[Git][reproducible-builds/reproducible-website][master] 2025-11: Initial draft
Chris Lamb (@lamby)
gitlab at salsa.debian.org
Mon Dec 1 23:42:33 UTC 2025
Chris Lamb pushed to branch master at Reproducible Builds / reproducible-website
Commits:
61508a1e by Chris Lamb at 2025-12-01T15:41:08-08:00
2025-11: Initial draft
- - - - -
8 changed files:
- _reports/2025-11.md
- + images/reports/2025-11/2511.12274.png
- + images/reports/2025-11/TMr5kb_2eew.png
- + images/reports/2025-11/debian.png
- + images/reports/2025-11/opensuse.png
- + images/reports/2025-11/reproducible-builds.png
- + images/reports/2025-11/seagl.png
- + images/reports/2025-11/website.png
Changes:
=====================================
_reports/2025-11.md
=====================================
@@ -6,55 +6,247 @@ title: "Reproducible Builds in November 2025"
draft: true
---
-* [FIXME](https://opensourcesecurity.io/2025/2025-11-xz-debian-otto/)
+**Welcome to the report for November 2025 from the [Reproducible Builds](https://reproducible-builds.org) project!**
+{: .lead}
-* [FIXME](https://salsa.debian.org/installer-team/debian-installer/-/merge_requests/68) - Holger merged two commits by Jochen.
+[![]({{ "/images/reports/2025-11/reproducible-builds.png#right" | relative_url }})](https://reproducible-builds.org/)
-**reprotest** version `0.7.31` was [uploaded to Debian unstable](https://tracker.debian.org/news/1685384/accepted-reprotest-0731-source-into-unstable/) too, actually fixing things:
- * Do not vary arch personality if kernel is not varied. Thanks to
- Raúl Cumplido and
- https://salsa.debian.org/reproducible-builds/reprotest/-/issues/15
-FIXME: ^ this needs reformatting and more. maybe move one down too?
+These monthly reports outline what we've been up to over the past month, highlighting items of news from elsewhere in the increasingly-important area of software supply-chain security. As always, if you are interested in contributing to the Reproducible Builds project, please see the [*Contribute*]({{ "/contribute/" | relative_url }}) page on our website.
-**reprotest** version `0.7.32` was [uploaded to Debian unstable](https://tracker.debian.org/news/1685661/accepted-reprotest-0732-source-into-unstable/) by Holger Levsen. This was in order to incorporate a fix by Vagrant Cascadian to fix a build failure caused by extra whitespace in a previous `debian/changelog` entry. [[...](https://salsa.debian.org/reproducible-builds/reprotest/-/commit/1ebdf3e8dbc59958d0868377fce83a8e00f0dff0)]
+<!--
-* [FIXME](https://en.wikipedia.org/wiki/Comparison_of_Linux_distributions#Technical)
+**In this report:**
-* FIXME [test failure due to daylight savings time](https://github.com/rails/rails/pull/53546)
+-->
-* FIXME: Jörg deployed a patch from Ivo for a bug filed by Holger: https://bugs.debian.org/1096129 "buildd.d.o: some build-depends from incoming.d.o don't end up on snapshot.d.o"
+---
+
+### '*10 years of Reproducible Builds*' at [SeaGL](https://seagl.org/) 2025
+
+[![]({{ "/images/reports/2025-11/seagl.png#right" | relative_url }})](https://pretalx.seagl.org/2025/talk/PETMRE/)
+
+On Friday 8th November, Chris Lamb gave a talk called [*10 years of Reproducible Builds*](https://pretalx.seagl.org/2024/talk/W73ACM/) at [SeaGL](https://seagl.org/) in Seattle, WA.
+
+Founded in 2013, SeaGL is a free, grassroots technical summit dedicated to spreading awareness and knowledge about free source software, hardware and culture. Chris' talk:
+
+> […] introduces the concept of reproducible builds, its technical underpinnings and its potentially transformative impact on software security and transparency. It is aimed at developers, security professionals and policy-makers who are concerned with enhancing trust and accountability in our software. It also provides a history of the Reproducible Builds project, which is approximately ten years old. How are we getting on? What have we got left to do? Aren't all the builds reproducible now?
+
+<br>
+
+### Distribution work
+
+[![]({{ "/images/reports/2025-11/debian.png#right" | relative_url }})](https://debian.org/)
+
+In **Debian** this month, Jochen Sprickerhof [created a merge request](https://salsa.debian.org/salsa-ci-team/pipeline/-/merge_requests/678) to replace the use of *reprotest* in Debian's [Salsa Continuous Integration (CI) pipeline](https://salsa.debian.org/salsa-ci-team/pipeline/-/blob/master/README.md) with *debrebuild*. Joschen cites the advantages as being threefold: firstly, that "only one extra build needed"; it "uses the same `sbuild` and `ccache` tooling as the normal build"; and "works for any Debian release". The merge request was merged by Emmanuel Arias and is now active.
+
+Holger then merged [two commits by Jochen Sprickerhof](https://salsa.debian.org/installer-team/debian-installer/-/merge_requests/68) in order to address a `fakeroot`-related reproducibility issue in the `debian-installer`.
+
+Jörg Jaspert deployed a [patch by Ivo De Decker](https://salsa.debian.org/ftp-team/dak/-/merge_requests/287) for a bug originally [filed by Holger in February 2025](https://bugs.debian.org/1096129) related to some Debian packages not being archived on [*snapshot.debian.org*](http://snapshot.debian.org/).
+
+[Roland Clobus performed some analysis](https://lists.reproducible-builds.org/pipermail/rb-general/2025-November/003937.html) on the "live" Debian *trixie* images, which he determined were not reproducible. In addition, 145 reviews of Debian packages were added, 12 were updated and 15 were removed this month adding to [our knowledge about identified issues](https://tests.reproducible-builds.org/debian/index_issues.html).
+
+Lastly, Jochen Sprickerhof filed a bug announcing their attention to "[binary NMU](https://wiki.debian.org/binNMU)" a very large number of the [R programming language](https://www.r-project.org/) after a [reproducibility-related toolchain bug](https://bugs.debian.org/1089197) was fixed.
+
+<br>
+
+[![]({{ "/images/reports/2025-11/opensuse.png#right" | relative_url }})](https://www.opensuse.org/)
+
+Bernhard M. Wiedemann posted another [**openSUSE**](https://www.opensuse.org/) [monthly update](https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/ZYTBSM2FG6OK2XL6KCBXHIVFTWOUB524/) for their work there.
+
+<br>
+
+### Tool development
+
+**diffoscope** version `307` was [uploaded to Debian unstable](https://tracker.debian.org/news/1687430/accepted-diffoscope-308-source-into-unstable/) (as well as [version `309`](https://tracker.debian.org/news/1689307/accepted-diffoscope-309-source-into-unstable/)). These changes included further attempts to automatically attempt to deploy to [PyPI](https://pypi.org/) by liaising with the PyPI developers/maintainers (with this experimental feature). [[…](https://salsa.debian.org/reproducible-builds/diffoscope/commit/82df6d3f)][[…](https://salsa.debian.org/reproducible-builds/diffoscope/commit/811a72eb)][[…](https://salsa.debian.org/reproducible-builds/diffoscope/commit/8ba9c2ce)]
+
+In addition, **reprotest** versions `0.7.31` and `0.7.32` were uploaded to Debian *unstable* by Holger Levsen, who also made the following changes:
+
+* Do not vary the architecture personality if the kernel is not varied. (Thanks to Raúl Cumplido). [[…](https://salsa.debian.org/reproducible-builds/reprotest/commit/f8f1ca9)]
+* Drop the `debian/watch` file, as Lintian now flags this as error for 'native' Debian packages. [[…](https://salsa.debian.org/reproducible-builds/reprotest/commit/86df6d4)][[…](https://salsa.debian.org/reproducible-builds/reprotest/commit/b4da3ac)]
+* Bump `Standards-Version` to 4.7.2, with no changes needed. [[…](https://salsa.debian.org/reproducible-builds/reprotest/commit/61e7ab3)]
+* Drop the `Rules-Requires-Root` header as it is no longer required.. [[…](https://salsa.debian.org/reproducible-builds/reprotest/commit/fd18a1c)]
+
+In addition, however, Vagrant Cascadian fixed a build failure by removing some extra whitespace from an older changelog entry. [[…](https://salsa.debian.org/reproducible-builds/reprotest/commit/1ebdf3e)]
+
+<br>
+
+### Website updates
+
+[![]({{ "/images/reports/2025-11/website.png#right" | relative_url }})]({{ "/" | relative_url }})
+
+Once again, there were a number of improvements made to our website this month including:
+
+* Bernhard M. Wiedemann updated the [`SOURCE_DATE_EPOCH`]({{ "/docs/source-date-epoch/" | relative_url}}) page to fix the Lisp example syntax. [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/ebe29a55)]
+
+* Holger Levsen updated a number of pages on our website related to our [recent summit in Vienna]({{ "/events/vienna2025/" | relative_url }}) [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/826ca62c)][[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/bc1d1250)][[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/9445247d)][[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/fa5311ae)][[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/7b5bd4b4)], and added a link to [the YouTube video](https://www.youtube.com/watch?v=YN1XiflsK2w) of [his recent talk](https://transparency.dev/summit2025/talks/reproducible-builds.html) at [Transparency.dev](https://transparency.dev/summit2025/) in Gothenburg, Sweden [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/e47221bb)].
+
+* James Addison replaced a broken link on the [*Reproducibility Troubleshooting*]({{ "/docs/reproducibility-troubleshooting/" | relative_url }}) page with one using [Archive.org](https://archive.org/). [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/d2ebfd81)]
+
+* *kpcyrd* also updated the [Vienna summit page]({{ "/events/vienna2025/" | relative_url }}) in order to update group picture [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/a83a7571)] as well as to expand the project list [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/8530e1d4)].
+
+* Robert Stupp added a new [*Helm*]({{ "/docs/helm/" | relative_url }}) page [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/4e7ca60d)][[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/3aad9c8b)], and fleshed out some [Gradle](https://gradle.org/) specifics, etc. on the [*JVM*]({{ "/docs/jvm/" | relative_url }}) page [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/477543d8)].
+
+<br>
+
+### [*Software Supply Chain Security of Web3*](https://arxiv.org/abs/2511.12274)
+
+[![]({{ "/images/reports/2025-11/2511.12274.png#right" | relative_url }})](https://arxiv.org/abs/2511.12274)
+
+Via our [mailing list](https://lists.reproducible-builds.org/pipermail/rb-general/), [Martin Monperrus let us know](https://lists.reproducible-builds.org/pipermail/rb-general/2025-November/003929.html) about their recently-published page on the [*Software Supply Chain Security of Web3*](https://arxiv.org/abs/2511.12274). The abstract of their paper is as follows:
+
+> Web3 applications, built on blockchain technology, manage billions of dollars in digital assets through decentralized applications (dApps) and smart contracts. These systems rely on complex, software supply chains that introduce significant security vulnerabilities. This paper examines the software supply chain security challenges unique to the Web3 ecosystem, where traditional Web2 software supply chain problems intersect with the immutable and high-stakes nature of blockchain technology. We analyze the threat landscape and propose mitigation strategies to strengthen the security posture of Web3 systems.
-* [FIXME](https://arxiv.org/pdf/2511.12274)
+Their paper lists reproducible builds as one of the mitigating strategies. A [PDF](https://arxiv.org/pdf/2511.12274) of the full text is available to download.
-* FIXME: https://salsa.debian.org/salsa-ci-team/pipeline/-/merge_requests/678 by jochensp was merged by Emmanuel Arias and is active now.
+<br>
-* Jochensp and Elbrus wrote "Bug#1121479: binNMU r-* for reproduce.debian.net"
- 'we propose to binNMU the r-* packages after #1089197 was closed in src:dh-r. Note that this will alter the Recommends: and Suggests: of the package.'
+### Miscellaneous news
-* [openSUSE monthly](https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/ZYTBSM2FG6OK2XL6KCBXHIVFTWOUB524/
-)
+* It was noticed that the [*Comparison of Linux distributions*](https://en.wikipedia.org/wiki/Comparison_of_Linux_distributions) Wikipedia page now has a "Reproducible builds" column.
+
+* The popular [Ruby on Rails](https://rubyonrails.org/) web development framework had a reproducibility-related [test failure due to daylight savings time](https://github.com/rails/rails/pull/53546) changes.
+
+[![]({{ "/images/reports/2025-11/TMr5kb_2eew.png#right" | relative_url }})](https://www.youtube.com/watch?v=TMr5kb_2eew)
+
+* Debian Developer Otto Kekäläinen appeared on the [Open Source Security podcast](https://opensourcesecurity.io/), relating to [their blog post about the XZ backdoor](https://optimizedbyotto.com/post/xz-backdoor-debian-git-detection/). The video, audio, as well as a full transcript of the show are available on the [Open Source Security podcast page for this episode](https://opensourcesecurity.io/2025/2025-11-xz-debian-otto/).
+
+* Thomas Weißschuh posted to [our mailing list](https://lists.reproducible-builds.org/listinfo/rb-general/) in order to [look for feedback on their `CONFIG_MODULE_HASHES` patchset for the Linux kernel](https://lists.reproducible-builds.org/pipermail/rb-general/2025-November/003925.html), "which aims to enable reproducible kernel packages for Linux distributions".
+
+* *kpcyrd* also posted our list with a post entitled "[*Github Actions and the hashFiles incident*](https://lists.reproducible-builds.org/pipermail/rb-general/2025-November/003941.html)".
+
+* Simon Mudd posted to the list as well "[looking for reproducible RPM building / rebuilding tooling](https://lists.reproducible-builds.org/pipermail/rb-general/2025-November/003946.html)". Simon had watched a [recent talk by Holger Levsen](https://www.youtube.com/watch?v=afJEjSf1m2Q) and was trying to ensure that he could rebuild various [MySQL](https://www.mysql.com/) `.rpms`.
+
+* Lastly, there was a [thread related to the hosting of the website](https://lists.reproducible-builds.org/pipermail/rb-general/2025-November/thread.html#3928) powering this very report.
+
+<br>
+
+### Upstream patches
+
+The Reproducible Builds project detects, dissects and attempts to fix as many currently-unreproducible packages as possible. We endeavour to send all of our patches upstream where appropriate. This month, we wrote a large number of such patches, including:
* Bernhard M. Wiedemann:
- * [`dealers-choice`](https://build.opensuse.org/request/show/1317313) (nocheck)
- * [`clamav`](https://build.opensuse.org/request/show/1317951) (rust toolchain)
- * [`libplasma6`](https://build.opensuse.org/request/show/1318951) (qmlcachegen race)
- * [`SARndbox`](https://build.opensuse.org/request/show/1320403) (race)
+ * [`SARndbox`](https://build.opensuse.org/request/show/1320403)
