Bug#1029296: poetry: non-determinism in generated RECORDS files

[Vagrant Cascadian]

Package: src:poetry
Version: 1.3.2+dfsg-2
Severity: normal
X-Debbugs-Cc: vagrant at debian.org, pollo at debian.org, reproducible-bugs at lists.alioth.debian.org
User: reproducible-builds at lists.alioth.debian.org
Usertags: toolchain

Poetry generates RECORDS files with contents in non-dereministic order,
and a pull request fixing the issue was merged upstream:

  https://github.com/python-poetry/poetry-core/pull/545

The only package I know is affected is "reuse":

  https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/reuse.html

I monkey-patched the change into poetry and it fixed the issue building
"reuse", so can confirm it works!

I presume there are many more affected packages...

Please backport the trivial patch which wraps a couple calls in
"sorted()" or a new upstream if available to fix this!


live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20230120/dd1a084a/attachment.sig>