Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
golang-github-cyclonedx-cyclonedx-go could not be built reproducibly.

This is because debian/rules deletes some files to prevent them from
being run during the testsuite. However, this means if the tests are
skipped, then the .deb package will _contain_ these files (although
they are, of course, not tested).

A patch is attached that removes these files regardless of whether
the tests are skipped by simply moving the 'rm' calls to a different
debian/rules target.

 [0] https://reproducible-builds.org/


Regards,

Hello,

Bug #1138641 in golang-github-cyclonedx-cyclonedx-go reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/go-team/packages/golang-github-cyclonedx-cyclonedx-go/-/commit/c149c099aca41bf9f7efd036cc5b5c2c67dd2f36
Signed-off-by: Simon Josefsson <simon@josefsson.org>
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1138641

We believe that the bug you reported is fixed in the latest version of
golang-github-cyclonedx-cyclonedx-go, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1138641@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Simon Josefsson <simon@josefsson.org> (supplier of updated golang-github-cyclonedx-cyclonedx-go package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Wed, 29 Jul 2026 16:21:23 +0200
Source: golang-github-cyclonedx-cyclonedx-go
Architecture: source
Version: 0.11.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Simon Josefsson <simon@josefsson.org>
Closes: 1138641
Changes:
 golang-github-cyclonedx-cyclonedx-go (0.11.0-1) unstable; urgency=medium
 .
   [ Simon Josefsson ]
   * Drop newgateway pipeline
   * Use gbp sign-tags
   * Standards-Version: 4.7.4
   * Use compat 14
 .
   [ Chris Lamb ]
   * Make the build reproducible (Closes: #1138641)
Checksums-Sha1:
 b96e34224d49800c8279ca404d9feb4b2c560e27 2774 golang-github-cyclonedx-cyclonedx-go_0.11.0-1.dsc
 ddd87ee5217ebf2920c9521fa3dcc0faa57f64c9 238832 golang-github-cyclonedx-cyclonedx-go_0.11.0.orig.tar.xz
 9677caa18a8d41c0b45510f5f20fcadd9c306a8c 2588 golang-github-cyclonedx-cyclonedx-go_0.11.0-1.debian.tar.xz
 e6671cd1e900d4bb8a17a26a9d1a105caa38359a 1155992 golang-github-cyclonedx-cyclonedx-go_0.11.0-1.git.tar.xz
 1499a70d90640d5a2eab0dbcecb502238ff290b2 17666 golang-github-cyclonedx-cyclonedx-go_0.11.0-1_source.buildinfo
Checksums-Sha256:
 82b0dbd81dfc45946e9038dceca2d534bf3d9c5d550b3fe553c5fcb8e8c406e8 2774 golang-github-cyclonedx-cyclonedx-go_0.11.0-1.dsc
 70976991bd3c03c78c192a9836f0aa03755ac6d9cdcb4bf258230658b3d0d05c 238832 golang-github-cyclonedx-cyclonedx-go_0.11.0.orig.tar.xz
 1c6ad4122bc4ae89f213967d54773dacfe6915fee84ff040d8f74414efd4514e 2588 golang-github-cyclonedx-cyclonedx-go_0.11.0-1.debian.tar.xz
 b0c7521adafbe379a959957dbc99157b595295c0248ab809242e9241c5419972 1155992 golang-github-cyclonedx-cyclonedx-go_0.11.0-1.git.tar.xz
 ba59f9dfc792021b1177e5ff54bd8437f2510db8570872e86e0d67041af1d070 17666 golang-github-cyclonedx-cyclonedx-go_0.11.0-1_source.buildinfo
Files:
 540d8e2a276376d70a55865cf4f5fcfd 2774 golang optional golang-github-cyclonedx-cyclonedx-go_0.11.0-1.dsc
 0307b0d5ba9ae8d8fb63869c8cb62a1b 238832 golang optional golang-github-cyclonedx-cyclonedx-go_0.11.0.orig.tar.xz
 e91ca5c9a9925562c95af49f3d968ac4 2588 golang optional golang-github-cyclonedx-cyclonedx-go_0.11.0-1.debian.tar.xz
 d0f14a74883c5d01d4ba62a9513fc09c 1155992 golang None golang-github-cyclonedx-cyclonedx-go_0.11.0-1.git.tar.xz
 c70905f458589f9d8c3a0070b27fd506 17666 golang optional golang-github-cyclonedx-cyclonedx-go_0.11.0-1_source.buildinfo
Git-Tag-Info: tag=f822dcb11e578323a6ba3fd87885d52c32fda779 fp=a3cc9c870b9d310abad4cf2f51722b08fe4745a2
Git-Tag-Tagger: Simon Josefsson <simon@josefsson.org>
-----BEGIN PGP SIGNATURE-----
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=MwEA
-----END PGP SIGNATURE-----