Skip to content

build: enable reproducible package metadata - #63

Merged
thomhurst merged 1 commit into
mainfrom
issue-45-deterministic-packages
Aug 21, 2026
Merged

build: enable reproducible package metadata#63
thomhurst merged 1 commit into
mainfrom
issue-45-deterministic-packages

Conversation

@thomhurst

Copy link
Copy Markdown
Owner

Summary

  • enable ContinuousIntegrationBuild and deterministic source-path mapping when CI=true
  • publish repository metadata and embed source files unavailable through source control
  • verify all reproducibility properties and exact repository commit metadata during package validation
  • confirm CI-built DLL, PDB, and XML outputs are byte-identical from two different checkout paths

Closes #45

Validation

  • dotnet build Kevlar.slnx -c Release -p:CI=true -p:Version=0.0.0-determinism
  • dotnet pack Kevlar.slnx -c Release --no-build -p:CI=true -p:Version=0.0.0-determinism
  • pwsh scripts/Verify-Packages.ps1 -PackagesPath artifacts/package/release -Version 0.0.0-determinism
  • 426 unit, 16 integration, 19 analyzer, and 1 netstandard tests passed
  • SHA-256 equality across two checkout paths for Kevlar DLL/PDB/XML on net10.0 and netstandard2.0

@coderabbitai

coderabbitai Bot commented Aug 21, 2026

Copy link
Copy Markdown

Warning

Review limit reached

@thomhurst, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 30 seconds

Limit details: You’ve used all 10 included reviews currently available.

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

Wait for the limit to reset, then comment @coderabbitai review or push new commits to the PR.

An organization admin can change what happens after included review limits in Billing.

How do review limits work?

CodeRabbit enforces per-developer PR review limits within each organization.

For paid Pro and Pro+ reviews, CodeRabbit uses a developer's included PR review attempts over the past 7 days to set the current hourly allowance. At typical activity levels, the full plan allowance applies. Higher sustained activity can lower the allowance until earlier attempts leave the 7-day window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 8facf2ce-b372-4cf7-bbaa-63077288813d

📥 Commits

Reviewing files that changed from the base of the PR and between b4c8795 and ccb25dc.

📒 Files selected for processing (2)
  • Directory.Build.props
  • scripts/Verify-Packages.ps1

Comment @coderabbitai help to get the list of available commands.

@thomhurst
thomhurst merged commit 0565894 into main Aug 21, 2026
6 checks passed
@thomhurst
thomhurst deleted the issue-45-deterministic-packages branch August 21, 2026 12:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Ensure Nuget package has determistic flags

1 participant