diff mbox series

jquery: fix reproducible build issue for PREMIRRORS downloads

Message ID 20251121053954.667583-1-hongxu.jia@windriver.com
State New
Headers show
Series jquery: fix reproducible build issue for PREMIRRORS downloads | expand

Commit Message

Hongxu Jia Nov. 21, 2025, 5:39 a.m. UTC
The sources of jquery are pure text files:
...
SRC_URI = "\
    https://code.jquery.com/${BP}.js;name=js;subdir=${BP} \
    https://code.jquery.com/${BP}.min.js;name=min;subdir=${BP} \
    https://code.jquery.com/${BP}.min.map;name=map;subdir=${BP} \
    "
...

When use git repo to save them and clone locally as PREMIRRORS for
bitbake. In this case, mtime of these files will be current time
when checking out. For this recipe, source_date_epoch will get by
function get_source_date_epoch_from_youngest_file, mtime of the
source files are not stable, so cause the generated package not
reproducible.

Due to the mtime of source files in upstream is always 1991-10-18,
even for the new version
$ wget https://code.jquery.com/jquery-3.0.0.js
$ ls --full-time jquery-3.0.0.js
-rw-r--r-- 1 hjia users 263268 1991-10-18 20:00:00.000000000 +0800 jquery-3.0.0.js

$ wget https://code.jquery.com/jquery-3.7.1.js
$ ls --full-time jquery-3.7.1.js
-rw-r--r-- 1 hjia users 285314 1991-10-18 20:00:00.000000000 +0800 jquery-3.7.1.js

Then explicitly set above timestamp to SOURCE_DATE_EPOCH

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
---
 meta/recipes-devtools/jquery/jquery_3.7.1.bb | 3 +++
 1 file changed, 3 insertions(+)
diff mbox series

Patch

diff --git a/meta/recipes-devtools/jquery/jquery_3.7.1.bb b/meta/recipes-devtools/jquery/jquery_3.7.1.bb
index 33147b493c..0de92e041e 100644
--- a/meta/recipes-devtools/jquery/jquery_3.7.1.bb
+++ b/meta/recipes-devtools/jquery/jquery_3.7.1.bb
@@ -13,6 +13,9 @@  SRC_URI = "\
     https://code.jquery.com/${BP}.min.map;name=map;subdir=${BP} \
     "
 
+# Explicitly set to 1991-10-18 20:00:00.000000000
+SOURCE_DATE_EPOCH = "687787200"
+
 SRC_URI[js.sha256sum] = "78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe"
 SRC_URI[min.sha256sum] = "fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a"
 SRC_URI[map.sha256sum] = "5e7d6d9c28b7f21006535e8875eb47e9667852a14c4624eed301c6cea19ae62b"