[Pkg-javascript-devel] Bug#1144052: Bug#1144052: libnode137 regressed in reproducibility

[Jérémy Lal]

Le lun. 10 août 2026 à 15:45, Jérémy Lal <kapouer at melix.org> a écrit :

>
>
> Le lun. 10 août 2026 à 13:11, Jochen Sprickerhof <jspricke at debian.org> a
> écrit :
>
>> Source: nodejs
>> Version: 24.19.0+dfsg+~cs24.13.3-1
>> Severity: serious
>> X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org
>> User: reproducible-builds at lists.alioth.debian.org
>> Usertags: randomness
>>
>> Hi,
>>
>> src:nodejs in unstable can't migrate to testing because the QA
>> infrastructure couldn't reproduce the libnode137 binary package in
>> unstable while it could reproduce the version in testing [1, 2].
>>
>> >From the diff it looks like some randomness is compiled in, maybe due to
>> some auto generated source code?
>>
>> Feel free to reach out if you need help debugging the problem but I
>> assume it will not be easy. Alternatively you can ask the release team
>> for an exception [3].
>>
>
> Unfortunately I have absolutely no idea why this happens.
>
> https://reproduce.debian.net/amd64/api/v1/builds/278499/artifacts/742190/diffoscope
> shows a few bytes have changed.
> But why ?!?
>

I think I found the culprit:
https://github.com/nodejs/node/pull/63626

Now I need to find out why the snapshot changes. There is probably
something time-dependent in its checksum.

>
>
>>
>> Cheers Jochen
>>
>>
>> [1] https://qa.debian.org/excuses.php?package=nodejs
>> [2] https://lists.debian.org/debian-devel-announce/2026/05/msg00001.html
>> [3] https://lists.debian.org/debian-devel/2026/05/msg00383.html
>>
>> --
>> Pkg-javascript-devel mailing list
>> Pkg-javascript-devel at alioth-lists.debian.net
>>
>> https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20260810/a927c212/attachment.htm>