Poetry generates RECORDS files with contents in non-dereministic order,
and a pull request fixing the issue was merged upstream:

https://github.com/python-poetry/poetry-core/pull/545

The only package I know is affected is "reuse":

https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/reuse.html

I monkey-patched the change into poetry and it fixed the issue building
"reuse", so can confirm it works!

I presume there are many more affected packages...

Please backport the trivial patch which wraps a couple calls in
"sorted()" or a new upstream if available to fix this!


live well,
  vagrant

We believe that the bug you reported is fixed in the latest version of
poetry-core, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1029296@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Emmanuel Arias <eamanu@yaerobi.com> (supplier of updated poetry-core package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 21 Jan 2023 19:44:44 -0300
Source: poetry-core
Architecture: source
Version: 1.4.0-4
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Emmanuel Arias <eamanu@yaerobi.com>
Closes: 1029296
Changes:
 poetry-core (1.4.0-4) unstable; urgency=medium
 .
   * d/patches: Add new patch to ensure that dist-info is written
     deterministically and make the package reproducible (Closes: #1029296).
Checksums-Sha1:
 e777373041aa61c168079684ce38bad0dcaa29d5 2452 poetry-core_1.4.0-4.dsc
 fddbf509de9246e161aceb0875b53e15eb31fa0c 9496 poetry-core_1.4.0-4.debian.tar.xz
 bef7a8671a358924e6db6d504005e430ceaf8ee5 8793 poetry-core_1.4.0-4_amd64.buildinfo
Checksums-Sha256:
 ce3680b8df0569611ce30b731fa8a2ef53235b06c49f74326dadb60901a9f445 2452 poetry-core_1.4.0-4.dsc
 559930d13df395f04dffe47012b3da6b1985575a2f0e3ac11e5aafecc0fca87d 9496 poetry-core_1.4.0-4.debian.tar.xz
 ad1879ca331ddc96a2247052832690b62771da1a80b85254dd64102ef99cda1b 8793 poetry-core_1.4.0-4_amd64.buildinfo
Files:
 ddcdb3e70212c53cb66719e6d3f71454 2452 python optional poetry-core_1.4.0-4.dsc
 4dbe56df933c59f3a612ee283eea4767 9496 python optional poetry-core_1.4.0-4.debian.tar.xz
 b78214b53c3a6fc75214f88e77b51160 8793 python optional poetry-core_1.4.0-4_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=sNEt
-----END PGP SIGNATURE-----