GitHub user parshimers added a comment to the discussion: Build reproducibility for automated release signing
OK, now with the latest commit (ccc5da1f3), I think all the containers and tarballs should be reproducible with the correct PACKAGE_SNAPSHOT and SOURCE_DATE_EPOCH set. With the latest commit, and SOURCE_DATE_EPOCH=1791491650 & PACKAGE_SNAPSHOT=2026-10-08 , for y-websocket-server I get: manifest 92f8588c619170dd718fa15184786828e8afb38f88fb08ff03f25d4e0760bb0f config 17decee7f785a9fdf244930685c33f7313f14be08426ba40b246af4bf2ea2082 If that one passes, I think we can do one last round of review in PR #8812 and then merge it, since we can reasonably infer the rest of the containers that were reproducible will remain so. GitHub link: https://github.com/apache/texera/discussions/8807#discussioncomment-18982165 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected]
