Danny wrote.

--- orig/jdk-3cc80be736f2/src/java.base/share/classes/java/lang/module/ModuleDescriptor.java	1970-01-01 01:00:01.000000000 +0100
+++ jdk-3cc80be736f2/src/java.base/share/classes/java/lang/module/ModuleDescriptor.java	2022-04-13 17:30:37.242775977 +0200
@@ -43,6 +43,7 @@
 import java.util.Objects;
 import java.util.Optional;
 import java.util.Set;
+import java.util.TreeSet;
 import java.util.function.Supplier;
 import java.util.stream.Collectors;
 import java.util.stream.Stream;
@@ -2155,9 +2156,9 @@
          * @return The module descriptor
          */
         public ModuleDescriptor build() {
-            Set<Requires> requires = new HashSet<>(this.requires.values());
-            Set<Exports> exports = new HashSet<>(this.exports.values());
-            Set<Opens> opens = new HashSet<>(this.opens.values());
+            Set<Requires> requires = new TreeSet<>(this.requires.values());
+            Set<Exports> exports = new TreeSet<>(this.exports.values());
+            Set<Opens> opens = new TreeSet<>(this.opens.values());
 
             // add dependency on java.base
             if (strict
@@ -2169,7 +2170,7 @@
                                           null));
             }
 
-            Set<Provides> provides = new HashSet<>(this.provides.values());
+            Set<Provides> provides = new TreeSet<>(this.provides.values());
 
             return new ModuleDescriptor(name,
                                         version,
vices/authentication.scm?id=8f22b547ef7bf0a0c3ca5712589c8c02731431ca'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/services/authentication.scm'>
<input type='hidden' name='id' value='8f22b547ef7bf0a0c3ca5712589c8c02731431ca'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=8f22b547ef7bf0a0c3ca5712589c8c02731431ca'>root</a>/<a href='/guix/log/gnu?id=8f22b547ef7bf0a0c3ca5712589c8c02731431ca'>gnu</a>/<a href='/guix/log/gnu/services?id=8f22b547ef7bf0a0c3ca5712589c8c02731431ca'>services</a>/<a href='/guix/log/gnu/services/authentication.scm?id=8f22b547ef7bf0a0c3ca5712589c8c02731431ca'>authentication.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/services/authentication.scm?id=8f22b547ef7bf0a0c3ca5712589c8c02731431ca&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2021-03-10 18:01:47 +0100'>2021-03-10</span></td><td><a href='/guix/commit/gnu/services/authentication.scm?id=520bac7ed00a949a0391ad680de65a1498105c2b'>services: Prevent following symlinks during activation.</a><span class='msg-avail'>...<span class='msg-tooltip'>This addresses a potential security issue, where a compromised
service could trick the activation code in changing the permissions,
owner and group of arbitrary files.  However, this patch is
currently only a partial fix, due to a TOCTTOU (time-of-check to
time-of-use) race, which can be fixed once guile has bindings
to openat and friends.

Fixes: &lt;https://lists.gnu.org/archive/html/guix-devel/2021-01/msg00388.html&gt;

* gnu/build/activation.scm: new procedure 'mkdir-p/perms'.
* gnu/services/authentication.scm
  (%nslcd-activation, nslcd-service-type): use new procedure.
* gnu/services/cups.scm (%cups-activation): likewise.
* gnu/services/dbus.scm (dbus-activation): likewise.
* gnu/services/dns.scm (knot-activation): likewise.

Signed-off-by: Ludovic Courtès &lt;ludo@gnu.org&gt;
</span></span></td><td>Maxime Devos</td></tr>
<tr><td><span title='2019-04-24 22:21:35 +0200'>2019-04-24</span></td><td><a href='/guix/commit/gnu/services/authentication.scm?id=9374cbd1fb29395a5e849e95e8a249e5f9f944c0'>services: fprintd: Provide polkit policy.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/services/authentication.scm (fprintd-service-type)[extensions]: Add
polkit-service-type.
</span></span></td><td>Danny Milosavljevic</td></tr>
<tr><td><span title='2019-04-21 10:40:19 +0200'>2019-04-21</span></td><td><a href='/guix/commit/gnu/services/authentication.scm?id=dc01978288318a8155e2e2657be9b278a754ebac'>services: fprintd: Use define-configuration.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/services/authentication.scm: Use define-configuration in fprintd.
</span></span></td><td>Danny Milosavljevic</td></tr>
<tr><td><span title='2019-04-17 08:51:11 +0200'>2019-04-17</span></td><td><a href='/guix/commit/gnu/services/authentication.scm?id=0682f084635cdc289aabafc4b2583639e00a28b3'>services: fprintd: Fix service.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/services/authentication.scm (&lt;fprintd-configuration&gt;)[ntp]: Rename to...
[fprintd]: ...this.
(fprintd-dbus-service): New procedure.
(fprintd-service-type): Use it.
[default-value]: Add value.
</span></span></td><td>Danny Milosavljevic</td></tr>