Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
ruby-timers could not be built reproducibly.

This is because the .gemspec file gets evaluated, causing this line:

  File.expand_path("~/.gem/release.pem")

... to be rendered in the binary package, leading to the package
embedding the build user's home directory.

Patch attached.

 [0] https://reproducible-builds.org/


Regards,

I can confirm that the patch still applies and fixes the issue.

I would like to perform a Non-Maintainer Upload (NMU) in the coming
weeks applying this patch.

Are there any outstanding concerns?

live well,
  vagrant

I have uploaded an NMU to DELAYED/10, debdiff attached. Also prepared a
merge request:

https://salsa.debian.org/ruby-team/ruby-timers/-/merge_requests/1

live well,
  vagrant

Hello,

Bug #1135269 in ruby-timers reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/ruby-team/ruby-timers/-/commit/7be9bc82c88c4c26b5b0f0ee6cf445174742de3c
------------------------------------------------------------------------
debian/patches: timers.gemspec: Drop cert_chain and signing_key for
reproducible builds. (Closes: #1135269)
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1135269