chore: update pinned packages for reproducible build (#398)

Author: think-in-universe

.github/workflows/build.yml

@@ -57,7 +57,7 @@ jobs:
 
       - name: Build and push reproducible image
         run: |
-          ./docker-build.sh --push "${{ env.IMAGE_REFERENCE }}"
+          ./build-image.sh --push "${{ env.IMAGE_REFERENCE }}"
 
       - name: Get image digest
         run: |

docker-build.sh build-image.shdocker-build.sh renamed to build-image.sh

@@ -3,30 +3,30 @@ apt=2.6.1
 autoconf=2.71-3
 automake=1:1.16.5-1.3
 autotools-dev=20220109.1
-base-files=12.4+deb12u11
+base-files=12.4+deb12u12
 base-passwd=3.6.1
-bash=5.2.15-2+b8
+bash=5.2.15-2+b9
 binutils-common:amd64=2.40-2
 binutils-x86-64-linux-gnu=2.40-2
 binutils=2.40-2
 bsdutils=1:2.38.1-5+deb12u3
 bzip2=1.0.8-5+b1
 ca-certificates=20230311+deb12u1
-comerr-dev:amd64=2.1-1.47.0-2
+comerr-dev:amd64=2.1-1.47.0-2+b2
 coreutils=9.1-1
 cpp-12=12.2.0-14+deb12u1
 cpp=4:12.2.0-3
-curl=7.88.1-10+deb12u12
+curl=7.88.1-10+deb12u14
 dash=0.5.12-2
 debconf=1.5.82
 debian-archive-keyring=2023.3+deb12u2
 debianutils=5.7-0.5~deb12u1
 default-libmysqlclient-dev:amd64=1.1.0
 diffutils=1:3.8-4
-dirmngr=2.2.40-1.1
+dirmngr=2.2.40-1.1+deb12u1
 dpkg-dev=1.21.22
 dpkg=1.21.22
-e2fsprogs=1.47.0-2
+e2fsprogs=1.47.0-2+b2
 file=1:5.44-3
 findutils=4.9.0-4
 fontconfig-config=2.14.1-4
@@ -43,28 +43,28 @@ gir1.2-glib-2.0:amd64=1.74.0-3
 gir1.2-rsvg-2.0:amd64=2.54.7+dfsg-1~deb12u1
 git-man=1:2.39.5-0+deb12u2
 git=1:2.39.5-0+deb12u2
-gnupg-l10n=2.2.40-1.1
-gnupg-utils=2.2.40-1.1
-gnupg=2.2.40-1.1
-gpg-agent=2.2.40-1.1
-gpg-wks-client=2.2.40-1.1
-gpg-wks-server=2.2.40-1.1
-gpg=2.2.40-1.1
-gpgconf=2.2.40-1.1
-gpgsm=2.2.40-1.1
-gpgv=2.2.40-1.1
+gnupg-l10n=2.2.40-1.1+deb12u1
+gnupg-utils=2.2.40-1.1+deb12u1
+gnupg=2.2.40-1.1+deb12u1
+gpg-agent=2.2.40-1.1+deb12u1
+gpg-wks-client=2.2.40-1.1+deb12u1
+gpg-wks-server=2.2.40-1.1+deb12u1
+gpg=2.2.40-1.1+deb12u1
+gpgconf=2.2.40-1.1+deb12u1
+gpgsm=2.2.40-1.1+deb12u1
+gpgv=2.2.40-1.1+deb12u1
 grep=3.8-5
 gzip=1.12-1
 hicolor-icon-theme=0.17-2
 hostname=3.23+nmu1
 icu-devtools=72.1-3+deb12u1
-imagemagick-6-common=8:6.9.11.60+dfsg-1.6+deb12u3
