Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
pgpainless could not be built reproducibly.

This is because it ships different contents in the binary package
depending on whether nocheck is run.

A patch is attached, but this changes the package to always build and
then ship the .jar files associated with the tests, regardless of
whether nocheck was specified or not. I suspect this might be the way
you want to go so that you can run the autopkgtests without needing
the original source tree.

 [0] https://reproducible-builds.org/


Regards,

Hello,

Bug #1120530 in pgpainless reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/java-team/pgpainless/-/commit/d44e0796beeb0f531d55111694ef5bfe13819b9a

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1120530

We believe that the bug you reported is fixed in the latest version of
pgpainless, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1120530@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Emmanuel Bourg <ebourg@apache.org> (supplier of updated pgpainless package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 18 Oct 2026 18:52:14 +0200
Source: pgpainless
Architecture: source
Version: 1.6.9-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Emmanuel Bourg <ebourg@apache.org>
Closes: 1115001 1120530 1127129
Changes:
 pgpainless (1.6.9-3) unstable; urgency=medium
 .
   * Team upload
 .
   [ Emmanuel Bourg ]
   * New patch to fix the compatibility with Bouncy Castle 1.86
   * Tightened the build dependency on libjunit5-system-exit-java
   * Standards-Version updated to 4.7.4
   * Removed the Priority field
   * Removed the Rules-Requires-Root field
   * Removed the javadoc packages
   * Replaced the patch renaming the Bouncy Castle artifacts with a Maven rule
   * Simplified debian/copyright
   * New patch to skip a test once its key has expired
     (Closes: #1115001, #1127129)
 .
   [ Chris Lamb ]
   * Always build and install the test jars to make the build reproducible
     (Closes: #1120530)
Checksums-Sha1:
 48b37d9b3e84bca8a33f0aa0662002afc6472d91 2565 pgpainless_1.6.9-3.dsc
 17e4a1b30d64a4e3ca629f84eed00391853e5462 32104 pgpainless_1.6.9-3.debian.tar.xz
 7edce4e8add511fe2ea63435d7283381469bcda4 22096 pgpainless_1.6.9-3_source.buildinfo
Checksums-Sha256:
 44a8c9856dcb08770235dc4c8d79107e1b16130760e6520071efdcb92f487303 2565 pgpainless_1.6.9-3.dsc
 2b332b2aec35a01b81a979b696b6ab8db3b8e70f638940479843afe593c9dae1 32104 pgpainless_1.6.9-3.debian.tar.xz
 cee1c2201db224117133f4609c940636f05030ee69dbf1dea6af7c46ac836129 22096 pgpainless_1.6.9-3_source.buildinfo
Files:
 07c41a05a4ec44627d76a39a1c9abbd8 2565 java optional pgpainless_1.6.9-3.dsc
 8e7a8ced761362fef5957231d11c340e 32104 java optional pgpainless_1.6.9-3.debian.tar.xz
 56bc3f4e7f29920f7c909e4b42de3642 22096 java optional pgpainless_1.6.9-3_source.buildinfo
-----BEGIN PGP SIGNATURE-----

iQJGBAEBCgAwFiEEuM5N4hCA3PkD4WxA9RPEGeS50KwFAmrU/kISHGVib3VyZ0Bh
cGFjaGUub3JnAAoJEPUTxBnkudCsqS8QAIg472VGdl5/SFeMFH3z1Ri6DPvE+mcj
4vZiRw6HgazPGH0xZ06VQv+8Da8k4tgQrlYgiXJ6ach3cDba21N6iHjCh2UYtmJD
UfpYBQNCklBxk5wuu9/5WBODev+/6r1EFdX/U4kx+7MED5/XaTJ203UgzgWBtWct
yRqa77f/DajWoY0ff19j29YWv3HpbBz/PQQ9zmSnM291NfjJIvnrnHTrmfLz2TqX
xmJewEeQ1ELhrV4dwMF+zmQNZyu8ygDVQe02CsvhgVKd6/tcZ0fxdiuzS2DBYyvB
aHwI86UDt5S8EkzN+ciiaPVL8nXaoHIeXT3i+Wte1shtKPgpgkykMRSIdieV35GG
1GrtrMTyarruNH3Iygq5aN3dHiwV9mQiN61Sp7IurU/ExAmJHgy/0JSHR/yqlAXP
AVC/R1aBwhNaGz1YvWbMKRDm1MStFw9xDEqOvl4fhuuCJaPyQ6So3o339PxKWm+Q
7irYwmLnzCApcPmlswgMDJ4BqZbYBrU6Zhmz0T+4ZiwtgcoHYy5VvzDZEiAUNSIH
vRHVgFKDdm6OuFIYCjyVwKwRKZjsPW7OWr4QOoKWSVUZdr6X8xM1yBT79wc0aaMI
kH1K5jH8UDX5tmW+SOfhaFEjAkf4TICO+EkQ9yAXene79TEIMg69m/IIsYvu2/eZ
66j1LXatxQxP
=yaJf
-----END PGP SIGNATURE-----