[Git][java-team/jabref][master] 5 commits: Use SOURCE_DATE_EPOCH for the build year to make the build reproducible
Emmanuel Bourg (@ebourg)
gitlab at salsa.debian.org
Fri Oct 16 11:06:54 BST 2026
Emmanuel Bourg pushed to branch master at Debian Java Maintainers / jabref
Commits:
70828907 by Emmanuel Bourg at 2026-10-16T11:08:41+02:00
Use SOURCE_DATE_EPOCH for the build year to make the build reproducible
- - - - -
6c690a28 by Emmanuel Bourg at 2026-10-16T11:43:49+02:00
Standards-Version updated to 4.7.4
- - - - -
65883ab6 by Emmanuel Bourg at 2026-10-16T11:44:10+02:00
Removed the Priority field
- - - - -
17582de4 by Emmanuel Bourg at 2026-10-16T11:45:20+02:00
Wrap and sort
- - - - -
c8ab101e by Emmanuel Bourg at 2026-10-16T11:45:33+02:00
Upload to unstable
- - - - -
4 changed files:
- debian/changelog
- debian/control
- + debian/patches/120_reproducible_build_year.patch
- debian/patches/series
Changes:
=====================================
debian/changelog
=====================================
@@ -1,3 +1,12 @@
+jabref (3.8.2+ds-19) unstable; urgency=medium
+
+ * Team upload.
+ * Use SOURCE_DATE_EPOCH for the build year to make the build reproducible
+ * Standards-Version updated to 4.7.4
+ * Removed the Priority field
+
+ -- Emmanuel Bourg <ebourg at apache.org> Fri, 16 Oct 2026 11:45:24 +0200
+
jabref (3.8.2+ds-18) unstable; urgency=medium
* Add Build-Depends on junit5 (Closes: #1117407)
=====================================
debian/control
=====================================
@@ -1,94 +1,98 @@
Source: jabref
-Maintainer: Debian Java Maintainers <pkg-java-maintainers at lists.alioth.debian.org>
-Uploaders: tony mancill <tmancill at debian.org>,
- gregor herrmann <gregoa at debian.org>
Section: tex
-Priority: optional
-Build-Depends: debhelper-compat (= 13),
- gradle-debian-helper
-Build-Depends-Indep: ant,
- antlr,
- antlr3,
- antlr4,
- default-jdk,
- junit4,
- junit5,
- libandroid-json-java,
- libantlr3-runtime-java,
- libcommons-cli-java,
- libcommons-codec-java,
- libcommons-lang3-java,
- libcommons-logging-java,
- libglazedlists-java,
- libicu4j-java,
- libjava-string-similarity-java,
- libjaxb-api-java,
- libjaxb-java,
- libjempbox-java,
- libjgoodies-common-java,
- libjgoodies-forms-java,
- libjgoodies-looks-java,
- libjgraph-java,
- libjsonp-java,
- liblibreoffice-java,
- liblog4j2-java,
- libmariadb-java,
- libmicroba-java,
- libpdfbox-java,
- libpostgresql-jdbc-java,
- librelaxng-datatype-java,
- libscram-java,
- libspin-java,
- libswingx-java,
- libunirest-java-java,
- libxml-commons-resolver1.1-java,
- ure
-Standards-Version: 4.6.2
+Maintainer: Debian Java Maintainers <pkg-java-maintainers at lists.alioth.debian.org>
+Uploaders:
+ tony mancill <tmancill at debian.org>,
+ gregor herrmann <gregoa at debian.org>
+Build-Depends:
+ debhelper-compat (= 13),
+ gradle-debian-helper
+Build-Depends-Indep:
+ ant,
+ antlr,
+ antlr3,
+ antlr4,
+ default-jdk,
+ junit4,
+ junit5,
+ libandroid-json-java,
+ libantlr3-runtime-java,
+ libcommons-cli-java,
+ libcommons-codec-java,
+ libcommons-lang3-java,
+ libcommons-logging-java,
+ libglazedlists-java,
+ libicu4j-java,
+ libjava-string-similarity-java,
+ libjaxb-api-java,
+ libjaxb-java,
+ libjempbox-java,
+ libjgoodies-common-java,
+ libjgoodies-forms-java,
+ libjgoodies-looks-java,
+ libjgraph-java,
+ libjsonp-java,
+ liblibreoffice-java,
+ liblog4j2-java,
+ libmariadb-java,
+ libmicroba-java,
+ libpdfbox-java,
+ libpostgresql-jdbc-java,
+ librelaxng-datatype-java,
+ libscram-java,
+ libspin-java,
+ libswingx-java,
+ libunirest-java-java,
+ libxml-commons-resolver1.1-java,
+ ure
+Standards-Version: 4.7.4
Vcs-Browser: https://salsa.debian.org/java-team/jabref
Vcs-Git: https://salsa.debian.org/java-team/jabref.git
-Homepage: https://www.jabref.org/
-Rules-Requires-Root: no
+Homepage: https://www.jabref.org
