#1037235 gradle-kotlin-dsl: reproducible-builds: generated classpath files differ when /bin/sh -> bash

#1037235#5
Date:
2023-06-08 22:50:43 UTC
From:
To:
When /bin/sh points to bash vs. dash, two classpath files get generated
different with different content.

https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/gradle-kotlin-dsl.html

  runtime=annotations-13.0.jar,gradle-kotlin-dsl-tooling-models.jar ...
  vs.
  projects=\nruntime=annotations-13.0.jar,gradle-kotlin-dsl-tooling-models.jar ...

The attached patch fixes this in debian/rules by using printf instead of
echo, as echo implementations vary in the handling of "\n" in different
shells.

According to my local tests, applying this patch should make
gradle-jotlin-dsl build reproducibly on tests.reproducible-builds.org!

Thanks for maintaining gradle-kotlin-dsl!

live well,
  vagrant

#1037235#10
Date:
2026-09-23 11:19:09 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
gradle-kotlin-dsl, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1037235@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Emmanuel Bourg <ebourg@apache.org> (supplier of updated gradle-kotlin-dsl package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Wed, 23 Sep 2026 12:39:03 +0200
Source: gradle-kotlin-dsl
Architecture: source
Version: 0.14.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Emmanuel Bourg <ebourg@apache.org>
Closes: 1037235
Changes:
 gradle-kotlin-dsl (0.14.2-1) unstable; urgency=medium
 .
   [ tony mancill ]
   * Patch debian/rules for reproducible builds (Closes: #1037235)
 .
   [ Emmanuel Bourg ]
   * New upstream release
     - Refreshed the patches
     - Updated the POM files
   * Standards-Version updated to 4.7.4
   * Require Gradle 4.5 or later, this version uses the ExecFactory and
     ExtensionsSchema APIs introduced in 4.5
Checksums-Sha1:
 67ba891a008cb5e9a1b65d941e93f2d9d0fcb962 2113 gradle-kotlin-dsl_0.14.2-1.dsc
 686635e74f3de4727c30cd456eb4eaaa63ce34ef 93572 gradle-kotlin-dsl_0.14.2.orig.tar.xz
 6e258cd9a50b43b60527c0ae080cd3406b335435 6900 gradle-kotlin-dsl_0.14.2-1.debian.tar.xz
 5a9def15a21be8d64b6bee27caa4cf058d2ce5c4 16363 gradle-kotlin-dsl_0.14.2-1_source.buildinfo
Checksums-Sha256:
 b04549a068befc4760eb8b7e704b1983739fcc1c978aebc5dd31fb7e0ead049c 2113 gradle-kotlin-dsl_0.14.2-1.dsc
 96d170b3740f3db44191a34421b8bf81542a10a9216ff63f42bc9f1cab72ce70 93572 gradle-kotlin-dsl_0.14.2.orig.tar.xz
 1a93d76ba9f9c2edf9bb19e8bf465fe1c1378a8a4fadfdc98cb84dcdda72dcf9 6900 gradle-kotlin-dsl_0.14.2-1.debian.tar.xz
 28019f0cf1cbe9973a320ad78ecfd7ab20afbe7f8d27c8a9983aadaa0b004193 16363 gradle-kotlin-dsl_0.14.2-1_source.buildinfo
Files:
 d67a60e6a875d90a530aba5ddb17af55 2113 java optional gradle-kotlin-dsl_0.14.2-1.dsc
 921038e4dfd45107ed81d96176504b0d 93572 java optional gradle-kotlin-dsl_0.14.2.orig.tar.xz
 b20225f0055b10c2e42c597c196584ed 6900 java optional gradle-kotlin-dsl_0.14.2-1.debian.tar.xz
 6f51186889bc05f6e8a713376d5f72dc 16363 java optional gradle-kotlin-dsl_0.14.2-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=4NBe
-----END PGP SIGNATURE-----