[tasks] 01/01: take a note, that we really want the hashes of the depends in the .buildinfo files

[Holger Levsen]

This is an automated email from the git hooks/post-receive script.

holger pushed a commit to branch master
in repository tasks.

commit f61cc45daebc9160072efcfea14e1f101649dd85
Author: Holger Levsen <holger at layer-acht.org>
Date:   Wed Dec 21 12:18:39 2016 +0100

    take a note, that we really want the hashes of the depends in the .buildinfo files
    
    Signed-off-by: Holger Levsen <holger at layer-acht.org>
---
 pending.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pending.txt b/pending.txt
index 9a37638..25922a4 100644
--- a/pending.txt
+++ b/pending.txt
@@ -11,6 +11,7 @@ might have owners in brackets at the end. owning a task doesnt imply "will do" b
 
 - .buildinfo file workflow design problem: Autobuilders only generate the arch:all and arch:any binary packages from the source package they are given. They do not regenerate the source package. Thus, they will call dpkg-buildpackage with --build=any or --build=all which in turn will create a .buildinfo that doesn't contain the source hash. (see #774415)
 
+- .buildinfo files dont contain checksums of the installed dependencies, just thier names…
 
 - website work:
 	- keep git at github.com:reproducible-builds/website.git automatically in sync with https://anonscm.debian.org/git/reproducible/reproducible-website.git or at least have a daily jenkins job which complains if it's not

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/reproducible/tasks.git