Bug#894215: python-setuptools: please make the PKG-INFO output reproducible

[Chris Lamb]

Source: python-setuptools
Version: 39.0.1-1
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: toolchain randomness
X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed
that python-setuptools generates output that is not reproducible:

│ │ │ ├── 
./usr/lib/python3/dist-packages/social_auth_core-1.7.0.egg-info/PKG-INFO
│ │ │ │ @@ -56,11 +56,11 @@
│ │ │ │  Classifier: Programming Language :: Python :: 2.7
│ │ │ │  Classifier: Programming Language :: Python :: 3
│ │ │ │ -Provides-Extra: openidconnect
│ │ │ │  Provides-Extra: all
│ │ │ │  Provides-Extra: azuread
│ │ │ │ +Provides-Extra: openidconnect
│ │ │ │  Provides-Extra: saml

Patch attached.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      la...@debian.org / chris-lamb.co.uk
       `-

diff --git a/setuptools/dist.py b/setuptools/dist.py
index 284d922..5dc696f 100644
--- a/setuptools/dist.py
+++ b/setuptools/dist.py
@@ -119,7 +119,7 @@ def write_pkg_file(self, file):
             self.long_description_content_type
         )
     if self.provides_extras:
-        for extra in self.provides_extras:
+        for extra in sorted(self.provides_extras):
             file.write('Provides-Extra: %s\n' % extra)