-imagemagick-6.q16=8:6.9.11.60+dfsg-1.6+deb12u3
-imagemagick=8:6.9.11.60+dfsg-1.6+deb12u3
-init-system-helpers=1.65.2
-krb5-multidev:amd64=1.20.1-2+deb12u3
+imagemagick-6-common=8:6.9.11.60+dfsg-1.6+deb12u4
+imagemagick-6.q16=8:6.9.11.60+dfsg-1.6+deb12u4
+imagemagick=8:6.9.11.60+dfsg-1.6+deb12u4
+init-system-helpers=1.65.2+deb12u1
+krb5-multidev:amd64=1.20.1-2+deb12u4
 libacl1:amd64=2.3.1-3
-libaom3:amd64=3.6.0-1+deb12u1
+libaom3:amd64=3.6.0-1+deb12u2
 libapr1:amd64=1.7.2-3+deb12u1
 libaprutil1:amd64=1.6.3-1
 libapt-pkg6.0:amd64=2.6.1
@@ -82,26 +82,26 @@ libbrotli1:amd64=1.0.9-2+b6
 libbsd0:amd64=0.11.7-2
 libbz2-1.0:amd64=1.0.8-5+b1
 libbz2-dev:amd64=1.0.8-5+b1
-libc-bin=2.36-9+deb12u10
-libc-dev-bin=2.36-9+deb12u10
-libc6-dev:amd64=2.36-9+deb12u10
-libc6:amd64=2.36-9+deb12u10
+libc-bin=2.36-9+deb12u13
+libc-dev-bin=2.36-9+deb12u13
+libc6-dev:amd64=2.36-9+deb12u13
+libc6:amd64=2.36-9+deb12u13
 libcairo-gobject2:amd64=1.16.0-7
 libcairo-script-interpreter2:amd64=1.16.0-7
 libcairo2-dev:amd64=1.16.0-7
 libcairo2:amd64=1.16.0-7
 libcap-ng0:amd64=0.8.3-1+b3
-libcap2:amd64=1:2.66-4+deb12u1
+libcap2:amd64=1:2.66-4+deb12u2
 libcbor0.8:amd64=0.8.0-2+b1
 libcc1-0:amd64=12.2.0-14+deb12u1
-libcom-err2:amd64=1.47.0-2
+libcom-err2:amd64=1.47.0-2+b2
 libcrypt-dev:amd64=1:4.4.33-2
 libcrypt1:amd64=1:4.4.33-2
 libctf-nobfd0:amd64=2.40-2
 libctf0:amd64=2.40-2
-libcurl3-gnutls:amd64=7.88.1-10+deb12u12
-libcurl4-openssl-dev:amd64=7.88.1-10+deb12u12
-libcurl4:amd64=7.88.1-10+deb12u12
+libcurl3-gnutls:amd64=7.88.1-10+deb12u14
+libcurl4-openssl-dev:amd64=7.88.1-10+deb12u14
+libcurl4:amd64=7.88.1-10+deb12u14
 libdatrie1:amd64=0.2.13-2+b1
 libdav1d6:amd64=1.0.0-2+deb12u1
 libdb-dev:amd64=5.3.2
@@ -111,9 +111,9 @@ libde265-0:amd64=1.0.11-1+deb12u2
 libdebconfclient0:amd64=0.270
 libdeflate-dev:amd64=1.14-1
 libdeflate0:amd64=1.14-1
-libdjvulibre-dev:amd64=3.5.28-2.1~deb12u1
-libdjvulibre-text=3.5.28-2.1~deb12u1
-libdjvulibre21:amd64=3.5.28-2.1~deb12u1
+libdjvulibre-dev:amd64=3.5.28-2.2~deb12u1
+libdjvulibre-text=3.5.28-2.2~deb12u1
+libdjvulibre21:amd64=3.5.28-2.2~deb12u1
 libdpkg-perl=1.21.22
