New comment by Duncaen on void-packages repository

https://github.com/void-linux/void-packages/pull/14463#issuecomment-531577954

Comment:
cargo packages usually comes with `Cargo.lock`, which makes sure it is using a fixed version.
We don't run `cargo update` each build, resulting in building the same code each time the revision is bumped. If you start selectively updating some random dependencies to the latest revision available you get different binaries every time the package is build.
Checking out a version of a void template should optimally produce exactly the same binaries as the previous build, the build date shouldn't have influence on the produced binaries.