+ * [`clamav`](https://build.opensuse.org/request/show/1317951)
+ * [`contrast/identity/loupe/mousai`](https://bugzilla.opensuse.org/show_bug.cgi?id=1253488)
+ * [`cosmic`](https://bugzilla.opensuse.org/show_bug.cgi?id=1254147)
+ * [`dealers-choice`](https://build.opensuse.org/request/show/1317313)
+ * [`falcon`](https://github.com/falconry/falcon/issues/2567)
+ * [`FreeDoko`](https://gitlab.com/dknof/FreeDoko/-/merge_requests/2)
+ * [`gnutls`](https://bugzilla.opensuse.org/show_bug.cgi?id=1254370)
+ * [`gods-deluxe`](https://build.opensuse.org/request/show/1320522)
+ * [`Kinect`](https://build.opensuse.org/request/show/1320404)
+ * [`libplasma6`](https://build.opensuse.org/request/show/1318951)
+ * [`llvm`](https://github.com/ROCm/llvm-project/pull/548)
+ * [`rnp`](https://github.com/rnpgp/rnp/issues/2371)
+ * [`rocsolver`](https://src.opensuse.org/ROCm/rocsolver/pulls/1)
+ * [`switcheroo`](https://gitlab.com/adhami3310/Switcheroo/-/issues/86)
+ * [`vdrift`](https://build.opensuse.org/request/show/1320406)
+
+* Arnout Engelen:
+
+ * [`FreeDoko`](https://gitlab.com/dknof/FreeDoko/-/merge_requests/2) (date)
* [`Kinect`](https://build.opensuse.org/request/show/1320404) (date)
- * [`vdrift`](https://build.opensuse.org/request/show/1320406) (date)
- * [`gods-deluxe`](https://build.opensuse.org/request/show/1320522) (jar mtimes)
+ * [`SARndbox`](https://build.opensuse.org/request/show/1320403) (race)
+ * [`clamav`](https://build.opensuse.org/request/show/1317951) (rust toolchain)
+ * [`contrast/identity/loupe/mousai`](https://bugzilla.opensuse.org/show_bug.cgi?id=1253488) (need glib-macros update)
+ * [`cosmic`](https://bugzilla.opensuse.org/show_bug.cgi?id=1254147) (cosmic* HashMap)
+ * [`dealers-choice`](https://build.opensuse.org/request/show/1317313) (nocheck)
* [`falcon`](https://github.com/falconry/falcon/issues/2567) (python-falcon date)
+ * [`gnutls`](https://bugzilla.opensuse.org/show_bug.cgi?id=1254370) (FTBFS-CPU)
+ * [`gods-deluxe`](https://build.opensuse.org/request/show/1320522) (jar mtimes)
+ * [`ibus`](https://github.com/ibus/ibus/pull/2821) (parallelism)
+ * [`libplasma6`](https://build.opensuse.org/request/show/1318951) (qmlcachegen race)
* [`llvm`](https://github.com/ROCm/llvm-project/pull/548) (rocm-omp date)
+ * [`qmlcachegen`](https://qt-project.atlassian.net/browse/QTBUG-137440) (with Ulf Hermann)
* [`rnp`](https://github.com/rnpgp/rnp/issues/2371) (FTBFS-2041)
- * [`contrast/identity/loupe/mousai`](https://bugzilla.opensuse.org/show_bug.cgi?id=1253488) (need glib-macros update)
* [`rocsolver`](https://src.opensuse.org/ROCm/rocsolver/pulls/1) (FTBFS-j1)
* [`switcheroo`](https://gitlab.com/adhami3310/Switcheroo/-/issues/86) (FTBFS-j1)
- * [`cosmic`](https://bugzilla.opensuse.org/show_bug.cgi?id=1254147) (cosmic* HashMap)
- * [`FreeDoko`](https://gitlab.com/dknof/FreeDoko/-/merge_requests/2) (date)
- * [`gnutls`](https://bugzilla.opensuse.org/show_bug.cgi?id=1254370) (FTBFS-CPU)
-
-* Arnout Engelen:
+ * [`vdrift`](https://build.opensuse.org/request/show/1320406) (date)
- * [`Qt qmlcachegen`](https://qt-project.atlassian.net/browse/QTBUG-137440) (with Ulf Hermann)
- * [`ibus`](https://github.com/ibus/ibus/pull/2821) (parallelism)
+* Chris Lamb:
+
+ * [#1120066](https://bugs.debian.org/1120066) filed against [`python-gffutils`](https://tracker.debian.org/pkg/python-gffutils).
