From 9d38b52fe86a13082fec44b3d05c71639bb90811 Mon Sep 17 00:00:00 2001 From: Elliott Sales de Andrade Date: Fri, 27 Mar 2026 14:17:56 -0400 Subject: [PATCH 1/2] BLD: Update bundled FreeType to 2.14.3 These releases mostly consist of security fixes. --- subprojects/freetype2.wrap | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/subprojects/freetype2.wrap b/subprojects/freetype2.wrap index 4a131cf45270..b23db4f664ad 100644 --- a/subprojects/freetype2.wrap +++ b/subprojects/freetype2.wrap @@ -2,11 +2,11 @@ # the `LOCAL_FREETYPE_VERSION` value in `lib/matplotlib/__init__.py`. Bump the cache key # in `.circleci/config.yml` when changing requirements. [wrap-file] -directory = freetype-2.14.1 -source_url = https://download.savannah.gnu.org/releases/freetype/freetype-2.14.1.tar.xz -source_fallback_url = https://downloads.sourceforge.net/project/freetype/freetype2/2.14.1/freetype-2.14.1.tar.xz -source_filename = freetype-2.14.1.tar.xz -source_hash = 32427e8c471ac095853212a37aef816c60b42052d4d9e48230bab3bdf2936ccc +directory = freetype-2.14.3 +source_url = https://download.savannah.gnu.org/releases/freetype/freetype-2.14.3.tar.xz +source_fallback_url = https://downloads.sourceforge.net/project/freetype/freetype2/2.14.3/freetype-2.14.3.tar.xz +source_filename = freetype-2.14.3.tar.xz +source_hash = 36bc4f1cc413335368ee656c42afca65c5a3987e8768cc28cf11ba775e785a5f # This patch allows using our bundled HarfBuzz. diff_files = freetype-2.14.1-static-harfbuzz.patch From 2c9dd89e9bbd8b4644a4fa10e2de00412ea43ed5 Mon Sep 17 00:00:00 2001 From: Thomas A Caswell Date: Thu, 2 Apr 2026 14:57:04 -0400 Subject: [PATCH 2/2] BLD: adjust upstream url for freetype to nongnu savanah mirror Co-authored-by: Tim Hoffmann <2836374+timhoffm@users.noreply.github.com> --- subprojects/freetype2.wrap | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/subprojects/freetype2.wrap b/subprojects/freetype2.wrap index b23db4f664ad..c3b26ed24625 100644 --- a/subprojects/freetype2.wrap +++ b/subprojects/freetype2.wrap @@ -3,7 +3,7 @@ # in `.circleci/config.yml` when changing requirements. [wrap-file] directory = freetype-2.14.3 -source_url = https://download.savannah.gnu.org/releases/freetype/freetype-2.14.3.tar.xz +source_url = https://download.savannah.nongnu.org/releases/freetype/freetype-2.14.3.tar.xz source_fallback_url = https://downloads.sourceforge.net/project/freetype/freetype2/2.14.3/freetype-2.14.3.tar.xz source_filename = freetype-2.14.3.tar.xz source_hash = 36bc4f1cc413335368ee656c42afca65c5a3987e8768cc28cf11ba775e785a5f