[Git][java-team/lucene-solr][master] 4 commits: Do not record the build user in the jar manifests

Emmanuel Bourg (@ebourg) gitlab at salsa.debian.org
Fri Oct 16 10:19:48 BST 2026



Emmanuel Bourg pushed to branch master at Debian Java Maintainers / lucene-solr


Commits:
64f3ffac by Emmanuel Bourg at 2026-10-16T11:01:43+02:00
Do not record the build user in the jar manifests

- - - - -
8181412a by Emmanuel Bourg at 2026-10-16T11:04:38+02:00
Standards-Version updated to 4.7.4

- - - - -
7273a0f4 by Emmanuel Bourg at 2026-10-16T11:05:12+02:00
Removed the Priority field

- - - - -
d7c71bab by Emmanuel Bourg at 2026-10-16T11:06:48+02:00
Upload to unstable

- - - - -


4 changed files:

- debian/changelog
- debian/control
- + debian/patches/reproducible-manifest.patch
- debian/patches/series


Changes:

=====================================
debian/changelog
=====================================
@@ -1,3 +1,11 @@
+lucene-solr (3.6.2+dfsg-28) unstable; urgency=medium
+
+  * Do not record the build user in the jar manifests
+  * Standards-Version updated to 4.7.4
+  * Removed the Priority field
+
+ -- Emmanuel Bourg <ebourg at apache.org>  Fri, 16 Oct 2026 11:05:40 +0200
+
 lucene-solr (3.6.2+dfsg-27) unstable; urgency=medium
 
   * Team upload.


=====================================
debian/control
=====================================
@@ -1,6 +1,5 @@
 Source: lucene-solr
 Section: java
-Priority: optional
 Maintainer: Debian Java Maintainers <pkg-java-maintainers at lists.alioth.debian.org>
 Uploaders:
  Markus Koschany <apo at debian.org>
@@ -42,7 +41,7 @@ Build-Depends:
  libxml-commons-resolver1.1-java,
  maven-repo-helper (>= 1.5~),
  po-debconf
-Standards-Version: 4.6.2
+Standards-Version: 4.7.4
 Vcs-Git: https://salsa.debian.org/java-team/lucene-solr.git
 Vcs-Browser: https://salsa.debian.org/java-team/lucene-solr
 Homepage: http://lucene.apache.org


=====================================
debian/patches/reproducible-manifest.patch
=====================================
@@ -0,0 +1,16 @@
+Description: Do not record the build user in the jar manifests
+ ${user.name} lands in the Implementation-Version attribute and makes the
+ build unreproducible.
+Author: Emmanuel Bourg <ebourg at apache.org>
+Forwarded: not-needed
+--- a/lucene/common-build.xml
++++ b/lucene/common-build.xml
+@@ -469,7 +469,7 @@
+         <attribute name="Implementation-Title" value="@{implementation.title}"/>
+         <!-- impl version can be any string -->
+         <attribute name="Implementation-Version"
+-                   value="${version} ${svnversion} - ${user.name} - ${DSTAMP} ${TSTAMP}"/>
++                   value="${version} ${svnversion} - ${DSTAMP} ${TSTAMP}"/>
+         <attribute name="Implementation-Vendor"
+                    value="The Apache Software Foundation"/>
+         <attribute name="X-Compile-Source-JDK" value="${javac.source}"/>


=====================================
debian/patches/series
=====================================
@@ -17,3 +17,4 @@ CVE-2018-1308.patch
 web.xml.patch
 CVE-2019-0193.patch
 disable-rmic.patch
+reproducible-manifest.patch



View it on GitLab: https://salsa.debian.org/java-team/lucene-solr/-/compare/065c4120a25b61164ba7febac3deae4a76a597f4...d7c71babec65345c77a4400fc67561eb47ebb647

-- 
View it on GitLab: https://salsa.debian.org/java-team/lucene-solr/-/compare/065c4120a25b61164ba7febac3deae4a76a597f4...d7c71babec65345c77a4400fc67561eb47ebb647
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-commits/attachments/20261016/744bfb3b/attachment.htm>


More information about the pkg-java-commits mailing list