Reproducible Builds in February 2026

← View all our monthly reports


  • FIXME

  • FIXME: https://gitlab.gnome.org/GNOME/gnome-clocks/-/issues/436 gnome-clocks 50.beta has regressed in reproducibility compared to 49.0 as detected by https://reproduce.debian.net/.

  • FIXME

  • https://tracker.debian.org/pkg/debsbom-toolkit was uploaded to unstable, shipping two binary packages: debsbom (0.6.2-1) -SBOM generator for Debian-based distributions (tool) debsbom generates SBOMs (Software Bill of Materials) for distributions based on Debian in the two standard formats SPDX and CycloneDX. The generated SBOM includes all installed binary packages and also contains Debian Source packages. This package contains the debsbom CLI. python-debsbom-doc - This package contains the documentation for debsbom.

  • https://tracker.debian.org/pkg/sbom-toolkit was uploaded to unstable, shipping two binary packages: sbom-toolkit (0.0.20260112) - collection of scripts for generating SBOM This package provides a collection of scripts for generating SBOM. This is the tooling used in Apertis to generate the Licenses SBOM and the Build Dependency SBOM. dh-setup-copyright (0.0.20260112) - debhelper addon to generate SBOM from DWARF debug information dh-setup-copyright is debhelper program that generates the list for source file names used to build every binary and pulls the licenses from any sources part of other packages. The source file list is extracted from DWARF debug information by running dwarf2sources on every ELF binaries in the package and saving the output to /usr/share/doc/.

  • FIXME

  • FIXME

  • FIXME: h01ger added suite based navigation to reproduce.debian.net, in addition to the already existing arch based navigation. an example or a pic says more than a thousand words, so please have a look at https://reproduce.debian.net/trixie-backports.html or https://reproduce.debian.net/trixie-security.html

  • Debugging Reproducibility Issues in Rust Software
    • FIXME non-deterministic issues were found and investigated for pimsync in the review process of adding to guix https://codeberg.org/guix/guix/pulls/4551#issuecomment-10997750
    • FIXME blogpost is an in-depth writeup of how to troubleshoot Reproducible Rust in general though
  • kpcyrd:
    • cargo (HashMap random order)
  • Bernhard M. Wiedemann:


← View all our monthly reports