+ * [#1120068](https://bugs.debian.org/1120068) filed against [`python-biom-format`](https://tracker.debian.org/pkg/python-biom-format).
+ * [#1120069](https://bugs.debian.org/1120069) filed against [`python-requests-cache`](https://tracker.debian.org/pkg/python-requests-cache).
+ * [#1120070](https://bugs.debian.org/1120070) filed against [`python-tld`](https://tracker.debian.org/pkg/python-tld).
+ * [#1120121](https://bugs.debian.org/1120121) filed against [`smart-open`](https://tracker.debian.org/pkg/smart-open).
+ * [#1120122](https://bugs.debian.org/1120122) filed against [`vanguards`](https://tracker.debian.org/pkg/vanguards).
+ * [#1120123](https://bugs.debian.org/1120123) filed against [`pycifrw`](https://tracker.debian.org/pkg/pycifrw).
+ * [#1120124](https://bugs.debian.org/1120124) filed against [`golang-github-apptainer-container-library-client`](https://tracker.debian.org/pkg/golang-github-apptainer-container-library-client).
+ * [#1120330](https://bugs.debian.org/1120330) filed against [`python-ofxhome`](https://tracker.debian.org/pkg/python-ofxhome).
+ * [#1120331](https://bugs.debian.org/1120331) filed against [`python-lupa`](https://tracker.debian.org/pkg/python-lupa).
+ * [#1120332](https://bugs.debian.org/1120332) filed against [`mu-editor`](https://tracker.debian.org/pkg/mu-editor).
+ * [#1120340](https://bugs.debian.org/1120340) filed against [`python-spdx-tools`](https://tracker.debian.org/pkg/python-spdx-tools).
+ * [#1120342](https://bugs.debian.org/1120342) filed against [`python-django-waffle`](https://tracker.debian.org/pkg/python-django-waffle).
+ * [#1120351](https://bugs.debian.org/1120351) filed against [`biosquid`](https://tracker.debian.org/pkg/biosquid).
+ * [#1120352](https://bugs.debian.org/1120352) filed against [`dateparser`](https://tracker.debian.org/pkg/dateparser).
+ * [#1120353](https://bugs.debian.org/1120353) filed against [`parsinsert`](https://tracker.debian.org/pkg/parsinsert).
+ * [#1120357](https://bugs.debian.org/1120357) filed against [`rdf2rml`](https://tracker.debian.org/pkg/rdf2rml).
+ * [#1120405](https://bugs.debian.org/1120405) filed against [`python-et-xmlfile`](https://tracker.debian.org/pkg/python-et-xmlfile).
+ * [#1120528](https://bugs.debian.org/1120528) filed against [`deblur`](https://tracker.debian.org/pkg/deblur).
+ * [#1120529](https://bugs.debian.org/1120529) filed against [`ytcc`](https://tracker.debian.org/pkg/ytcc).
+ * [#1120530](https://bugs.debian.org/1120530) filed against [`pgpainless`](https://tracker.debian.org/pkg/pgpainless).
+ * [#1120531](https://bugs.debian.org/1120531) filed against [`trillian`](https://tracker.debian.org/pkg/trillian).
+ * [#1120532](https://bugs.debian.org/1120532) filed against [`pywavelets`](https://tracker.debian.org/pkg/pywavelets).
+ * [#1120591](https://bugs.debian.org/1120591) filed against [`jsonpath-ng`](https://tracker.debian.org/pkg/jsonpath-ng).
+ * [#1120592](https://bugs.debian.org/1120592) filed against [`presto`](https://tracker.debian.org/pkg/presto).
+ * [#1120593](https://bugs.debian.org/1120593) filed against [`python-pyutil`](https://tracker.debian.org/pkg/python-pyutil).
