repro-env

What's Changed

• Update dependencies
  • Fix RUSTSEC-2024-0019
  • Fix RUSTSEC-2024-0332
  • Fix RUSTSEC-2024-0336
  • Fix RUSTSEC-2024-0344
  • Fix RUSTSEC-2024-0345
• Change license to MIT OR Apache-2.0

Release binary SHA256

d6cefae67a91fc42546a2bae904fcb4bb169552229c11a328a0bc0becc212a6d

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.4.1
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @SantiagoTorres, @repi and @rgacogne for their support on github sponsors.

What's Changed

• Avoid expired Arch Linux keys by @kpcyrd in https://github.com/kpcyrd/repro-env/pull/15

This fixes a bug that would cause builds that make use of Arch Linux packages to become unreproducible over time, due to the keyring expiring. This was fixed in a backwards-compatible way so old binaries can still be reproduced (including the original repro-env 0.1.0 release), but you need to use a repro-env binary >= 0.4.0 to do so.

Release binary SHA256

e331825a19d41a5ad4dd7c1ce7a810eccbb9eb8945c3fc78abe9f040df8c1204

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.4.0
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @SantiagoTorres, @repi and @rgacogne for their support on github sponsors.

What's Changed

• Add basic Alpine support by @kpcyrd in https://github.com/kpcyrd/repro-env/pull/6
• Add nix build for reference by @kpcyrd in https://github.com/kpcyrd/repro-env/pull/8
• Record provides= if used for one of our dependencies, support environment variables by @kpcyrd in https://github.com/kpcyrd/repro-env/pull/9
• Add fetch subcommand to populate cache by @kpcyrd in https://github.com/kpcyrd/repro-env/pull/11
• Warn if lockfile might be out-of-sync by @kpcyrd in https://github.com/kpcyrd/repro-env/pull/13
• Add REPRO_ENV_HOME and REPRO_ENV_CACHE variables to configure paths by @kpcyrd in https://github.com/kpcyrd/repro-env/pull/14
• Updated dependencies (Fixes RUSTSEC-2024-0003 in h2)

Release binary SHA256

16dca296a8bb3c825cb0490756097ae380b8f97acad1e7586a8fe47f3f0e9af1

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.3.3
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @SantiagoTorres, @repi and @rgacogne for their support on github sponsors.

What's new

• Ignore repro-env.lock entries with installed = true for forward-compatibility
• Calculate sha256 during download, use advisory locks for ~/.cache/repro-env/pkgs/
• Do not error if debian and debian-security ship the exact same package
• Updated dependencies (Fixes RUSTSEC-2023-0052 in webpki)

Release binary SHA256

660995089d32178a63763cf47e1b97e265ef5cf24bf646d16728ca51bf2fab50

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.3.2
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @SantiagoTorres, @repi and @rgacogne for their support on github sponsors.

What's new

• Added man page
• Updated dependencies

Release binary SHA256

587de7128815795ac34a2d39b0c609db0ce7effa1b024911a26064b7f43f5d2c

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.3.1
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @SantiagoTorres, @repi and @rgacogne for their support on github sponsors.

What's new

• Remove the need for a working shared-mime-info environment
• Pass --noconfirm to pacman when resolving dependencies
• Add early check if user namespaces are enabled
• Add an example of using repro-env with github actions

Release binary SHA256

3e5777d952a47d5562d309fd6cb861c0aa4a6a5e45a8aaefa073e702834e9e6d

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.3.0
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @SantiagoTorres, @repi and @rgacogne for their support on github sponsors.

What's new

• Add Debian support
• Validate metadata inside of package matches metadata in repro-env.lock
• Significantly improved test coverage of parsers
• Examples are now located in examples/

Release binary SHA256

b78727a7b2f635504ab780bfa5dd7e7bbcfb9255607eaf815762e0893aad5663

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.2.0
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @SantiagoTorres, @repi and @rgacogne for their support on github sponsors.

Initial release

Release binary SHA256

5b7e043dea9c2a0afc0180be9263dd5c5b7e69c649749b43c132885e4eca623f

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.1.0
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @SantiagoTorres, @repi and @rgacogne for their support on github sponsors.