Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
tea-cli could not be built reproducibly.

This is because the generation of BUILD_DATE in debian/rules (which ends
up in a manpage) took into account the surrounding timezone which, of
course, can vary.

Patch attached that ensures that BUILD_DATE is always generated in the
"UTC" timezone.

 [0] https://reproducible-builds.org/


Regards,

I just confirmed that this patch is still needed.

I would like to perform an Non-Maintainer Upload (NMU) applying the
patch to fix the issue in the coming weeks.

Please let me know if there are outstanding concerns!

live well,
  vagrant

I have uploaded an NMU to DELAYED/10, debdiff attached, and merge
request submitted:

https://salsa.debian.org/go-team/packages/tea-cli/-/merge_requests/2

live well,
  vagrant

Hello,

Bug #1125671 in tea-cli reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/go-team/packages/tea-cli/-/commit/2a26bbb40a41ff8eb0290ab55df382c9eb1b238d
------------------------------------------------------------------------
debian/rules: Ensure that BUILD_DATE is always generated in the UTC timezone. Closes: #1125671.
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1125671

I've finally done a team upload with the proposed change.

Note mainly for Vagrant, who took the time to do a MR: My personal
preference for MRs, which is also my recommendation, is that they do
not update debian/changelog, this way I can still use gbp-dch, which
collects all the commits included in the release.

Rationale: When I see a MR I often have to face this dilemma: Either I
accept it "as is" and then change what I don't like (for example, a
changelog entry saying it's a NMU), or I just take the pieces which I
want and do the merge "by hand", but then the merge request has to be
closed in red, which is not nice... (well, there is still a third way,
which is to force-push to the external branch before accepting the MR
when the person doing MR allows that, which is quite often).

So, at least for my workflow, not including a changelog entry
increases the chances that I actually use the "Merge" button in salsa.

Thanks.

We believe that the bug you reported is fixed in the latest version of
tea-cli, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1125671@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Santiago Vila <sanvila@debian.org> (supplier of updated tea-cli package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 17 Oct 2026 23:55:00 +0200
Source: tea-cli
Architecture: source
Version: 0.11.1-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Santiago Vila <sanvila@debian.org>
Closes: 1125671 1130625
Changes:
 tea-cli (0.11.1-2) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Marcos Talau ]
   * debian/salsa-ci.yml: Add to provide CI tests for Salsa.
 .
   [ Chris Lamb ]
   * debian/rules: Ensure that BUILD_DATE is always generated in the "UTC"
     timezone. Closes: #1125671.
 .
   [ Santiago Vila ]
   * Update Vcs fields. Closes: #1130625.
   * Drop "Rules-Requires-Root: no" (default).
   * Update standards-version.
   * Disable redundant/duplicate Salsa CI jobs.
Checksums-Sha1:
 d0d6b0aed8ebe20a116c76d52e6425aa8f686eff 2262 tea-cli_0.11.1-2.dsc
 655b3b2a6ee7a91d1d6c8433bbc71a825f1aa5c4 3500 tea-cli_0.11.1-2.debian.tar.xz
 6768d12aaa4b1c43ecd091f1f9bb8f7618a66510 11548 tea-cli_0.11.1-2_source.buildinfo
Checksums-Sha256:
 87c54b1e36437a429779a2a203ee054d6056e5f3979570ef675e8bb731c27955 2262 tea-cli_0.11.1-2.dsc
 f736a30d0f4a9abf3561745fa6c5983a1c9115b56e84531bbe6a1fe6c160a696 3500 tea-cli_0.11.1-2.debian.tar.xz
 01745b816f72fd944c0c7cdb2ce8d66b4f1c0f12d4e45de9e6c886a5a92e738b 11548 tea-cli_0.11.1-2_source.buildinfo
Files:
 43f8780b3ff3f4cfa55339d523e81e08 2262 golang optional tea-cli_0.11.1-2.dsc
 d452cf504aa97858a98b17a32167ba52 3500 golang optional tea-cli_0.11.1-2.debian.tar.xz
 d636d71c6114c9e45b4bac6fe9a2b602 11548 golang optional tea-cli_0.11.1-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEE1Uw7+v+wQt44LaXXQc5/C58bizIFAmrT72MACgkQQc5/C58b
izJkDQf9EMBRfE6w7i6JyXJDwHFArXTDawMGQa6BpDqmZ5cBwsyWPpXHVAf91hAK
NTKoxkFnJT1irVYPfIDwMzc1N9UHSf2JZF1n5K2lU0nLijRCNpqNuHwm418+OC9E
vdWWBr2/AbPZlAZQSR+leF+R4O6g/5XLsW2HHjGV+8FvPIQrdxD8lb25gOLhxy2F
65zvqTwykSaLR6mGP7ycsuab6qKv1uX8FiTwXjPc2GqTMZicWZTX3jGlFYiyKSuC
1C5wbbF6vbzDNEQuxmwR6cBkUEJrOqX7uOuzcQxKxZ+thM52/YfBBn+sMCHji3qG
3IS7MA9a70rlfRvIpy5WRu+K7dF6sA==
=lA+J
-----END PGP SIGNATURE-----

You are much faster than many, thanks for getting to it!

That would normally be my preference as well for all the same reasons,
although since I actually submitted the NMU to DELAYED/10, I figured it
was best to submit with the exact changes (including the signed tag).

Happy to see the fixes included!


live well,
  vagrant