[Git][reproducible-builds/reproducible-notes][master] 13 commits: issues.yml add category for the 'Include-Resource' header that appears in some...

James Addison (@jayaddison) gitlab at salsa.debian.org
Mon Mar 11 16:59:54 UTC 2024



James Addison pushed to branch master at Reproducible Builds / reproducible-notes


Commits:
cc94c935 by James Addison at 2024-03-11T16:57:04+00:00
issues.yml add category for the 'Include-Resource' header that appears in some MANIFEST.MF files in Java .jar files

- - - - -
a7b544e2 by James Addison at 2024-03-11T16:57:04+00:00
packages.yml: update assessment for libcommons-lang3-java

- - - - -
606fad72 by James Addison at 2024-03-11T16:57:04+00:00
packages.yml: update assessment for libcommons-jxpath-java

- - - - -
cb545a84 by James Addison at 2024-03-11T16:57:04+00:00
packages.yml: update/remove assessment for libcommons-lang-java (reproducible)

- - - - -
4231ac72 by James Addison at 2024-03-11T16:57:04+00:00
packages.yml: update/remove assessment for libcommons-discovery-java (reproducible)

- - - - -
03d4e6d0 by James Addison at 2024-03-11T16:57:04+00:00
packages.yml: update/remove assessment for libcommons-digester-java (reproducible)

- - - - -
93eb4091 by James Addison at 2024-03-11T16:57:04+00:00
packages.yml: update/remove assessment for libcommons-dbcp-java (reproducible)

- - - - -
04f23bd3 by James Addison at 2024-03-11T16:57:04+00:00
packages.yml: update assessment for libcommons-compress-java

- - - - -
75cb239e by James Addison at 2024-03-11T16:57:04+00:00
packages.yml: update assessment for libcommons-codec-java

- - - - -
9038b382 by James Addison at 2024-03-11T16:57:04+00:00
packages.yml: update assessment for libcommons-net-java

- - - - -
8b7031de by James Addison at 2024-03-11T16:57:04+00:00
packages.yml: update/remove assessment for libcommons-validator-java (reproducible)

- - - - -
3992797a by James Addison at 2024-03-11T16:57:04+00:00
packages.yml: update assessment for libcommons-jexl2-java

- - - - -
2271c09c by James Addison at 2024-03-11T16:57:04+00:00
issues.yml: add Debian bugreport reference for filesystem_order_in_java_jar_manifest_mf_include_resource

- - - - -


2 changed files:

- issues.yml
- packages.yml


Changes:

=====================================
issues.yml
=====================================
@@ -460,6 +460,14 @@ python_wheel_package:
     by setting the WHEEL_FORCE_TIMESTAMP environment variable to an epoch value.
   url: https://wiki.debian.org/ReproducibleBuilds/PythonWheelPackage
   deterministic: True
+filesystem_order_in_java_jar_manifest_mf_include_resource:
+  description: |
+    Java .jar files written by some tools encode filesystem access ordering in the
+    "Include-Resource" MANIFEST.MF header.
+    https://github.com/jvm-repo-rebuild/reproducible-central/issues/99
+    https://issues.apache.org/jira/browse/FELIX-6602
+    https://github.com/apache/felix-dev/pull/208
+  url: https://bugs.debian.org/1066045
 random_order_in_java_jar_manifest_mf:
   description: |
     Java .jar files written by some tools have a random order in MANIFEST.MF.


=====================================
packages.yml
=====================================
@@ -12922,9 +12922,9 @@ libcommoncpp2:
     - captures_shell_variable_in_autofoo_script
     - records_build_flags
 libcommons-codec-java:
-  version: 1.10-1
+  version: 1.16.0-1
   issues:
-    - random_order_in_documentation_generated_by_javadoc
+    - filesystem_order_in_java_jar_manifest_mf_include_resource
 libcommons-collections3-java:
   version: 3.2.2-1
   issues:
@@ -12934,51 +12934,31 @@ libcommons-collections4-java:
   issues:
     - random_order_in_documentation_generated_by_javadoc
 libcommons-compress-java:
-  version: 1.13-1
+  version: 1.25.0-1
   comments: |
     src/assembly/bin.xml Adds files to a MANIFEST.MF header in some non-deterministic order.
-libcommons-dbcp-java:
-  version: 1.4-5
-  issues:
-    - random_order_in_documentation_generated_by_javadoc
-libcommons-digester-java:
-  version: 1.8.1-4
-  issues:
-    - random_order_in_documentation_generated_by_javadoc
-libcommons-discovery-java:
-  version: 0.5-3
   issues:
-    - random_order_in_documentation_generated_by_javadoc
+    - filesystem_order_in_java_jar_manifest_mf_include_resource
 libcommons-fileupload-java:
   version: 1.3.2-2
   issues:
     - random_order_in_documentation_generated_by_javadoc
 libcommons-jexl2-java:
-  version: 2.1.1-3
-  comments: |
-    Timestamp in Implementation-Build field in MANIFEST.MF.
-libcommons-jxpath-java:
-  version: 1.3-9
+  version: 2.1.1-6
   issues:
-    - random_order_in_documentation_generated_by_javadoc
-libcommons-lang-java:
-  version: 2.6-6
+    - filesystem_order_in_java_jar_manifest_mf_include_resource
+libcommons-jxpath-java:
+  version: 1.3-10
   issues:
-    - random_order_in_documentation_generated_by_javadoc
+    - filesystem_order_in_java_jar_manifest_mf_include_resource
 libcommons-lang3-java:
-  version: 3.4-1
+  version: 3.14.0-1
   issues:
-    - random_order_in_documentation_generated_by_javadoc
+    - filesystem_order_in_java_jar_manifest_mf_include_resource
 libcommons-net-java:
-  version: 3.3-2
-  comments: |
-    Compare #796439 against the predecessor package, libcommons2-net-java.
+  version: 3.9.0-1
   issues:
-    - random_order_in_documentation_generated_by_javadoc
-libcommons-validator-java:
-  version: 1:1.4.1-1
-  bugs:
-    - 785515
+    - filesystem_order_in_java_jar_manifest_mf_include_resource
 libconfig:
   version: 1.5-0.2
   issues:



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-notes/-/compare/0c2f08c7af92f0d3fb61abbf7138678b7fca76a5...2271c09c0e01160f4931300e6423797e4d5de3d7

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-notes/-/compare/0c2f08c7af92f0d3fb61abbf7138678b7fca76a5...2271c09c0e01160f4931300e6423797e4d5de3d7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20240311/aa606cac/attachment.htm>


More information about the rb-commits mailing list