Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
ruby-babosa could not be built reproducibly.

This is because the rendered .gemspec file expands the unreproducible
__dir__ variable to be included in a "cert_chain" attribute. However,
this is not needed in the package, and is probably only needed if you
are making releases of the package (like the 'signing_key') attribute.

A patch is attached that moves the assignment of cert_chain to match
the conditional of signing_key, thereby excluding it from the
binary package and thus making the package reproducible.

 [0] https://reproducible-builds.org/


Regards,

forwarded 1041840 https://github.com/norman/babosa/pull/74
thanks

I've forwarded this upstream here:

https://github.com/norman/babosa/pull/74


Regards,