Your message dated Thu, 12 Nov 2026 07:05:26 +0000
with message-id <[email protected]>
and subject line Bug#1151669: fixed in node-uplot 1.6.32+ds3-2
has caused the Debian Bug report #1151669,
regarding node-uplot: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1151669: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1151669
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: node-uplot
Version: 1.6.32+ds3-1
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: timestamps
X-Debbugs-Cc: [email protected]
Hi,
Whilst working on the Reproducible Builds effort [0], we noticed that
node-uplot could not be built reproducibly. This is because the .js files
shipped in the binary embed the current build year for the copyright year
range.
A patch is attached that seeds this date from SOURCE_DATE_EPOCH (if it is
available).
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
--- a/debian/patches/reproducible-build.patch 1969-12-31 16:00:00.000000000
-0800
--- b/debian/patches/reproducible-build.patch 2026-10-21 15:20:13.286291714
-0700
@@ -0,0 +1,26 @@
+Description: Make the build reproducible
+Author: Chris Lamb <[email protected]>
+Last-Update: 2026-10-21
+
+--- node-uplot-1.6.32+ds3.orig/rollup.config.js
++++ node-uplot-1.6.32+ds3/rollup.config.js
+@@ -18,9 +18,11 @@ import terser from '@rollup/plugin-terse
+ const pkg = JSON.parse(fs.readFileSync('./package.json', 'utf8'));
+ const ver = "v" + pkg.version;
+ const urlVer = "https://github.com/leeoniya/uPlot (" + ver + ")";
++const epoch = Number(process.env["SOURCE_DATE_EPOCH"]);
++const timestamp = Number.isInteger(epoch) ? new Date(epoch * 1000) : new
Date();
+ const banner = [
+ "/**",
+- "* Copyright (c) " + new Date().getFullYear() + ", Leon Sorokin",
++ "* Copyright (c) " + timestamp.getFullYear() + ", Leon Sorokin",
+ "* All rights reserved. (MIT Licensed)",
+ "*",
+ "* uPlot.js (\u03bcPlot)",
+@@ -112,4 +112,4 @@ export default [
+ terser(terserOpts),
+ ]
+ },
+-];
+\ No newline at end of file
++];
--- a/debian/patches/series 1969-12-31 16:00:00.000000000 -0800
--- b/debian/patches/series 2026-10-21 15:19:20.231617821 -0700
@@ -0,0 +1 @@
+reproducible-build.patch
--- a/rollup.config.js 2026-10-21 15:07:37.029063808 -0700
--- b/rollup.config.js 2026-10-21 15:19:20.000000000 -0700
@@ -18,9 +18,11 @@
const pkg = JSON.parse(fs.readFileSync('./package.json', 'utf8'));
const ver = "v" + pkg.version;
const urlVer = "https://github.com/leeoniya/uPlot (" + ver + ")";
+const epoch = Number(process.env["SOURCE_DATE_EPOCH"]);
+const timestamp = Number.isInteger(epoch) ? new Date(epoch * 1000) : new
Date();
const banner = [
"/**",
- "* Copyright (c) " + new Date().getFullYear() + ", Leon Sorokin",
+ "* Copyright (c) " + timestamp.getFullYear() + ", Leon Sorokin",
"* All rights reserved. (MIT Licensed)",
"*",
"* uPlot.js (\u03bcPlot)",
@@ -110,4 +112,4 @@
terser(terserOpts),
]
},
-];
\ No newline at end of file
+];
--- End Message ---
--- Begin Message ---
Source: node-uplot
Source-Version: 1.6.32+ds3-2
Done: Jérémy Lal <[email protected]>
We believe that the bug you reported is fixed in the latest version of
node-uplot, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jérémy Lal <[email protected]> (supplier of updated node-uplot package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 12 Nov 2026 07:46:06 +0100
Source: node-uplot
Architecture: source
Version: 1.6.32+ds3-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers
<[email protected]>
Changed-By: Jérémy Lal <[email protected]>
Closes: 1151669
Changes:
node-uplot (1.6.32+ds3-2) unstable; urgency=medium
.
* Team upload
.
[ Ayushman Bhattacharya ]
* Make the build reproducible: take the copyright year in the bundle
banner from SOURCE_DATE_EPOCH, read in UTC. Thanks to Chris Lamb for
the patch. (Closes: #1151669)
Checksums-Sha1:
bf397bd282ed997857290dfc3659995013327201 2126 node-uplot_1.6.32+ds3-2.dsc
b8054afad71aeecac7a0b355c1b3bbbbe1041155 3320
node-uplot_1.6.32+ds3-2.debian.tar.xz
480f9cdc5db81d4441c39ed45579eb2f0b07ef77 13012
node-uplot_1.6.32+ds3-2_source.buildinfo
Checksums-Sha256:
6b0251eaf6bdfd77e7398674d15bc22dd4ac6d899790f2f1a26141541d17ba70 2126
node-uplot_1.6.32+ds3-2.dsc
565a36294db5456ccc6c6cc24c9cc1349350cbe075422ec6a0dfdb21e47ee29e 3320
node-uplot_1.6.32+ds3-2.debian.tar.xz
a189843c163e1c5d24064db08aa1ecd658e8fab77de795949b464d5566082760 13012
node-uplot_1.6.32+ds3-2_source.buildinfo
Files:
c2bbf55ca8e3c913a6f9caaf30395330 2126 javascript optional
node-uplot_1.6.32+ds3-2.dsc
42cf07bb7a98ede5014029f614041b6f 3320 javascript optional
node-uplot_1.6.32+ds3-2.debian.tar.xz
c14f7eac4546fe2aa7eac2e5a815e748 13012 javascript optional
node-uplot_1.6.32+ds3-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=x6H5
-----END PGP SIGNATURE-----
pgpbqvoCiwVlf.pgp
Description: PGP signature
--- End Message ---
--
Pkg-javascript-devel mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
