Bug#1039741: libapache-poi-java: reproducible builds: timezone-specific timestamp in poi.jar

[Vagrant Cascadian]

Source: libapache-poi-java
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps timezones
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

The timestamp is embedded in a file inside the poi.jar archive:

  https://tests.reproducible-builds.org/debian/rb-pkg/trixie/amd64/diffoscope-results/libapache-poi-java.html

  /usr/share/java/poi-4.0.1.jar

  private·static·final·String·RELEASE_DATE·=·"20220516";
  vs.
  private·static·final·String·RELEASE_DATE·=·"20220517";

The attached patch to debian/rules fixes this by passing the --utc
argument to date, to ensure the date is rendered consistently.

According to my local tests, with this patch applied, libapache-poi-java
should build reproducibly on tests.reproducible-builds.org!

Thanks for maintaining libapache-poi-java!

live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-debian-rules-Use-utc-date-to-avoid-embedding-timezon.patch
Type: text/x-diff
Size: 1058 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20230628/7aa8623a/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20230628/7aa8623a/attachment.sig>