Dear Maintainer,

The Salsa CI configuration for kget sets customized[1] command-line options for
'reprotest'[2], a utility used to find package reproducibility problems.

Unfortunately, I think that the configured SALSA_CI_REPROTEST_ARGS arguments
may be incorrect; the provided arguments _appear_ intended to disable
build-path variance, but I believe that they unintentionally disable _all_
forms of reprotest variance testing.  Please refer to this Reproducible Builds
mailing list thread for more information:

https://lists.reproducible-builds.org/pipermail/rb-general/2024-February/003247.html


I'd recommend removing the SALSA_CI_REPROTEST_ARGS line entirely -- which
in isolation could cause Salsa-CI reprotest to fail, due to a build-path
bug reported in #1003914 -- but also then applying the patch from that
bugreport to confirm and solve the problem.

If that is undesirable, then as an alternative I could suggest configuring:

  SALSA_CI_REPROTEST_ARGS: '--variations=all,-build_path'

(please note that there are _two_ changes in this line; the insertion of 'all'
and adjustment of 'build-path' to 'build_path')

...to enable all forms of variation, with the exception of buildpath.

Thank you,
James

[1] - https://salsa.debian.org/qt-kde-team/kde/kget/-/blob/c3b261bd0d740cdd89c8d06e05eb238cb746fe3d/debian/salsa-ci.yml#L7

[2] - https://salsa.debian.org/reproducible-builds/reprotest

I would recommend following the recently updated documentation:

https://salsa.debian.org/salsa-ci-team/pipeline/#adding-extra-arguments-to-reprotest

In short, switching to:

  SALSA_CI_REPROTEST_ARGS: '--vary=-build_path'

I think this behaves more like people would expect, e.g. disabling build
path variations and not anything else.


live well,
  vagrant

We believe that the bug you reported is fixed in the latest version of
kget, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1067850@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Pino Toscano <pino@debian.org> (supplier of updated kget package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 23 Oct 2026 11:56:30 +0200
Source: kget
Architecture: source
Version: 4:26.08.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Changed-By: Pino Toscano <pino@debian.org>
Closes: 1003914 1067850 1151702
Changes:
 kget (4:26.08.2-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release.
   * Upgrade upstream signing key to new packet format.
   * Update standards version to 4.7.4, no changes needed.
   * Remove an obsolete maintscript entry.
   * CI: update/simplify configuration. (Closes: #1067850)
   * Convert watch file to v5.
   * Update the build dependencies according to the upstream build system:
     - drop unused/unneeded: libboost-dev, and qt6-5compat-dev
   * Drop the MMS plugin, as libmms is dead upstream and being removed from
     Debian: (Closes: #1151702)
     - drop the libmms-dev build dependency
   * Bump the debhelper compatibility to 14:
     - bump the debhelper-compat build dependency to 14
     - drop the ${shlibs:Depends}, and ${misc:Depends} substvars
     - the cmake dh buildsystem invokes cmake with
       -DCMAKE_BUILD_RPATH_USE_ORIGIN=ON, so this closes: #1003914
   * Move the khelpcenter suggest to kget-doc, as it is where the documentation
     is.
   * Make install files and lintian overrides a bit more generic, for cases where
     detailed bits are not needed.
   * Update lintian overrides.
Checksums-Sha1:
 d91d52572c7c915caab2ca1034c7cf68c7eb834f 3044 kget_26.08.2-1.dsc
 db2e5bf4d4ed4eae239603045dea591faf397cb4 4850520 kget_26.08.2.orig.tar.xz
 c0207529d1b5578a8d2f79f37dd854fe19fd3741 833 kget_26.08.2.orig.tar.xz.asc
 cd76c3bba801f70b93da7ec39e7f1d15471fdfc1 15916 kget_26.08.2-1.debian.tar.xz
 4a36d0194b23e91e2fc9926615d9453b7b1c926f 22446 kget_26.08.2-1_source.buildinfo
Checksums-Sha256:
 cf7ab91f7d4d34c6f96c225470230f351cd99a938c71bd023c6b64abf741d41e 3044 kget_26.08.2-1.dsc
 3a99c78592e1d53940002a0e57e4dd3fc058dc4b3af6ba372b77f8123c7730ae 4850520 kget_26.08.2.orig.tar.xz
 4d165a1f9449058aa52c1dee93e2a9ec17efff5472d021e06a164737c7811edf 833 kget_26.08.2.orig.tar.xz.asc
 629f56cb3353966db149853365eb3fb55a0d7d334232c02f89960c723e580651 15916 kget_26.08.2-1.debian.tar.xz
 0d94c6d0344e64e9412e569948d239330c2936d8a397ea6efc753fb967515843 22446 kget_26.08.2-1_source.buildinfo
Files:
 2a8cc232ad64c5cfb63d10c23a77d3ed 3044 kde optional kget_26.08.2-1.dsc
 d6963338b077e65474becf5bb5d2bb3b 4850520 kde optional kget_26.08.2.orig.tar.xz
 ac5878b1e38696eecda9b92ca5436fd9 833 kde optional kget_26.08.2.orig.tar.xz.asc
 803fd93270d66244ab19fc97a55d0553 15916 kde optional kget_26.08.2-1.debian.tar.xz
 b8a6d224386b390a480b1bdb6c2bb618 22446 kde optional kget_26.08.2-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=88Ur
-----END PGP SIGNATURE-----

[ ... snip ... ]

Looks good to me - thank you, Pino!