Add configurable check to ensure that installed dependencies of packages in a transaction are available
This is required for reproducible builds to ensure that any listed dependency in its used version is available in the repo, pool or current transaction otherwise it will not be possible to satisfy the install requirements during a reproducible builds.
To achieve this we need to go through the .BUILDINFO
file and extract all installed
fields (pkgname + exact version).
Once collected we need to check them against availability. If one of the dependencies in the installed
fields is not available in that specified version in the package pool or the archive, deny the release of that package.
Slightly related to #142, but #142 is meant to ensure consistency within a given repo (f.e. [core]
only depends on [core]
packages)