Bug#1152747: fop: reproducible builds: Improve use of SOURCE_DATE_EPOCH for timestamps in PDF files

[Vagrant Cascadian]

On 2026-11-02, Juan Manuel Méndez Rey wrote:
> Thanks for finding the exact spot, I have prepared a fix based on that:
> https://salsa.debian.org/java-team/fop/-/merge_requests/3
>
> It reads SOURCE_DATE_EPOCH there, like the rest of the existing patch.
> With it, two runs at different times give identical PDFs.
>
> Could you check pam and treeview with it?

With your fop patch applied, building both pam and treeview come out
bit-for-bit reproducibly, thanks!

This one has been nagging at me for literally 5 years! :)

Would be ideal if someone could take these patches upstream; does anyone
have experience with contributing to fop upstream? :)

live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20261102/ac8d9296/attachment.sig>