commit b1b0d849f205a217b846f9e4a81064fe2e5f42b6 Author: Chris Lamb <lamby@debian.org> Date: Tue May 13 15:22:50 2025 -0700 Don't rely on zipdetails' --walk being available, and only add that argument on newer versions. (Closes: reproducible-builds/diffoscope#408) commit 4759117832063314983ce1f1d02cdd4f7388bed9 Author: Chris Lamb <lamby@debian.org> Date: Tue May 13 15:13:09 2025 -0700 Revert "Allow stable-bpo to fail for now." Was added to allow contributor to merge MR. This reverts commit 8425d51cc516a4ab15bc4acad4d53f8930d1dba0. commit 09abd4cddbebdf0f2310c47dc562826e44f18088 Author: Omair Majid <omajid@redhat.com> Date: Mon Apr 14 18:44:16 2025 -0400 Add NuGet package support NuGet packages (commonly with file extension .nupkg) are used by .NET to transport libraries, similar to jar files. NuGet packages are essentially zip files with some expected contents. A mininial library looks like this: $ unzip -l ClassLibrary.0.0.1.nupkg Archive: ClassLibrary.0.0.1.nupkg Length Date Time Name --------- ---------- ----- ---- 502 04-14-2025 18:14 _rels/.rels 407 04-14-2025 18:14 ClassLibrary.nuspec 3584 04-14-2025 22:14 lib/net8.0/ClassLibrary.dll 459 04-14-2025 18:14 [Content_Types].xml 625 04-14-2025 18:14 package/services/metadata/core-properties/b44ebb537bbf4983b9527f9e3820fda6.psmdcp --------- ------- Some of these content are similar to the contents of a Microsoft OOXML file, and `file` utility doesn't recognize this correctly. Eee https://bugs.astron.com/view.php?id=644 Support NuGet packages in diffoscope will make it easier to verify the .NET SDK and .NET libraries. It will also contribute towards making the .NET SDK itself reproducible (see https://github.com/dotnet/source-build/issues/4963). commit 8425d51cc516a4ab15bc4acad4d53f8930d1dba0 Author: Chris Lamb <lamby@debian.org> Date: Mon May 12 15:47:05 2025 -0700 Allow stable-bpo to fail for now. commit 676ac9194e1bb7ea351b8eaf2439645ec019bbb7 Author: Chris Lamb <lamby@debian.org> Date: Fri May 9 09:22:02 2025 -0700 Open new changelog entry for version 296. Gbp-Dch: ignore
There is 1 open security issue in bookworm.
You can find information about how to handle this issue in the security team's documentation.