[pkg-php-pear] Bug#1027401: shaarli: Re-building package results in frontend missing icons

[James Valleroy]

Source: shaarli
Version: 0.12.1+dfsg-6
Severity: important
X-Debbugs-Cc: jvalleroy at mailbox.org

shaarli 0.12.1+dfsg-6 in bookworm/sid is working ok. But if I rebuild
the package (with no functional changes), all of the icons in the
interface are replaced by rectangles containing hex values.


The browser console shows that it is getting 404 Not Found when trying
to download files such as:
- shaarli/tpl/default/css/tpl/default/css/629bb87304479fa3efe2.woff2
- shaarli/tpl/default/css/tpl/default/css/461edd6c43dd5e7b4428.woff2
- shaarli/tpl/default/css/tpl/default/css/f4dd50aee036525d8cdd.woff2?v=1.2.0
...and so on.


Comparing the new package I'm building to the one in the archive:

$ debdiff shaarli_0.12.1+dfsg-6_all.deb shaarli_0.12.1+dfsg-7_all.deb 
[The following lists of changes regard files as different if they have
different names, permissions or owners.]

Files in second .deb but not in first
-------------------------------------
-rw-r--r--  root/root   /usr/share/shaarli/tpl/default/js/461edd6c43dd5e7b4428.woff2
-rw-r--r--  root/root   /usr/share/shaarli/tpl/default/js/4f913fda8f19d129b7cd.svg
-rw-r--r--  root/root   /usr/share/shaarli/tpl/default/js/629bb87304479fa3efe2.woff2
-rw-r--r--  root/root   /usr/share/shaarli/tpl/default/js/7181d96f85d627b02e4b.woff
-rw-r--r--  root/root   /usr/share/shaarli/tpl/default/js/aca843d470d7635b6f54.eot
-rw-r--r--  root/root   /usr/share/shaarli/tpl/default/js/bf8f398f78d56b034664.ttf
-rw-r--r--  root/root   /usr/share/shaarli/tpl/default/js/c7a58d6c0146bc67ed8f.woff
-rw-r--r--  root/root   /usr/share/shaarli/tpl/default/js/f4dd50aee036525d8cdd.woff2
-rw-r--r--  root/root   /usr/share/shaarli/tpl/default/js/ffeaaa2a9ff5d05ec701.woff
-rw-r--r--  root/root   /usr/share/shaarli/tpl/vintage/js/5ca9c8beb5c95484308e.png
-rw-r--r--  root/root   /usr/share/shaarli/tpl/vintage/js/9d087f005ab01b77c342.png
-rw-r--r--  root/root   /usr/share/shaarli/tpl/vintage/js/ae6d394c78b32de61615.png
-rw-r--r--  root/root   /usr/share/shaarli/tpl/vintage/js/c94e8277981d60963c6d.png
-rw-r--r--  root/root   /usr/share/shaarli/tpl/vintage/js/d34213886220775ee5e1.jpg
-rw-r--r--  root/root   /usr/share/shaarli/tpl/vintage/js/e7669bc57fa9110c07d5.png

Control files: lines which differ (wdiff format)
------------------------------------------------
Installed-Size: [-13588-] {+13805+}
Version: [-0.12.1+dfsg-6-] {+0.12.1+dfsg-7+}


If I extract the built .deb and examine the files, they are not valid
fonts/image files:

$ cat 4f913fda8f19d129b7cd.svg 
export default "tpl/default/img/../img/forkawesome-webfont.svg";

$ cat 461edd6c43dd5e7b4428.woff2 
export default "../default/../fonts/Roboto-Bold.woff2";


The file names are also referenced in a css file that is generated
during the package build, but under css folder instead of js folder:

tpl/default/css/shaarli.min.css:  src: url(tpl/default/css/aca843d470d7635b6f54.eot?#iefix&v=1.2.0) format("embedded-opentype"), url(tpl/default/css/f4dd50aee036525d8cdd.woff2?v=1.2.0) format("woff2"), url(tpl/default/css/c7a58d6c0146bc67ed8f.woff?v=1.2.0) format("woff"), url(tpl/default/css/bf8f398f78d56b034664.ttf?v=1.2.0) format("truetype"), url(tpl/default/css/4f913fda8f19d129b7cd.svg?v=1.2.0#forkawesomeregular) format("svg");
tpl/default/css/shaarli.min.css:  src: local("Roboto"), local("Roboto-Regular"), url(tpl/default/css/629bb87304479fa3efe2.woff2) format("woff2"), url(tpl/default/css/7181d96f85d627b02e4b.woff) format("woff"); }
tpl/default/css/shaarli.min.css:  src: local("Roboto"), local("Roboto-Bold"), url(tpl/default/css/461edd6c43dd5e7b4428.woff2) format("woff2"), url(tpl/default/css/ffeaaa2a9ff5d05ec701.woff) format("woff"); }


I tried downgrading various build-dependencies that were recently
updated. I found that if I downgrade node-css-loader to
5.0.1+~cs14.0.5-1, then the issue does not appear.


-- System Information:
Debian Release: bookworm/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 5.19.0-1-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled