Your message dated Sun, 22 Apr 2018 09:34:51 +0000
with message-id <[email protected]>
and subject line Bug#817979: fixed in modernizr 2.6.2+ds1-1.1
has caused the Debian Bug report #817979,
regarding modernizr: input order is not deterministic
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
817979: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=817979
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: modernizr
Version: 2.6.2+ds1-1
Severity: minor

Dear Maintainer,

I have notices that your package libjs-modernizr does not build
reproducibly from the modernizr source package because of
nondeterministic input order given by shell globbing.
See https://reproducible-builds.org/docs/stable-inputs/ for more
information.

I have attached a patch that makes the build reproducible for me.

Many thanks,
Sascha 
diff --git a/debian/rules b/debian/rules
index bf23418..e49a481 100755
--- a/debian/rules
+++ b/debian/rules
@@ -14,7 +14,7 @@ DEBVER := $(UPVER)+ds1
 	dh $@
 
 override_dh_auto_build:
-	cat feature-detects/*.js > feature-detects.js
+	find feature-detects -name '*.js' | LC_ALL=C sort | xargs cat > feature-detects.js
 	uglifyjs -o modernizr.min.js modernizr.js
 
 	# Drop copyright from minified version since it would get

--- End Message ---
--- Begin Message ---
Source: modernizr
Source-Version: 2.6.2+ds1-1.1

We believe that the bug you reported is fixed in the latest version of
modernizr, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andrej Shadura <[email protected]> (supplier of updated modernizr package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 22 Apr 2018 11:08:17 +0200
Source: modernizr
Binary: libjs-modernizr
Architecture: source
Version: 2.6.2+ds1-1.1
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers 
<[email protected]>
Changed-By: Andrej Shadura <[email protected]>
Description:
 libjs-modernizr - JavaScript library to detect HTML5 and CSS3 features in the 
user'
Closes: 817979
Changes:
 modernizr (2.6.2+ds1-1.1) unstable; urgency=medium
 .
   * Non-maintainer upload
 .
   [ Sascha Steinbiss ]
   * Make input order deterministic (Closes: #817979)
Checksums-Sha1:
 8b9833fd14c33f164d478b1db12471da16469221 1726 modernizr_2.6.2+ds1-1.1.dsc
 d246c5ab68e636f2eb929978a7c7d84233506fc0 2708 
modernizr_2.6.2+ds1-1.1.debian.tar.xz
Checksums-Sha256:
 3ad0f6b6e276a3b359c1730503ee6c15f9221ec398c08f4080d432d15d650fd0 1726 
modernizr_2.6.2+ds1-1.1.dsc
 a8506184d894a81b37df94992127272eb0a96ef069c24a746d4e569f5996a149 2708 
modernizr_2.6.2+ds1-1.1.debian.tar.xz
Files:
 748b8f119043c40317b428a324241fba 1726 web extra modernizr_2.6.2+ds1-1.1.dsc
 af9cb6e7114786cc52aaa3dd8c4cadec 2708 web extra 
modernizr_2.6.2+ds1-1.1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQEcBAEBCAAGBQJa3FIVAAoJEF5AjNkc2DnSj3YH/0W8zeGXl8QzQdzk5bFwZVy7
w2n4zoET0FC3GJQywB4i5odbqO935orUL6m+qAdXIooLQP7UKFPjCqrQmDlyza7D
HaiyytYkeZTl8+t+WNK+Reer03RKCJfpZVYh9Ip9gCwWIMeHIRnH3mVNHsFq/oi/
n9u21wGPs6FCZnWtnZ/tdeIs9Bz35AOqT9uqlXze6ZG0SjzzzZWcU5cAExKqznzb
Wd5hFO6FqDBZMaltno7ztvgOaU3KDjP+sxabbcAJXgq/3a9IWCISKAad7P9YH2AC
z0V0SZol+N/Z7E0+Cd/VhFluZcGKb+e1jFZryHzNkcd1d50luI7+cTEL3yo+d0o=
=jAUf
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to