 libedit2:amd64=3.1-20221030-2
 libelf1:amd64=0.188-2.1
@@ -126,9 +126,9 @@ libevent-openssl-2.1-7:amd64=2.1.12-stable-8
 libevent-pthreads-2.1-7:amd64=2.1.12-stable-8
 libexif-dev:amd64=0.6.24-1+b1
 libexif12:amd64=0.6.24-1+b1
-libexpat1-dev:amd64=2.5.0-1+deb12u1
-libexpat1:amd64=2.5.0-1+deb12u1
-libext2fs2:amd64=1.47.0-2
+libexpat1-dev:amd64=2.5.0-1+deb12u2
+libexpat1:amd64=2.5.0-1+deb12u2
+libext2fs2:amd64=1.47.0-2+b2
 libffi-dev:amd64=3.4.4-1
 libffi8:amd64=3.4.4-1
 libfftw3-double3:amd64=3.3.10-1
@@ -150,11 +150,11 @@ libgdk-pixbuf-2.0-dev:amd64=2.42.10+dfsg-1+deb12u2
 libgdk-pixbuf2.0-bin=2.42.10+dfsg-1+deb12u2
 libgdk-pixbuf2.0-common=2.42.10+dfsg-1+deb12u2
 libgirepository-1.0-1:amd64=1.74.0-3
-libglib2.0-0:amd64=2.74.6-2+deb12u6
-libglib2.0-bin=2.74.6-2+deb12u6
-libglib2.0-data=2.74.6-2+deb12u6
-libglib2.0-dev-bin=2.74.6-2+deb12u6
-libglib2.0-dev:amd64=2.74.6-2+deb12u6
+libglib2.0-0:amd64=2.74.6-2+deb12u7
+libglib2.0-bin=2.74.6-2+deb12u7
+libglib2.0-data=2.74.6-2+deb12u7
+libglib2.0-dev-bin=2.74.6-2+deb12u7
+libglib2.0-dev:amd64=2.74.6-2+deb12u7
 libgmp-dev:amd64=2:6.2.1+dfsg1-1.1
 libgmp10:amd64=2:6.2.1+dfsg1-1.1
 libgmpxx4ldbl:amd64=2:6.2.1+dfsg1-1.1
@@ -163,8 +163,8 @@ libgomp1:amd64=12.2.0-14+deb12u1
 libgpg-error0:amd64=1.46-1
 libgprofng0:amd64=2.40-2
 libgraphite2-3:amd64=1.3.14-1
-libgssapi-krb5-2:amd64=1.20.1-2+deb12u3
-libgssrpc4:amd64=1.20.1-2+deb12u3
+libgssapi-krb5-2:amd64=1.20.1-2+deb12u4
+libgssrpc4:amd64=1.20.1-2+deb12u4
 libharfbuzz0b:amd64=6.0.0+dfsg-3
 libheif1:amd64=1.15.1-1+deb12u1
 libhogweed6:amd64=3.8.1-2
@@ -183,14 +183,14 @@ libjbig0:amd64=2.1-6.1
 libjpeg-dev:amd64=1:2.1.5-2
 libjpeg62-turbo-dev:amd64=1:2.1.5-2
 libjpeg62-turbo:amd64=1:2.1.5-2
-libk5crypto3:amd64=1.20.1-2+deb12u3
-libkadm5clnt-mit12:amd64=1.20.1-2+deb12u3
-libkadm5srv-mit12:amd64=1.20.1-2+deb12u3
-libkdb5-10:amd64=1.20.1-2+deb12u3
+libk5crypto3:amd64=1.20.1-2+deb12u4
+libkadm5clnt-mit12:amd64=1.20.1-2+deb12u4
+libkadm5srv-mit12:amd64=1.20.1-2+deb12u4
+libkdb5-10:amd64=1.20.1-2+deb12u4
 libkeyutils1:amd64=1.6.3-2
-libkrb5-3:amd64=1.20.1-2+deb12u3
-libkrb5-dev:amd64=1.20.1-2+deb12u3
