Bug#1089874: haskell-devscripts: please stop depending on dh-buildinfo, superseded by .buildinfo

[Holger Levsen]

Source: haskell-devscripts
Severity: important
Tags: patch
block 1068809 by -1
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org
User: reproducible-builds at lists.alioth.debian.org
Usertags: toolchain

Dear Maintainer,

dpkg since 2016 creates .buildinfo files for all packages,
and dh-buildinfo can and does lead to unreproducibe packages as can be seen on
https://amd64.reproduce.debian.net/stats and
https://i386.reproduce.debian.net/stats and which has been
documented in #1068809 as well.

Thus, dh-buildinfo is slated for removal, so please remove it from
haskell-devscripts' depends. (That is really all which needs to be done for this
package, which is why I've tagged this bug "patch".)

See #1068809 for more information.

$ build-rdeps dh-buildinfo|grep -c haskell
1124
$ apt-file search -x 'buildinfo_(amd64|all).gz'|grep -c haskell
43

I'll probably upload a fixed package to DELAYED/7 or 14 soon, though I'd obviously
prefer not having to do that. :)

Thanks for maintaining the haskell universe in Debian!


-- 
cheers,
	Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

„Faschisten hören niemals auf, Faschisten zu sein
Man diskutiert mit ihnen nicht, hat die Geschichte gezeigt“...
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-haskell-maintainers/attachments/20241214/fc90debd/attachment.sig>