Bug#990840: apiguardian: reproducible builds: timestamp embedded in shipped .jar file

[Vagrant Cascadian]

Package: apiguardian
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps timezone
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

The shipped apiguardian-api-1.1.0.jar embeds the time, date and timezone
in the build:

  https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/apiguardian.html

  /usr/share/java/apiguardian-api-1.1.0.jar

  Build-Date:·2022-07-12\xd	
  vs.
  Build-Date:·2021-06-09\xd

  Build-Time:·01:53:17.318-1200\xd
  vs.
  Build-Time:·21:34:59.146+1400\xd


The attached patch modifies build.gradle to set the timezone to UTC when
the SOURCE_DATE_EPOCH environment variable is defined, and use
SOURCE_DATE_EPOCH to set the timestamp.

With this patch applied, apiguardian should become reproducible in the
tests.reproducible-builds.org infrastructure.


Thanks for maintaining apiguardian!


live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-debian-patches-Support-reproducible-timestamps-in-th.patch
Type: text/x-diff
Size: 2083 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20210708/dc653b46/attachment-0001.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20210708/dc653b46/attachment-0001.sig>