-libkrb5support0:amd64=1.20.1-2+deb12u3
+libkrb5-3:amd64=1.20.1-2+deb12u4
+libkrb5-dev:amd64=1.20.1-2+deb12u4
+libkrb5support0:amd64=1.20.1-2+deb12u4
 libksba8:amd64=1.6.3-2
 liblcms2-2:amd64=2.14-2
 liblcms2-dev:amd64=2.14-2
@@ -208,19 +208,19 @@ liblzma5:amd64=5.4.1-1
 liblzo2-2:amd64=2.10-2
 libmagic-mgc=1:5.44-3
 libmagic1:amd64=1:5.44-3
-libmagickcore-6-arch-config:amd64=8:6.9.11.60+dfsg-1.6+deb12u3
-libmagickcore-6-headers=8:6.9.11.60+dfsg-1.6+deb12u3
-libmagickcore-6.q16-6-extra:amd64=8:6.9.11.60+dfsg-1.6+deb12u3
-libmagickcore-6.q16-6:amd64=8:6.9.11.60+dfsg-1.6+deb12u3
-libmagickcore-6.q16-dev:amd64=8:6.9.11.60+dfsg-1.6+deb12u3
-libmagickcore-dev=8:6.9.11.60+dfsg-1.6+deb12u3
-libmagickwand-6-headers=8:6.9.11.60+dfsg-1.6+deb12u3
-libmagickwand-6.q16-6:amd64=8:6.9.11.60+dfsg-1.6+deb12u3
-libmagickwand-6.q16-dev:amd64=8:6.9.11.60+dfsg-1.6+deb12u3
-libmagickwand-dev=8:6.9.11.60+dfsg-1.6+deb12u3
-libmariadb-dev-compat=1:10.11.11-0+deb12u1
-libmariadb-dev=1:10.11.11-0+deb12u1
-libmariadb3:amd64=1:10.11.11-0+deb12u1
+libmagickcore-6-arch-config:amd64=8:6.9.11.60+dfsg-1.6+deb12u4
+libmagickcore-6-headers=8:6.9.11.60+dfsg-1.6+deb12u4
+libmagickcore-6.q16-6-extra:amd64=8:6.9.11.60+dfsg-1.6+deb12u4
+libmagickcore-6.q16-6:amd64=8:6.9.11.60+dfsg-1.6+deb12u4
+libmagickcore-6.q16-dev:amd64=8:6.9.11.60+dfsg-1.6+deb12u4
+libmagickcore-dev=8:6.9.11.60+dfsg-1.6+deb12u4
+libmagickwand-6-headers=8:6.9.11.60+dfsg-1.6+deb12u4
+libmagickwand-6.q16-6:amd64=8:6.9.11.60+dfsg-1.6+deb12u4
+libmagickwand-6.q16-dev:amd64=8:6.9.11.60+dfsg-1.6+deb12u4
+libmagickwand-dev=8:6.9.11.60+dfsg-1.6+deb12u4
+libmariadb-dev-compat=1:10.11.14-0+deb12u2
+libmariadb-dev=1:10.11.14-0+deb12u2
+libmariadb3:amd64=1:10.11.14-0+deb12u2
 libmaxminddb-dev:amd64=1.7.1-1
 libmaxminddb0:amd64=1.7.1-1
 libmd0:amd64=1.0.4-2
@@ -241,8 +241,8 @@ libnsl2:amd64=1.3.0-2
 libnuma1:amd64=2.0.16-1
 libopenexr-3-1-30:amd64=3.1.5-5
 libopenexr-dev=3.1.5-5
-libopenjp2-7-dev:amd64=2.5.0-2+deb12u1
-libopenjp2-7:amd64=2.5.0-2+deb12u1
+libopenjp2-7-dev:amd64=2.5.0-2+deb12u2
+libopenjp2-7:amd64=2.5.0-2+deb12u2
 libp11-kit0:amd64=0.24.1-2
 libpam-modules-bin=1.5.2-6+deb12u1
