@reproducible_builds Please consider adding alt text to images like that so they can be appreciated and understood by folks with visual impairments. I ran this through Tesseract (shipped in Debian) and hand-corrected it:
Reproducible Builds in May 2026
Welcome to the May 2026 report from the Reproducible Builds project.
These reports outline what we've been up to over the past month, highlighting items of news from elsewhere in the increasingly-important area of software supply-chain security. As ever, if you are interested in contributing to the Reproducible Builds project, please see the Contribute page on our website.
In this month's report, we cover:
1. Debian to ship reproducible packages in forky and beyond
2. Holger Levsen on reproducing official Debian packages
3. Reproducible Builds 2026 summit to be held in Gothenburg, Sweden
4. Kettle: Attested Builds for Verifiable Software
5. New rebuilderd version announced
6. Reproducible open source messengers
7. Distribution work
8. Misc news
9. Patches
10. Documentation updates
Debian to ship reproducible packages in forky and beyond
In a huge change in Debian’s reproducibility policy, the Debian Release Team announced that:
... we've decided it’s time to say that Debian must ship reproducible packages. Since yesterday, we have enabled our migration software to block migration of new packages that can’t be reproduced [on reproduce.debian.net] or existing packages in testing that regress in reproducibility.
That is to say, if newly-uploaded packages are not reproducible, they won't be considered candidates for inclusion in the next stable release of Debian codenamed forky. (Some exceptions may be granted.)
This news generated a number of articles and comments in various news outlets:
* Linux Weekly News (LWN): Debian to require reproducible builds
#alttext4you