Package: jabref
Architecture: all
-Depends: ${misc:Depends},
- default-jre,
- java-wrappers,
- libandroid-json-java,
- libantlr3-runtime-java,
- libantlr4-runtime-java,
- libbcprov-java,
- libcommons-cli-java,
- libcommons-lang3-java,
- libcommons-logging-java,
- libglazedlists-java,
- libguava-java,
- libhttpasyncclient-java,
- libhttpclient-java,
- libhttpmime-java,
- libjava-string-similarity-java,
- libjaxb-java,
- libjempbox-java,
- libjgoodies-common-java,
- libjgoodies-forms-java,
- libjgoodies-looks-java,
- libjhlabs-filters-java,
- libjsoup-java (>= 1.14.2),
- liblibreoffice-java,
- liblog4j2-java,
- libmicroba-java,
- libpdfbox-java (<< 1:2),
- libspin-java,
- libswing-layout-java,
- libswingx-java (<< 1:1.6.4),
- libunirest-java-java
-Recommends: libmariadb-java,
- libpostgresql-jdbc-java,
- libreoffice-java-common,
- libreoffice-writer,
- xdg-utils
-Suggests: gv | postscript-viewer,
- xpdf | pdf-viewer
+Depends:
+ default-jre,
+ java-wrappers,
+ libandroid-json-java,
+ libantlr3-runtime-java,
+ libantlr4-runtime-java,
+ libbcprov-java,
+ libcommons-cli-java,
+ libcommons-lang3-java,
+ libcommons-logging-java,
+ libglazedlists-java,
+ libguava-java,
+ libhttpasyncclient-java,
+ libhttpclient-java,
+ libhttpmime-java,
+ libjava-string-similarity-java,
+ libjaxb-java,
+ libjempbox-java,
+ libjgoodies-common-java,
+ libjgoodies-forms-java,
+ libjgoodies-looks-java,
+ libjhlabs-filters-java,
+ libjsoup-java (>= 1.14.2),
+ liblibreoffice-java,
+ liblog4j2-java,
+ libmicroba-java,
+ libpdfbox-java (<< 1:2),
+ libspin-java,
+ libswing-layout-java,
+ libswingx-java (<< 1:1.6.4),
+ libunirest-java-java,
+ ${misc:Depends}
+Recommends:
+ libmariadb-java,
+ libpostgresql-jdbc-java,
+ libreoffice-java-common,
+ libreoffice-writer,
+ xdg-utils
+Suggests:
+ gv | postscript-viewer,
+ xpdf | pdf-viewer
Description: graphical frontend to manage BibTeX and BibLaTeX databases
JabRef is a graphical Java application for editing BibTeX (.bib) databases.
JabRef lets you organize your entries into overlapping logical groups, and
=====================================
debian/patches/120_reproducible_build_year.patch
=====================================
@@ -0,0 +1,19 @@
+Description: Use SOURCE_DATE_EPOCH for the build year
+ Calendar.getInstance() returns the current year, which lands in
+ build.properties and makes the jar unreproducible.
+Author: Emmanuel Bourg <ebourg at apache.org>
+Forwarded: no
+--- a/build.gradle
++++ b/build.gradle
+@@ -145,7 +145,10 @@
+ processResources {
+ filesMatching("build.properties") {
+ expand(version: project.version,
+- "year": String.valueOf(Calendar.getInstance().get(Calendar.YEAR)),
++ "year": String.valueOf(System.getenv("SOURCE_DATE_EPOCH")
++ ? java.time.Instant.ofEpochSecond(System.getenv("SOURCE_DATE_EPOCH").toLong())
++ .atZone(java.time.ZoneOffset.UTC).getYear()
++ : Calendar.getInstance().get(Calendar.YEAR)),
+ "authors": new File('AUTHORS').readLines().findAll { !it.startsWith("#") }.join(", "),
+ "developers": new File('DEVELOPERS').readLines().findAll { !it.startsWith("#") }.join(", "))
+ filteringCharset = 'UTF-8'
=====================================
debian/patches/series
=====================================
@@ -10,3 +10,4 @@
100_CVE-2018-1000652_XXE-vulnerability.patch
110_doi.org.patch
jsoup-1.14.2.patch
+120_reproducible_build_year.patch
View it on GitLab: https://salsa.debian.org/java-team/jabref/-/compare/9a12217ec48f6322a185ac58e5587f313ea03394...c8ab101ea58326054ece087830bf3887677e2a6f
--
View it on GitLab: https://salsa.debian.org/java-team/jabref/-/compare/9a12217ec48f6322a185ac58e5587f313ea03394...c8ab101ea58326054ece087830bf3887677e2a6f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-commits/attachments/20261016/d65750df/attachment.htm>
More information about the pkg-java-commits
mailing list