+ * [#1120629](https://bugs.debian.org/1120629) filed against [`python-os-apply-config`](https://tracker.debian.org/pkg/python-os-apply-config).
+ * [#1120631](https://bugs.debian.org/1120631) filed against [`pydata-sphinx-theme`](https://tracker.debian.org/pkg/pydata-sphinx-theme).
+ * [#1120632](https://bugs.debian.org/1120632) filed against [`python-ciso8601`](https://tracker.debian.org/pkg/python-ciso8601).
+ * [#1120633](https://bugs.debian.org/1120633) filed against [`python-pymummer`](https://tracker.debian.org/pkg/python-pymummer).
+ * [#1120634](https://bugs.debian.org/1120634) filed against [`qcat`](https://tracker.debian.org/pkg/qcat).
+ * [#1120870](https://bugs.debian.org/1120870) filed against [`tkgate`](https://tracker.debian.org/pkg/tkgate).
+ * [#1120871](https://bugs.debian.org/1120871) filed against [`tkgate`](https://tracker.debian.org/pkg/tkgate).
+ * [#1120872](https://bugs.debian.org/1120872) filed against [`ruby-gnuplot`](https://tracker.debian.org/pkg/ruby-gnuplot).
+ * [#1120873](https://bugs.debian.org/1120873) filed against [`python-nixio`](https://tracker.debian.org/pkg/python-nixio).
+ * [#1120874](https://bugs.debian.org/1120874) filed against [`python-altair`](https://tracker.debian.org/pkg/python-altair).
+ * [#1120875](https://bugs.debian.org/1120875) filed against [`python-graphene`](https://tracker.debian.org/pkg/python-graphene).
+ * [#1120876](https://bugs.debian.org/1120876) filed against [`python-phabricator`](https://tracker.debian.org/pkg/python-phabricator).
+ * [#1120877](https://bugs.debian.org/1120877) filed against [`python-slimmer`](https://tracker.debian.org/pkg/python-slimmer).
+ * [#1120878](https://bugs.debian.org/1120878) filed against [`python-kafka`](https://tracker.debian.org/pkg/python-kafka).
+ * [#1120879](https://bugs.debian.org/1120879) filed against [`python-sshsig`](https://tracker.debian.org/pkg/python-sshsig).
+ * [#1120880](https://bugs.debian.org/1120880) filed against [`python-babelgladeextractor`](https://tracker.debian.org/pkg/python-babelgladeextractor).
+ * [#1120881](https://bugs.debian.org/1120881) filed against [`python-genson`](https://tracker.debian.org/pkg/python-genson).
+ * [#1120882](https://bugs.debian.org/1120882) filed against [`flawfinder`](https://tracker.debian.org/pkg/flawfinder).
+ * [#1120883](https://bugs.debian.org/1120883) filed against [`crasm`](https://tracker.debian.org/pkg/crasm).
+ * [#1121064](https://bugs.debian.org/1121064) filed against [`insilicoseq`](https://tracker.debian.org/pkg/insilicoseq).
+ * [#1121065](https://bugs.debian.org/1121065) filed against [`pychopper`](https://tracker.debian.org/pkg/pychopper).
+ * [#1121066](https://bugs.debian.org/1121066) filed against [`pycparser`](https://tracker.debian.org/pkg/pycparser).
+ * [#1121067](https://bugs.debian.org/1121067) filed against [`whipper`](https://tracker.debian.org/pkg/whipper).
+ * [#1121068](https://bugs.debian.org/1121068) filed against [`vt`](https://tracker.debian.org/pkg/vt).
+ * [#1121069](https://bugs.debian.org/1121069) filed against [`pyxnat`](https://tracker.debian.org/pkg/pyxnat).
+ * [#1121070](https://bugs.debian.org/1121070) filed against [`golang-github-kshedden-statmodel`](https://tracker.debian.org/pkg/golang-github-kshedden-statmodel).
+ * [#1121071](https://bugs.debian.org/1121071) filed against [`nim-hts`](https://tracker.debian.org/pkg/nim-hts).
