#1137018 javacc5: please make the build reproducible

#1137018#5
Date:
2026-05-18 17:29:35 UTC
From:
To:
Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
javacc5 could not be built reproducibly.

I think this is because the testsuite regenerates some documentation
files, and therefore bumps the modification times of these files. This
means that if the tests are skipped, these files will have a different
timestamp and therefore the package is unreproducible.

A patch is attached that always sets these files to a fixed timestamp
(SOURCE_DATE_EPOCH). This is easier than trying to save-and-restore
the timestamp before and after the tests.

 [0] https://reproducible-builds.org/


Regards,

#1137018#8
Date:
2026-09-29 10:11:17 UTC
From:
To:
Hello,

Bug #1137018 in javacc5 reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/java-team/javacc5/-/commit/b93209552161a88f1077539d4663aef8b026eece

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1137018

#1137018#15
Date:
2026-09-29 10:51:25 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
javacc5, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1137018@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Emmanuel Bourg <ebourg@apache.org> (supplier of updated javacc5 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 29 Sep 2026 12:10:52 +0200
Source: javacc5
Architecture: source
Version: 5.0-12
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Emmanuel Bourg <ebourg@apache.org>
Closes: 1137018
Changes:
 javacc5 (5.0-12) unstable; urgency=medium
 .
   [ Bas Couwenberg ]
   * Update Vcs-* URLs to use javacc5 repo.
 .
   [ Emmanuel Bourg ]
   * Fixed the watch file to track only the 5.x versions
   * Standards-Version updated to 4.7.4
   * Removed the Priority field
 .
   [ Chris Lamb ]
   * Make the build reproducible (Closes: #1137018)
Checksums-Sha1:
 5fde66183c85aeb93b14c0988ab9408d60cc7e7b 2040 javacc5_5.0-12.dsc
 22787d0aa3d4475fb82c052987c92c78c9c00b77 8040 javacc5_5.0-12.debian.tar.xz
 bcff94a159a7b7387268a04a7812c1a2a6cc07cf 11512 javacc5_5.0-12_source.buildinfo
Checksums-Sha256:
 f386c0ab989a5c958e4d8c3098fb9b7b20c97862e93da9ea1ef767afd2d2171c 2040 javacc5_5.0-12.dsc
 a6a8f80e4eaf9a996f910dcc571fb98e7ea4d76f32b68061d6ca51c7891e78f8 8040 javacc5_5.0-12.debian.tar.xz
 aaa24fe67846e9d332f4f7d34810acc2099248c259b5234273d4eb38238e84c9 11512 javacc5_5.0-12_source.buildinfo
Files:
 f3e6669d3aa81722aa8b250ecc15517e 2040 java optional javacc5_5.0-12.dsc
 ecd989a3acd69128b8566a82d55ca58f 8040 java optional javacc5_5.0-12.debian.tar.xz
 8889ba6650d41615067cbea450e26478 11512 java optional javacc5_5.0-12_source.buildinfo
-----BEGIN PGP SIGNATURE-----

iQJGBAEBCgAwFiEEuM5N4hCA3PkD4WxA9RPEGeS50KwFAmq7jr8SHGVib3VyZ0Bh
cGFjaGUub3JnAAoJEPUTxBnkudCsMyQQAJRPo959C+liCBXOq79Q/sz3yC4/dcWE
26jOrwZW5FwOnPh9kaanTkveBi0xYfMwcpvtf4KcMtpLzPjVz3gEwK3UZU0bS1ld
4m669WyNUoVgycjGe19y8i6OVRwUswKfq3O8wqqs+ygKTIam7cYy+ejrftbJAuoP
/PrXrAOVpreZN0t29WQXni2dDBcnwx7fb9GFBzycBUGDMxAVEf93tCI2yy2saNzc
+lVW5kyeHEj5EjqShMM12pppbHDk3t8WXLm4wvLljC8EFf1Uz7l9T2TNFUSvCRwV
wPMPIoY74oP1pCjjW2io8gpoBDTQa1+SgPGXF9p3NyyCHIBLvfd+SVSj9XdwxWLi
fHhA9VcdAhem2ek4wnuzDcSMMx6e2WqD92UX0F5lnTDM3r4hTjI8HQidpqNW9B0r
w1uP9mtI6IG7fBJhoPl+wUrq2uhnvUKYp4YoXnV4U/8WLMNU7uFFun+7IJTDtW9G
0ouVG5PkkbKJU3TAWixQjDFXahs/1UqHsUV6I25bv1QQdiFm2jfwXONdAnIJ3k1l
OPuaviRuxI1UP214FD+Gq2Xj5YJbdim//GwP+rQzY18zw8QTQJ1nvArh1LsrpjYL
oVubcpHixAZqFRNwwlCRlda8kdNW+Zxb6aJQva0dtQxAQB+XtniGfyNVey5xLGpW
fCiB9kJPpjom
=1qPe
-----END PGP SIGNATURE-----