debian-repro-status 0.4.0 released (also, debian:sid container userland 100% reproducible)

[kpcyrd]

Hello!

I tagged a new release for debian-repro-status, a tool written to give you an 
approximate idea of how viable it would be to enforce a "reproducible packages 
only" update policy for the computer system you've built (see repro-threshold 
for actually enforcing this policy). It's based on arch-repro-status that was 
originally developed by Orhun Parmaksız (the ratatui developer).

https://github.com/kpcyrd/debian-repro-status/releases/tag/v0.4.0

The change updates dependencies to the latest versions, and adds support for 
multiple -H options, to query results from multiple rebuilderd instances. The 
results are also now fetched concurrently.

I've hesitated to include a "reproduced by N parties" score because with a 
configuration of:

-H https://reproduce.debian.net/amd64/
-H https://reproduce.debian.net/all/
-H https://example.com/

It's 3 endpoints but only 2 parties operating them, I'm still trying to come up 
with a way to report this properly. Matching by domain seems like the best 
choice, but would break with e.g. amd64.reproduce.example.com. Ideas very welcome!

When taking a screenshot for this release I also noticed debian:sid now has a 
100% reproducible status according to reproduce.debian.net (I added a screenshot 
to the release notes and repo 🎉). See also the previous discussion from 2 years 
ago when this milestone was reached by Arch Linux:

https://lists.reproducible-builds.org/pipermail/rb-general/2024-March/003301.html

Happy June! 🏳️‍🌈
kpcyrd