1016584">

Debian Bug report logs - #1016584
node-canvas-confetti: please make the build reproducible

version graph

Package: src:node-canvas-confetti; Maintainer for src:node-canvas-confetti is Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>;

Reported by: "Chris Lamb" <lamby@debian.org>

Date: Wed, 3 Aug 2022 15:06:01 UTC

Severity: wishlist

Tags: patch

Found in version node-canvas-confetti/1.5.1+~1.4.3-1

Fixed in version node-canvas-confetti/1.5.1+~1.4.3-2

Done: Jelmer Vernooij <jelmer@debian.org>

Bug is archived. No further changes may be made.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#1016584; Package src:node-canvas-confetti. (Wed, 03 Aug 2022 15:06:03 GMT) (full text, mbox, link).


Acknowledgement sent to "Chris Lamb" <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>. (Wed, 03 Aug 2022 15:06:03 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, wrote: > Source: node-canvas-confetti > Version: 1.5.1+~1.4.3-1 > Severity: wishlist > Tags: patch > User: reproducible-builds@lists.alioth.debian.org > Usertags: timestamps > X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org > > Hi, > > Whilst working on the Reproducible Builds effort [0] we noticed that > node-canvas-confetti could not be built reproducibly. > > This is because embedded the build time into the file. Whilst I could > have patched this to use SOURCE_DATE_EPOCH, it seems more sensible to > simply drop the timestamp; it's in a comment anyway and "built on" using > the value of SOURCE_DATE_EPOCH may even be misleading. > > [0] https://reproducible-builds.org/ > > > Regards, > > -- > ,''`. > : :' : Chris Lamb > `. `'` lamby@debian.org / chris-lamb.co.uk > `- &In-Reply-To=<165953887304.5011.1888274646538217535@ace7b63072b2>&subject=Re: node-canvas-confetti: please make the build reproducible&References=<165953887304.5011.1888274646538217535@ace7b63072b2>">reply):

From: "Chris Lamb" <lamby@debian.org>
To: submit@bugs.debian.org
Subject: node-canvas-confetti: please make the build reproducible
Date: Wed, 03 Aug 2022 08:02:06 -0700
[Message part 1 (text/plain, inline)]
Source: node-canvas-confetti
Version: 1.5.1+~1.4.3-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0] we noticed that
node-canvas-confetti could not be built reproducibly.

This is because embedded the build time into the file. Whilst I could
have patched this to use SOURCE_DATE_EPOCH, it seems more sensible to
simply drop the timestamp; it's in a comment anyway and "built on" using
the value of SOURCE_DATE_EPOCH may even be misleading.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-
[node-canvas-confetti.diff.txt (text/plain, attachment)]

Information forwarded to debian-bugs-dist@lists.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#1016584; Package src:node-canvas-confetti. (Mon, 17 Oct 2022 12:21:03 GMT) (full text, mbox, link).


Acknowledgement sent to "LIAM B. OMARI" <wijcezetus@outlook.com>:
Extra info received and forwarded to list. Copy sent to Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>. (Mon, 17 Oct 2022 12:21:03 GMT) (full text, mbox, link).


Message #10 received at 1016584@bugs.debian.org (full text, mbox, wrote: > > > Your reputable profile gives me the impression that you will be a suitable partner in a crude oil licensing operations venture involving the National Oil Company of Equatorial Guinea (GEPetrol) and the company I work for which is Sinopec Group. This venture will see us netting in $14m in Revenue approximately per transaction. > > > On your response I will give you clearer details of this operation. I can be reached directly with the following email account; boey.mangue@gmail.com > > > Regards, > > Mangue Boey. > ">reply):

From: "LIAM B. OMARI" <wijcezetus@outlook.com>
Subject: For your kind attention!
Date: Mon, 17 Oct 2022 12:19:22 +0000
[Message part 1 (text/plain, inline)]
Your reputable profile gives me the impression that you will be a suitable partner in a crude oil licensing operations venture involving the National Oil Company of Equatorial Guinea (GEPetrol) and the company I work for which is Sinopec Group. This venture will see us netting in $14m in Revenue approximately per transaction.


On your response I will give you clearer details of this operation. I can be reached directly with the following email account;  boey.mangue@gmail.com


Regards,

Mangue Boey.

[Message part 2 (text/html, inline)]

Reply sent to Jelmer Vernooij <jelmer@debian.org>:
You have taken responsibility. (Fri, 02 Dec 2022 17:09:10 GMT) (full text, mbox, link).


Notification sent to "Chris Lamb" <lamby@debian.org>:
Bug acknowledged by developer. (Fri, 02 Dec 2022 17:09:10 GMT) (full text, mbox, link).


Message #15 received at 1016584-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 1016584-close@bugs.debian.org
Subject: Bug#1016584: fixed in node-canvas-confetti 1.5.1+~1.4.3-2
Date: Fri, 02 Dec 2022 17:06:00 +0000
Source: node-canvas-confetti
Source-Version: 1.5.1+~1.4.3-2
Done: Jelmer Vernooij <jelmer@debian.org>

We believe that the bug you reported is fixed in the latest version of
node-canvas-confetti, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1016584@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jelmer Vernooij <jelmer@debian.org> (supplier of updated node-canvas-confetti package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 02 Dec 2022 16:45:47 +0000
Source: node-canvas-confetti
Architecture: source
Version: 1.5.1+~1.4.3-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>
Changed-By: Jelmer Vernooij <jelmer@debian.org>
Closes: 1016584
Changes:
 node-canvas-confetti (1.5.1+~1.4.3-2) unstable; urgency=medium
 .
   * Team upload
 .
   [ Chris Lamb ]
   * Make the build reproducible (Closes: #1016584)
 .
   [ Yadd ]
   * Declare compliance with policy 4.6.1
 .
   [ Debian Janitor ]
   * Apply multi-arch hints. + node-canvas-confetti: Add Multi-Arch: foreign.
Checksums-Sha1:
 9a62366e063db841eac7d752e95c7319da393e8c 2562 node-canvas-confetti_1.5.1+~1.4.3-2.dsc
 2ca0b185559e77116bfbb491e1e402915a1c8e39 4412 node-canvas-confetti_1.5.1+~1.4.3-2.debian.tar.xz
 4501f0f6ec9729a9279a0e61904f2128cc3082df 20611 node-canvas-confetti_1.5.1+~1.4.3-2_amd64.buildinfo
Checksums-Sha256:
 a4794ae52bdedbff8d706757cbe7bcbbe98763acc8ff7a2983f3434f174734f3 2562 node-canvas-confetti_1.5.1+~1.4.3-2.dsc
 0364b5cc6d769f48dc7c49a079e7b75a7c85fc5bf538cf242d186df39fb2180a 4412 node-canvas-confetti_1.5.1+~1.4.3-2.debian.tar.xz
 9d198d522c9299e5139c39860f5a054cda76d24a8c39c049ae7cccc105df31dd 20611 node-canvas-confetti_1.5.1+~1.4.3-2_amd64.buildinfo
Files:
 7da1b6729efb337ed9ae2a045cb8dbc1 2562 javascript optional node-canvas-confetti_1.5.1+~1.4.3-2.dsc
 7d3e59d86d731fe63b56b504e726931e 4412 javascript optional node-canvas-confetti_1.5.1+~1.4.3-2.debian.tar.xz
 932c1d5ee73de35f707a4f616749e1c3 20611 javascript optional node-canvas-confetti_1.5.1+~1.4.3-2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=NVix
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Mon, 02 Jan 2023 07:29:46 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Fri Jan 31 00:39:49 2025; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.