 libpam-modules:amd64=1.5.2-6+deb12u1
@@ -256,14 +256,14 @@ libpcre2-32-0:amd64=10.42-1
 libpcre2-8-0:amd64=10.42-1
 libpcre2-dev:amd64=10.42-1
 libpcre2-posix3:amd64=10.42-1
-libperl5.36:amd64=5.36.0-7+deb12u2
+libperl5.36:amd64=5.36.0-7+deb12u3
 libpixman-1-0:amd64=0.42.2-1
 libpixman-1-dev:amd64=0.42.2-1
 libpkgconf3:amd64=1.8.1-1
 libpng-dev:amd64=1.6.39-2
 libpng16-16:amd64=1.6.39-2
-libpq-dev=15.13-0+deb12u1
-libpq5:amd64=15.13-0+deb12u1
+libpq-dev=15.14-0+deb12u1
+libpq5:amd64=15.14-0+deb12u1
 libproc2-0:amd64=2:4.0.2-3
 libpsl5:amd64=0.21.2-1
 libpthread-stubs0-dev:amd64=0.4-1
@@ -290,30 +290,30 @@ libserf-1-1:amd64=1.3.9-11
 libsm-dev:amd64=2:1.2.3-1
 libsm6:amd64=2:1.2.3-1
 libsmartcols1:amd64=2.38.1-5+deb12u3
-libsqlite3-0:amd64=3.40.1-2+deb12u1
-libsqlite3-dev:amd64=3.40.1-2+deb12u1
-libss2:amd64=1.47.0-2
+libsqlite3-0:amd64=3.40.1-2+deb12u2
+libsqlite3-dev:amd64=3.40.1-2+deb12u2
+libss2:amd64=1.47.0-2+b2
 libssh2-1:amd64=1.10.0-3+b1
-libssl-dev:amd64=3.0.16-1~deb12u1
-libssl3:amd64=3.0.16-1~deb12u1
+libssl-dev:amd64=3.0.17-1~deb12u3
+libssl3:amd64=3.0.17-1~deb12u3
 libstdc++-12-dev:amd64=12.2.0-14+deb12u1
 libstdc++6:amd64=12.2.0-14+deb12u1
 libsvn1:amd64=1.14.2-4+deb12u1
-libsystemd0:amd64=252.38-1~deb12u1
+libsystemd0:amd64=252.39-1~deb12u1
 libtasn1-6:amd64=4.19.0-2+deb12u1
 libthai-data=0.1.29-1
 libthai0:amd64=0.1.29-1
-libtiff-dev:amd64=4.5.0-6+deb12u2
-libtiff6:amd64=4.5.0-6+deb12u2
-libtiffxx6:amd64=4.5.0-6+deb12u2
+libtiff-dev:amd64=4.5.0-6+deb12u3
+libtiff6:amd64=4.5.0-6+deb12u3
+libtiffxx6:amd64=4.5.0-6+deb12u3
 libtinfo6:amd64=6.4-4
 libtirpc-common=1.3.3+ds-1
 libtirpc-dev:amd64=1.3.3+ds-1
 libtirpc3:amd64=1.3.3+ds-1
 libtool=2.4.7-7~deb12u1
 libtsan2:amd64=12.2.0-14+deb12u1
 libubsan1:amd64=12.2.0-14+deb12u1
-libudev1:amd64=252.38-1~deb12u1
+libudev1:amd64=252.39-1~deb12u1
 libunistring2:amd64=1.0-2
 libutf8proc2:amd64=2.8.0-1
 libuuid1:amd64=2.38.1-5+deb12u3
@@ -340,25 +340,25 @@ libxdmcp-dev:amd64=1:1.1.2-3
 libxdmcp6:amd64=1:1.1.2-3
 libxext-dev:amd64=2:1.3.4-1+b1
 libxext6:amd64=2:1.3.4-1+b1
-libxml2-dev:amd64=2.9.14+dfsg-1.3~deb12u2
