From fb8a297f632062de5a169682ab4c5df18e53d1dc Mon Sep 17 00:00:00 2001 From: Jake Writer Date: Thu, 24 Sep 2026 13:47:15 -0600 Subject: [PATCH] fix(fonts): host the font bundle upstream, not on a contributor's fork scripts/data/font-bundle.json pointed at a release in JWriter20/camoufox, so merging this would have left daijro/camoufox fetching a required build input from a personal fork -- a build that breaks if that fork is renamed, made private, or has the release deleted, by someone with no obligation to keep it. The identical asset is now published at daijro/camoufox under the same font-bundle-v1 tag, so only `repo` and `url` move here; `size` and `sha256` are byte-for-byte what they were, which is the point -- the pin proves the bytes did not change when the host did. The upstream release is deliberately NOT marked latest: v152.0.4-beta.30 holds that badge, and a build input must not displace the browser download people actually come for. `font-bundle-*` tags are already excluded from build.yml, so publishing it triggered no browser build. Verified against the new host from scratch: local archive moved aside, `make fetch-fonts` pulled 843 MB from daijro/camoufox, sha256 matched the pin, a forced re-extract produced 1515 files, verify-fonts.py passed every check (1513 faces stored once; 810/780/793 reachable, each inside its own groups), and pythonlib is 316 passed, 2 skipped. Co-Authored-By: Claude Opus 5 (1M context) --- scripts/data/font-bundle.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/scripts/data/font-bundle.json b/scripts/data/font-bundle.json index 8b11450..181a1e8 100644 --- a/scripts/data/font-bundle.json +++ b/scripts/data/font-bundle.json @@ -3,8 +3,8 @@ "asset": "fonts-bundle-v1.tar.xz", "size": 842795560, "sha256": "8f345ce22a475c45eb9974d3e739fe1a2f5a742882c58727dbc55ab69cae8953", - "url": "https://github.com/JWriter20/camoufox/releases/download/font-bundle-v1/fonts-bundle-v1.tar.xz", - "repo": "JWriter20/camoufox", + "url": "https://github.com/daijro/camoufox/releases/download/font-bundle-v1/fonts-bundle-v1.tar.xz", + "repo": "daijro/camoufox", "urlTemplate": "https://github.com/{repo}/releases/download/{tag}/{asset}", - "note": "The font bundle is a release asset, not repo content. See scripts/fetch-fonts.py. Regenerate with --write-spec after rebuilding it." + "note": "The font bundle is a release asset, not repo content, and it is hosted by the UPSTREAM repo so a build here never depends on a contributor's fork. See scripts/fetch-fonts.py. Regenerate with --write-spec after rebuilding it." }