[Git][reproducible-builds/reproducible-website][master] 2024-04: mention dpkg bug regarding source hashes in .buildinfo files.

[Vagrant Cascadian (@vagrant)]

Vagrant Cascadian pushed to branch master at Reproducible Builds / reproducible-website


Commits:
eddb1dc4 by Vagrant Cascadian at 2024-05-10T12:45:05-07:00
2024-04: mention dpkg bug regarding source hashes in .buildinfo files.

- - - - -


1 changed file:

- _reports/2024-04.md


Changes:

=====================================
_reports/2024-04.md
=====================================
@@ -104,6 +104,8 @@ Simon's [post](https://blog.josefsson.org/2024/04/13/reproducible-and-minimal-so
 
 In Debian this month, Helmut Grohne [filed a bug](https://bugs.debian.org/1068809) suggesting the removal of `dh-buildinfo`, a tool to generate and distribute `.buildinfo`-like files within binary packages. Note that this is distinct from the `.buildinfo` generation performed by `dpkg-genbuildinfo`. By contrast, the entirely optional `dh-buildinfo` generated a `debian/buildinfo` file that would be shipped within binary packages as `/usr/share/doc/package/buildinfo_$arch.gz`.
 
+Adrian Bunk recently asked about [including source hashes in Debian's .buildinfo files](https://bugs.debian.org/1068483), which prompted Guillem Jover to refresh some old patches to dpkg to make this possible, which revealed some quirks Vagrant Cascadian discovered when testing.
+
 In addition, 21 reviews of Debian packages were added, 22 were updated and 16 were removed this month adding to [our knowledge about identified issues](https://tests.reproducible-builds.org/debian/index_issues.html). A number issue types have been added, such as new [`random_temporary_filenames_embedded_by_mesonpy`](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/67f129bc) and [`timestamps_added_by_librime`](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/3675debb) toolchain issues.
 
 [![]({{ "/images/reports/2024-04/opensuse.png#right" | relative_url }})](https://www.opensuse.org/)



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/eddb1dc494a54930616aed8a65f00d6ada71c7a7

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/eddb1dc494a54930616aed8a65f00d6ada71c7a7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20240510/f9b59e56/attachment.htm>