+ * [#1121072](https://bugs.debian.org/1121072) filed against [`golang-github-emicklei-dot`](https://tracker.debian.org/pkg/golang-github-emicklei-dot).
+ * [#1121073](https://bugs.debian.org/1121073) filed against [`golang-gonum-v1-plot`](https://tracker.debian.org/pkg/golang-gonum-v1-plot).
+ * [#1121074](https://bugs.debian.org/1121074) filed against [`beangulp`](https://tracker.debian.org/pkg/beangulp).
+ * [#1121075](https://bugs.debian.org/1121075) filed against [`virulencefinder`](https://tracker.debian.org/pkg/virulencefinder).
+ * [#1121076](https://bugs.debian.org/1121076) filed against [`ansible-lint`](https://tracker.debian.org/pkg/ansible-lint).
+ * [#1121077](https://bugs.debian.org/1121077) filed against [`entropybroker`](https://tracker.debian.org/pkg/entropybroker).
+ * [#1121078](https://bugs.debian.org/1121078) filed against [`namecheap`](https://tracker.debian.org/pkg/namecheap).
+ * [#1121141](https://bugs.debian.org/1121141) filed against [`spopt`](https://tracker.debian.org/pkg/spopt).
+ * [#1121142](https://bugs.debian.org/1121142) filed against [`pyasn`](https://tracker.debian.org/pkg/pyasn).
+ * [#1121143](https://bugs.debian.org/1121143) filed against [`python-pyvcf`](https://tracker.debian.org/pkg/python-pyvcf).
+ * [#1121147](https://bugs.debian.org/1121147) filed against [`python-pysaml2`](https://tracker.debian.org/pkg/python-pysaml2).
+
+* Jochen Sprickerhof:
+
+ * [#1121500](https://bugs.debian.org/1121500) filed against [`cython`](https://tracker.debian.org/pkg/cython).
+
+* Vagrant Cascadian:
+
+ * [#1121406](https://bugs.debian.org/1121406) filed against [`clhep`](https://tracker.debian.org/pkg/clhep).
+
+<br>
+<br>
+
+Finally, if you are interested in contributing to the Reproducible Builds project, please visit our [*Contribute*](https://reproducible-builds.org/contribute/) page on our website. However, you can get in touch with us via:
+
+ * IRC: `#reproducible-builds` on `irc.oftc.net`.
+
+ * Mastodon: [@reproducible_builds at fosstodon.org](https://fosstodon.org/@reproducible_builds)
+
+ * Mailing list: [`rb-general at lists.reproducible-builds.org`](https://lists.reproducible-builds.org/listinfo/rb-general)
=====================================
images/reports/2025-11/2511.12274.png
=====================================
Binary files /dev/null and b/images/reports/2025-11/2511.12274.png differ
=====================================
images/reports/2025-11/TMr5kb_2eew.png
=====================================
Binary files /dev/null and b/images/reports/2025-11/TMr5kb_2eew.png differ
=====================================
images/reports/2025-11/debian.png
=====================================
Binary files /dev/null and b/images/reports/2025-11/debian.png differ
=====================================
images/reports/2025-11/opensuse.png
=====================================
Binary files /dev/null and b/images/reports/2025-11/opensuse.png differ
=====================================
images/reports/2025-11/reproducible-builds.png
=====================================
Binary files /dev/null and b/images/reports/2025-11/reproducible-builds.png differ
=====================================
images/reports/2025-11/seagl.png
=====================================
Binary files /dev/null and b/images/reports/2025-11/seagl.png differ
=====================================
images/reports/2025-11/website.png
=====================================
Binary files /dev/null and b/images/reports/2025-11/website.png differ
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/61508a1eaab52cdb4e12718f5b50e553b77dea1f
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/61508a1eaab52cdb4e12718f5b50e553b77dea1f
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20251201/0c06b83f/attachment.htm>
More information about the rb-commits
mailing list