg.js could not be built reproducibly.
This is because it embeds the current time into the files. For instance:
│ │ ├── ./usr/share/nodejs/@svgdotjs/svg.js/dist/svg.esm.js
│ │ │ │ ├── js-beautify {}
│ │ │ │ │ @@ -2,15 +2,15 @@
│ │ │ │ │ * @svgdotjs/svg.js - A lightweight library for manipulating and
animating SVG.
│ │ │ │ │ * @version 3.2.4
│ │ │ │ │ * https://svgjs.dev/
│ │ │ │ │ *
│ │ │ │ │ * @copyright Wout Fierens <w...@mick-wout.com>
│ │ │ │ │ * @license MIT
│ │ │ │ │ *
│ │ │ │ │ - * BUILT: Sun Mar 22 2026 21:02:15 GMT-1200 (GMT-12:00)
│ │ │ │ │ + * BUILT: Tue Feb 18 2025 16:43:48 GMT+1400 (GMT+14:00)
│ │ │ │ │ */
A patch is attached that will generate this value via SOURCE_DATE_EPOCH,
as well as ensure that the timezone is determinstic.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/reproducible-build.patch 1970-01-01 01:00:00.000000000
+0100
--- b/debian/patches/reproducible-build.patch 2025-02-18 11:34:35.594494237
+0000
@@ -0,0 +1,15 @@
+Description: Make the build reproducible
+Author: Chris Lamb <la...@debian.org>
+Last-Update: 2025-02-18
+
+--- node-svgdotjs-svg.js-3.2.4.orig/.config/rollup.config.js
++++ node-svgdotjs-svg.js-3.2.4/.config/rollup.config.js
+@@ -7,7 +7,7 @@ import terserModule from "/usr/share/nod
+ const terser = terserModule.terser
+ // import filesize from 'rollup-plugin-filesize'
+
+-const buildDate = Date()
++const buildDate = new Date(process.env.SOURCE_DATE_EPOCH ?
(process.env.SOURCE_DATE_EPOCH * 1000) : new Date().getTime());
+
+ const headerLong = `/*!
+ * ${pkg.name} - ${pkg.description}
--- a/debian/patches/series 2025-02-18 11:18:03.885670825 +0000
--- b/debian/patches/series 2025-02-18 11:34:34.202488412 +0000
@@ -1 +1,2 @@
debian-rollup.patch
+reproducible-build.patch
--- a/debian/rules 2025-02-18 11:18:03.885670825 +0000
--- b/debian/rules 2025-02-18 11:36:01.434849743 +0000
@@ -14,7 +14,7 @@
override_dh_auto_build:
mkdir -p node_modules
ln -s /usr/share/nodejs/rollup node_modules/rollup
- npm run rollup
+ TZ=UTC npm run rollup
override_dh_installdocs:
dh_installdocs
--- End Message ---
--- Begin Message ---
Source: node-svgdotjs-svg.js
Source-Version: 3.2.4-3
Done: Georges Khaznadar <georg...@debian.org>
We believe that the bug you reported is fixed in the latest version of
node-svgdotjs-svg.js, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1098...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Georges Khaznadar <georg...@debian.org> (supplier of updated
node-svgdotjs-svg.js package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 19 Mar 2025 19:43:36 +0100
Source: node-svgdotjs-svg.js
Architecture: source
Version: 3.2.4-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers
<pkg-javascript-de...@lists.alioth.debian.org>
Changed-By: Georges Khaznadar <georg...@debian.org>
Closes: 1098251
Changes:
node-svgdotjs-svg.js (3.2.4-3) unstable; urgency=medium
.
* applied Chris Lamb's patch, thanks! Closes: #1098251
Checksums-Sha1:
058585c2682b02628e1948add8fd7f3b9cfc85c9 2232 node-svgdotjs-svg.js_3.2.4-3.dsc
c70f5bf46cfeadbf688a3e45689903ce935f82ad 4332
node-svgdotjs-svg.js_3.2.4-3.debian.tar.xz
a45b6e35992bcc358d630d660b477b473fb4387d 21757
node-svgdotjs-svg.js_3.2.4-3_amd64.buildinfo
Checksums-Sha256:
75c3457b3b6c98d712bb8ad726c84b89efa175e8d5d6fdf1e0f1df9a820c0009 2232
node-svgdotjs-svg.js_3.2.4-3.dsc
ebc4875bcdf204b0274d49eb71c678da288969c0c961001c8578dd0af5b86cc0 4332
node-svgdotjs-svg.js_3.2.4-3.debian.tar.xz
706e59a7ed5525c1a98f0d89cd4c58fec332a1b9d24f8bccddd1f0340e5524c0 21757
node-svgdotjs-svg.js_3.2.4-3_amd64.buildinfo
Files:
5013015afe6fe03d53902c32670948e4 2232 javascript optional
node-svgdotjs-svg.js_3.2.4-3.dsc
1ff783d9af72c7a55c49903ddacb9ca2 4332 javascript optional
node-svgdotjs-svg.js_3.2.4-3.debian.tar.xz
d8d0c57d035c6686a2c5294aaf04c07a 21757 javascript optional
node-svgdotjs-svg.js_3.2.4-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=r68Z
-----END PGP SIGNATURE-----
pgpr_hIflgbma.pgp
Description: PGP signature
--- End Message ---
--
Pkg-javascript-devel mailing list
Pkg-javascript-devel@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
