What's Changed

• Update dependencies by @kpcyrd in #36
  • Update sequoia-pgp to 2.0.0
• Add read and connect timeouts for http by @kpcyrd in #37

Release binary SHA256

2a00b21ac5e990e0c6a0ccbf3b91e34a073660d1f4553b5f3cda2b09cc4d4d8a

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.4.3
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @repi for their support on github sponsors.

What's Changed

• resolver/debian: fix typo on context string parsing by @jwnx in #26
• Update dependencies
  • Fix RUSTSEC-2024-0373
  • Fix RUSTSEC-2024-0400
  • Fix RUSTSEC-2024-0421
  • Fix RUSTSEC-2025-0009

New Contributors

• @jwnx made their first contribution in #26

Release binary SHA256

8f82399ac7c3cee9e32d0c132e47f2c5db6eb02c649499f6de57b00ca7074f62

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.4.2
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @repi for their support on github sponsors.

What's Changed

• Update dependencies
  • Fix RUSTSEC-2024-0019
  • Fix RUSTSEC-2024-0332
  • Fix RUSTSEC-2024-0336
  • Fix RUSTSEC-2024-0344
  • Fix RUSTSEC-2024-0345
• Change license to MIT OR Apache-2.0

Release binary SHA256

d6cefae67a91fc42546a2bae904fcb4bb169552229c11a328a0bc0becc212a6d

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.4.1
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @SantiagoTorres, @repi and @rgacogne for their support on github sponsors.

What's Changed

• Avoid expired Arch Linux keys by @kpcyrd in #15

This fixes a bug that would cause builds that make use of Arch Linux packages to become unreproducible over time, due to the keyring expiring. This was fixed in a backwards-compatible way so old binaries can still be reproduced (including the original repro-env 0.1.0 release), but you need to use a repro-env binary >= 0.4.0 to do so.

Release binary SHA256

e331825a19d41a5ad4dd7c1ce7a810eccbb9eb8945c3fc78abe9f040df8c1204

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.4.0
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @SantiagoTorres, @repi and @rgacogne for their support on github sponsors.

What's Changed

• Add basic Alpine support by @kpcyrd in #6
• Add nix build for reference by @kpcyrd in #8
• Record provides= if used for one of our dependencies, support environment variables by @kpcyrd in #9
• Add fetch subcommand to populate cache by @kpcyrd in #11
• Warn if lockfile might be out-of-sync by @kpcyrd in #13
• Add REPRO_ENV_HOME and REPRO_ENV_CACHE variables to configure paths by @kpcyrd in #14
• Updated dependencies (Fixes RUSTSEC-2024-0003 in h2)

Release binary SHA256

16dca296a8bb3c825cb0490756097ae380b8f97acad1e7586a8fe47f3f0e9af1

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.3.3
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @SantiagoTorres, @repi and @rgacogne for their support on github sponsors.

What's new

• Ignore repro-env.lock entries with installed = true for forward-compatibility
• Calculate sha256 during download, use advisory locks for ~/.cache/repro-env/pkgs/
• Do not error if debian and debian-security ship the exact same package
• Updated dependencies (Fixes RUSTSEC-2023-0052 in webpki)

Release binary SHA256

660995089d32178a63763cf47e1b97e265ef5cf24bf646d16728ca51bf2fab50

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.3.2
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @SantiagoTorres, @repi and @rgacogne for their support on github sponsors.

What's new

• Added man page
• Updated dependencies

Release binary SHA256

587de7128815795ac34a2d39b0c609db0ce7effa1b024911a26064b7f43f5d2c

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.3.1
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @SantiagoTorres, @repi and @rgacogne for their support on github sponsors.

What's new

• Remove the need for a working shared-mime-info environment
• Pass --noconfirm to pacman when resolving dependencies
• Add early check if user namespaces are enabled
• Add an example of using repro-env with github actions

Release binary SHA256

3e5777d952a47d5562d309fd6cb861c0aa4a6a5e45a8aaefa073e702834e9e6d

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.3.0
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @SantiagoTorres, @repi and @rgacogne for their support on github sponsors.

What's new

• Add Debian support
• Validate metadata inside of package matches metadata in repro-env.lock
• Significantly improved test coverage of parsers
• Examples are now located in examples/

Release binary SHA256

b78727a7b2f635504ab780bfa5dd7e7bbcfb9255607eaf815762e0893aad5663

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.2.0
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @SantiagoTorres, @repi and @rgacogne for their support on github sponsors.

Initial release

Release binary SHA256

5b7e043dea9c2a0afc0180be9263dd5c5b7e69c649749b43c132885e4eca623f

Reproduce release binary from source

git clone https://github.com/kpcyrd/repro-env
cd repro-env
git checkout v0.1.0
make
sha256sum target/x86_64-unknown-linux-musl/release/repro-env

Thanks

We'd like to thank @SantiagoTorres, @repi and @rgacogne for their support on github sponsors.