-libxml2:amd64=2.9.14+dfsg-1.3~deb12u2
+libxml2-dev:amd64=2.9.14+dfsg-1.3~deb12u4
+libxml2:amd64=2.9.14+dfsg-1.3~deb12u4
 libxrender-dev:amd64=1:0.9.10-1.1
 libxrender1:amd64=1:0.9.10-1.1
-libxslt1-dev:amd64=1.1.35-1+deb12u1
-libxslt1.1:amd64=1.1.35-1+deb12u1
+libxslt1-dev:amd64=1.1.35-1+deb12u3
+libxslt1.1:amd64=1.1.35-1+deb12u3
 libxt-dev:amd64=1:1.2.1-1.1
 libxt6:amd64=1:1.2.1-1.1
 libxxhash0:amd64=0.8.1-1
 libyaml-0-2:amd64=0.2.5-1
 libyaml-dev:amd64=0.2.5-1
 libzstd-dev:amd64=1.5.4+dfsg2-5
 libzstd1:amd64=1.5.4+dfsg2-5
-linux-libc-dev:amd64=6.1.140-1
+linux-libc-dev:amd64=6.1.158-1
 login=1:4.13+dfsg1-1+deb12u1
-logsave=1.47.0-2
+logsave=1.47.0-2+b2
 m4=1.4.19-3
 make=4.3-4.1
-mariadb-common=1:10.11.11-0+deb12u1
+mariadb-common=1:10.11.14-0+deb12u2
 mawk=1.3.4.20200120-3.1
 media-types=10.0.0
 mercurial-common=6.3.2-1+deb12u1
@@ -368,13 +368,13 @@ mysql-common=5.8+1.1.0
 ncurses-base=6.4-4
 ncurses-bin=6.4-4
 netbase=6.4
-openssh-client=1:9.2p1-2+deb12u6
-openssl=3.0.16-1~deb12u1
+openssh-client=1:9.2p1-2+deb12u7
+openssl=3.0.17-1~deb12u3
 passwd=1:4.13+dfsg1-1+deb12u1
 patch=2.7.6-7
-perl-base=5.36.0-7+deb12u2
-perl-modules-5.36=5.36.0-7+deb12u2
-perl=5.36.0-7+deb12u2
+perl-base=5.36.0-7+deb12u3
+perl-modules-5.36=5.36.0-7+deb12u3
+perl=5.36.0-7+deb12u3
 pinentry-curses=1.2.1-1
 pkg-config:amd64=1.8.1-1
 pkgconf-bin=1.8.1-1
@@ -395,7 +395,7 @@ sq=0.27.0-2+b1
 subversion=1.14.2-4+deb12u1
 sysvinit-utils=3.06-4
 tar=1.34+dfsg-1.2+deb12u1
-tzdata=2025b-0+deb12u1
+tzdata=2025b-0+deb12u2
 ucf=3.0043+nmu1+deb12u1
 unzip=6.0-28
 usr-is-merged=37~deb12u1

pinned-packages-builder.txt

@@ -77,7 +77,7 @@ libsepol2:amd64=3.4-2.1
 libsmartcols1:amd64=2.38.1-5+deb12u3
 libss2:amd64=1.47.0-2+b2
 libssh2-1:amd64=1.10.0-3+b1
-libssl3:amd64=3.0.17-1~deb12u3
+libssl3:amd64=3.0.18-1~deb12u2
 libstdc++6:amd64=12.2.0-14+deb12u1
 libsystemd0:amd64=252.39-1~deb12u1
 libtasn1-6:amd64=4.19.0-2+deb12u1
@@ -93,7 +93,7 @@ mawk=1.3.4.20200120-3.1
 mount=2.38.1-5+deb12u3
 ncurses-base=6.4-4
 ncurses-bin=6.4-4
-openssl=3.0.17-1~deb12u3
+openssl=3.0.18-1~deb12u2
 passwd=1:4.13+dfsg1-1+deb12u1
 perl-base=5.36.0-7+deb12u3
 sed=4.9-1