Bug#1095578: pomegranate-clojure: reproducibility regression because tools.build records timestamp

[Paul Gevers]

Source: pomegranate-clojure
Version: 1.2.24-1
Severity: important

Hi,


  * Build debian jar/pom via tools.build.  Since upstream no longer
    provides a pom.xml, but does provide tools.build code to build a jar
    with a pom, use that.

It seems like the following change in the packaging of pomegranate-clojure caused the reproducibility to regress: https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/pomegranate-clojure.html has this:

META-INF/maven/clj-commons/pomegranate/pom.properties
Offset 1, 5 lines modified      Offset 1, 5 lines modified

3       version=1.2.24  3       version=1.2.24
4       groupId=clj-commons     4       groupId=clj-commons
5       artifactId=pomegranate  5       artifactId=pomegranate

Paul

1 #·Generated·by·org.clojure/tools.build 1 #·Generated·by·org.clojure/tools.build 2 #·Sat·Feb·08·10:37:50·GMT-12:00·2025 2 #·Sat·Mar·14·19:02:42·GMT+14:00·2026

OpenPGP_signature.asc
Description: OpenPGP digital signature