Source: node-marked
Version: 4.0.5+ds-1
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org
Hi,
Whilst working on the Reproducible Builds effort [0] we noticed that
node-marked could not be built reproducibly.
This is because the existing reproducible.patch is not complete and
misses a copyright notice that has a nondeterministic date. A patch
to the current packaging is attached, but as this is a "diff of a
diff", I have also attached an updated reproducible.patch.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
--- a/debian/patches/reproducible.patch 2021-11-28 11:34:20.634085499 -0800
--- b/debian/patches/reproducible.patch 2021-11-28 11:37:35.838392663 -0800
@@ -3,9 +3,18 @@
Forwarded: not-needed
Last-Update: 2020-12-01
---- a/rollup.config.js
-+++ b/rollup.config.js
-@@ -19,7 +19,7 @@
+--- node-marked-4.0.5+ds.orig/rollup.config.js
++++ node-marked-4.0.5+ds/rollup.config.js
+@@ -19,7 +19,7 @@ The code in this file is generated from
+ license({
+ banner: `
+ marked - a markdown parser
+-Copyright (c) 2011-${new Date().getFullYear()}, Christopher Jeffrey. (MIT
Licensed)
++Copyright (c) 2011-${(new Date(process.env.SOURCE_DATE_EPOCH ?
(process.env.SOURCE_DATE_EPOCH * 1000) : new Date().getTime())).getFullYear()},
Christopher Jeffrey. (MIT Licensed)
+ https://github.com/markedjs/marked
+ `
+ }),
+@@ -46,7 +46,7 @@ The code in this file is generated from
license({
banner: `
marked - a markdown parser
--- a/rollup.config.js 2021-11-28 11:34:20.634085499 -0800
--- b/rollup.config.js 2021-11-28 11:37:32.802388038 -0800
@@ -46,7 +46,7 @@
license({
banner: `
marked - a markdown parser
-Copyright (c) 2011-${new Date().getFullYear()}, Christopher Jeffrey. (MIT
Licensed)
+Copyright (c) 2011-${(new Date(process.env.SOURCE_DATE_EPOCH ?
(process.env.SOURCE_DATE_EPOCH * 1000) : new Date().getTime())).getFullYear()},
Christopher Jeffrey. (MIT Licensed)
https://github.com/markedjs/marked
`
}),
Description: make build reproducible
Author: Xavier Guimard <y...@debian.org>
Forwarded: not-needed
Last-Update: 2020-12-01
--- node-marked-4.0.5+ds.orig/rollup.config.js
+++ node-marked-4.0.5+ds/rollup.config.js
@@ -19,7 +19,7 @@ The code in this file is generated from
license({
banner: `
marked - a markdown parser
-Copyright (c) 2011-${new Date().getFullYear()}, Christopher Jeffrey. (MIT Licensed)
+Copyright (c) 2011-${(new Date(process.env.SOURCE_DATE_EPOCH ? (process.env.SOURCE_DATE_EPOCH * 1000) : new Date().getTime())).getFullYear()}, Christopher Jeffrey. (MIT Licensed)
https://github.com/markedjs/marked
`
}),
@@ -46,7 +46,7 @@ The code in this file is generated from
license({
banner: `
marked - a markdown parser
-Copyright (c) 2011-${new Date().getFullYear()}, Christopher Jeffrey. (MIT Licensed)
+Copyright (c) 2011-${(new Date(process.env.SOURCE_DATE_EPOCH ? (process.env.SOURCE_DATE_EPOCH * 1000) : new Date().getTime())).getFullYear()}, Christopher Jeffrey. (MIT Licensed)
https://github.com/markedjs/marked
`
}),
