[Pkg-javascript-devel] Bug#1000770: perfect-scrollbar: please make the build reproducible

Vagrant Cascadian vagrant at reproducible-builds.org
Thu Dec 29 22:41:50 GMT 2022


Control: tags 1000770 pending

On 2021-11-28, Chris Lamb wrote:
> Whilst working on the Reproducible Builds effort [0] we noticed that
> perfect-scrollbar could not be built reproducibly.
>
> This is because a copyright notice embeds the current build year.

I have uploaded an NMU to DELAYED/10 fixing this issue:

diff -Nru perfect-scrollbar-1.5.2+ds/debian/changelog perfect-scrollbar-1.5.2+ds/debian/changelog
--- perfect-scrollbar-1.5.2+ds/debian/changelog	2021-10-08 15:10:40.000000000 -0700
+++ perfect-scrollbar-1.5.2+ds/debian/changelog	2022-12-29 14:26:32.000000000 -0800
@@ -1,3 +1,12 @@
+perfect-scrollbar (1.5.2+ds-1.2) unstable; urgency=medium
+
+  * Non-maintainer upload.
+
+  [ Chris Lamb ]
+  * Make the build reproducible (Closes: #1000770)
+
+ -- Vagrant Cascadian <vagrant at reproducible-builds.org>  Thu, 29 Dec 2022 14:26:32 -0800
+
 perfect-scrollbar (1.5.2+ds-1) unstable; urgency=medium
 
   * Initial release.
diff -Nru perfect-scrollbar-1.5.2+ds/debian/patches/make-the-build-reproducible-closes-10007.patch perfect-scrollbar-1.5.2+ds/debian/patches/make-the-build-reproducible-closes-10007.patch
--- perfect-scrollbar-1.5.2+ds/debian/patches/make-the-build-reproducible-closes-10007.patch	1969-12-31 16:00:00.000000000 -0800
+++ perfect-scrollbar-1.5.2+ds/debian/patches/make-the-build-reproducible-closes-10007.patch	2022-12-29 14:26:32.000000000 -0800
@@ -0,0 +1,19 @@
+From: Chris Lamb <lamby at debian.org>
+Date: Sun, 28 Nov 2021 11:39:34 -0800
+X-Dgit-Generated: 1.5.2+ds-1.1 8b2d1ce6fccd1839a5e8717b9e3469f413ef18b3
+Subject: Make the build reproducible (Closes: #1000770)
+
+
+---
+
+--- perfect-scrollbar-1.5.2+ds.orig/rollup.config.js
++++ perfect-scrollbar-1.5.2+ds/rollup.config.js
+@@ -7,7 +7,7 @@ const version = require('./package.json'
+ const banner =
+   `/*!
+  * perfect-scrollbar v${version}
+- * Copyright ${new Date().getFullYear()} Hyunje Jun, MDBootstrap and Contributors
++ * Copyright ${(new Date(process.env.SOURCE_DATE_EPOCH ? (process.env.SOURCE_DATE_EPOCH * 1000) : new Date().getTime())).getFullYear()} Hyunje Jun, MDBootstrap and Contributors
+  * Licensed under MIT
+  */
+ `;
diff -Nru perfect-scrollbar-1.5.2+ds/debian/patches/series perfect-scrollbar-1.5.2+ds/debian/patches/series
--- perfect-scrollbar-1.5.2+ds/debian/patches/series	2021-10-08 15:10:40.000000000 -0700
+++ perfect-scrollbar-1.5.2+ds/debian/patches/series	2022-12-29 14:26:32.000000000 -0800
@@ -1 +1,2 @@
 do-not-use-rollup-minify.patch
+make-the-build-reproducible-closes-10007.patch


live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20221229/c38c71f5/attachment.sig>


More information about the Pkg-javascript-devel mailing list