[Git][reproducible-builds/reproducible-website][master] 2025-03 += OSS Rebuild updates

[Chris Lamb (@lamby)]

Chris Lamb pushed to branch master at Reproducible Builds / reproducible-website


Commits:
014be47e by Matthew Suozzo at 2025-04-09T18:40:20+00:00
2025-03 += OSS Rebuild updates

- - - - -


1 changed file:

- _reports/2025-03.md


Changes:

=====================================
_reports/2025-03.md
=====================================
@@ -72,6 +72,22 @@ The PEP, which itself supersedes [PEP 665](https://peps.python.org/pep-0665/), m
 
 <br>
 
+### OSS Rebuild real-time validation and tooling improvements
+
+[OSS Rebuild](https://github.com/google/oss-rebuild) aims to automate rebuilding upstream language packages (e.g. from PyPI, crates.io, npm registries) and publish signed attestations and build definitions for public use.
+
+OSS Rebuild is now attempting rebuilds as packages are published, shortening the time to validating rebuilds and publishing attestations.
+
+Aman Sharma contributed classifiers and fixes for common sources of non-determinism in JAR packages.
+
+Improvements were also made to some of the core tools in the project:
+
+- [timewarp](https://github.com/google/oss-rebuild/tree/ca63fb9/cmd/timewarp) for simulating the registry responses from sometime in the past.
+- [proxy](https://github.com/google/oss-rebuild/tree/ca63fb9/cmd/proxy) for transparent interception and logging of network activity.
+- and [stabilize](https://github.com/google/oss-rebuild/tree/ca63fb9/cmd/stabilize), yet another nondeterminism fixer.
+
+<br>
+
 ### SimpleX Chat server components now reproducible
 
 [![]({{ "/images/reports/2025-03/simplex-chat.png#right" | relative_url }})](https://simplex.chat/blog/20250308-simplex-chat-v6-3-new-user-experience-safety-in-public-groups.html)



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/014be47e537788294186b0660d0fbf37fcb3bcab

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/014be47e537788294186b0660d0fbf37fcb3bcab
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20250409/1468a8f5/attachment.htm>