[Pkg-fonts-devel] Bug#774274: fontforge: please use SOURCE_DATE_EPOCH for reproducible font modification time

[Theppitak Karoonboonyanan]

Package: fontforge
Version: 1:20170731~dfsg-1
Followup-For: Bug #774274

Dear Maintainer,

This bug still exists for Type 1 font generation, which causes my package
fonts-sipa-arundina to be unreproducible.

https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/fonts-sipa-arundina.html

Creation date timestamps are still taken from build time without obeying
SOURCE_DATE_EPOCH.

There have been some upstream changes in Fontforge after the version in Sid,
beginning at this one:

https://github.com/fontforge/fontforge/commit/4e850c134200d5a62bdecdd68a4ee31ef7688360

And the relevant calls to the new GetTime() function have been added here:

https://github.com/fontforge/fontforge/commit/078a1738a86717b46e02276bd85bb76893688eea

So, please update Fontforge in Debian to solve more build reproducibility
problems.

Thanks,
-- 
Theppitak Karoonboonyanan
http://linux.thai.net/~thep/

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (500,
'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=th_TH.utf8, LC_CTYPE=th_TH.utf8 (charmap=UTF-8),
LANGUAGE=th_TH.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages fontforge depends on:
ii  fontforge-common  1:20170731~dfsg-1
ii  libc6             2.28-4
ii  libfontforge2     1:20170731~dfsg-1
ii  libgdraw5         1:20170731~dfsg-1
ii  libltdl7          2.4.6-6
ii  libx11-6          2:1.6.7-1

fontforge recommends no packages.

Versions of packages fontforge suggests:
pn  autotrace         <none>
pn  fontforge-doc     <none>
ii  fontforge-extras  0.3-4
pn  potrace           <none>
ii  python-fontforge  1:20170731~dfsg-1

-- no debconf information