Skip to content

Normalize paths in embedded dependency builds - #14

Merged
proddata merged 1 commit into
mainfrom
fix/release-dependency-paths
Oct 16, 2026
Merged

proddata merged 1 commit into
mainfrom
fix/release-dependency-paths

Conversation

@proddata

Copy link
Copy Markdown
Owner

The independent v0.1.1 rebuild produced different PostgreSQL 18 and 19 archives. Both manifests differed only in the embedded module checksum. ELF string comparison traced the difference to random mktemp paths recorded by libjwt and Jansson in FILE and debug information. Add GCC/Clang file-prefix mapping for those static-library builds, preserving the build isolation while making embedded paths stable. The previous candidate stays unpublished; a new version/tag will be used after verification. Trust boundary: build provenance only; validator behavior and fail-closed policy are unchanged. Local sh -n and git diff --check passed. CI and two separate candidate runs will verify the package bytes. Rollback: revert the two compiler flags and reject any resulting nonreproducible packages.

@proddata
proddata merged commit 56dfb63 into main Oct 16, 2026
18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant