What happened in the reproducible builds effort between February 21th and February 27th:

Toolchain fixes

Didier Raboud uploaded pyppd/1.0.2-4 which makes PPD generation deterministic.

Emmanuel Bourg uploaded plexus-maven-plugin/1.3.8-10 which sorts the components in the components.xml files generated by the plugin.

Guillem Jover has implemented stable ordering for members of the control archives in .deb s.

Chris Lamb submitted another patch to improve reproducibility of files generated by cython.

Packages fixed

The following packages have become reproducible due to changes in their build dependencies: dctrl-tools, debian-edu, dvdwizard, dymo-cups-drivers, ekg2, epson-inkjet-printer-escpr, expeyes, fades, foomatic-db, galternatives, gnuradio, gpodder, gutenprint icewm, invesalius, jodconverter-cli latex-mk, libiio, libimobiledevice, libmcrypt, libopendbx, lives, lttnganalyses, m2300w, microdc2, navit, po4a, ptouch-driver, pxljr, tasksel, tilda, vdr-plugin-infosatepg, xaos.

The following packages became reproducible after getting fixed:

Some uploads fixed some reproducibility issues, but not all of them:

gridsite/2.2.6-2 by Mattias Ellert.

gsoap/2.8.28-2 by Mattias Ellert.

natbraille/2.0rc3-3 by Samuel Thibault.

pairs/4:15.04.3-1 uploaded by Maximiliano Curia, original patch by Scarlett Clark.

tests.reproducible-builds.org

The reproducibly tests for Debian now vary the provider of /bin/sh between bash and dash . (Reiner Herrmann)

diffoscope development

diffoscope version 50 was released on February 27th. It adds a new comparator for PostScript files, makes the directory tests pass on slower hardware, and line ordering variations in .deb md5sums files will not be hidden anymore.

Version 51 uploaded the next day re-added test data missing from the previous tarball.

diffoscope is looking for a new primary maintainer.

Package reviews

87 reviews have been removed, 61 added and 43 updated in the previous week.

New issues: captures_shell_variable_in_autofoo_script, varying_ordering_in_data_tar_gz_or_control_tar_gz.

30 new FTBFS have been reported by Chris Lamb, Antonio Terceiro, Aaron M. Ucko, Michael Tautschnig, and Tobias Frost.

Misc.

The release team reported on their discussion about the topic of rebuilding all of Stretch to make it self-contained (in respect to reproducibility).

Christian Boltz is hoping someone could talk about reproducible builds at the openSUSE conference happening June 22nd-26th in Nürnberg, Germany.