[Pkg-javascript-devel] Bug#1035362: node-mocha: reproducible-builds: build date in various .js files

Vagrant Cascadian vagrant at reproducible-builds.org
Tue May 2 00:47:57 BST 2023


Source: node-mocha
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

The build date is embedded in various .js files:

  https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/node-mocha.html

  /usr/share/nodejs/workerpool/dist/worker.js

  ·*·@date····2023-03-24
  vs.
  ·*·@date····2024-04-26

The attached patch fixes this by removing the code which adds the build
date and removing the date from the relevent template file.


If a date is for some reason necessary to embed in these files, another
option might be to use the SOURCE_DATE_EPOCH environment variable:

  https://reproducible-builds.org/docs/source-date-epoch/


Unfortunately, there may be other non-deterministic issues which prevent
node-mocha from building reproducibly, but applying this patch should
significant reduce the noise generated from timestamps.


Thanks for maintaining node-mocha!


live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-workerpool-src-.js-Do-not-embed-the-date.patch
Type: text/x-diff
Size: 1112 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20230501/e665995e/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20230501/e665995e/attachment.sig>


More information about the Pkg-javascript-devel mailing list