* Xavier <[email protected]> [2026-08-31 13:24]:
A reproducible test based on check/nocheck would have detect the xz attack (https://en.wikipedia.org/wiki/XZ_Utils_backdoor)
That would have been nice and https://tests.reproducible-builds.org/debian is using nocheck for one build now and there is ongoing work to add support for that in debrebuild https://salsa.debian.org/debian/devscripts/-/merge_requests/662/ and salsa-ci: https://salsa.debian.org/salsa-ci-team/pipeline/-/merge_requests/735 . I think it is too early to enable it on https://reproduce.debian.net/ already to block testing migration with it but we will surely get there.
Cheers Jochen
signature.asc
Description: PGP signature
-- Pkg-javascript-devel mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
