[Bug]: outdated savannah URL in subprojects/freetype-2.6.1.wrap #31340
Description
Bug summary
When building from source of matplotlib v3.10.8 downloaded from PyPi, the following message is observed
Downloading freetype-2.6.1 source from https://download.savannah.gnu.org/releases/freetype/freetype-old/freetype-2.6.1.tar.gz
HTTP Error 502: Bad Gateway
WARNING: failed to download with error: could not get https://download.savannah.gnu.org/releases/freetype/freetype-old/freetype-2.6.1.tar.gz; is the internet available?. Trying after a delay...
HTTP Error 502: Bad Gateway
This is because there is an outdated URL in subprojects/freetype-2.6.1.wrap
The line in freetype-2.6.1.wrap should be changed from
source_url = https://download.savannah.gnu.org/releases/freetype/freetype-old/freetype-2.6.1.tar.gz
to
source_url=https://download.savannah.nongnu.org/releases/freetype/freetype-old/freetype-2.6.1.tar.gz
To show that this updated URL works, here is the output from wget.
Please note that downloads from savannah get redirected to a third party site, so that should raise security concerns.
wget https://download.savannah.nongnu.org/releases/freetype/freetype-old/freetype-2.6.1.tar.gz
--2026-03-20 18:10:33-- https://download.savannah.nongnu.org/releases/freetype/freetype-old/freetype-2.6.1.tar.gz
Resolving download.savannah.nongnu.org... 2001:470:142:5::200, 209.51.188.200
Connecting to download.savannah.nongnu.org|2001:470:142:5::200|:443... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: https://fosszone.csd.auth.gr/nongnu/freetype/freetype-old/freetype-2.6.1.tar.gz [following]
--2026-03-20 18:10:36-- https://fosszone.csd.auth.gr/nongnu/freetype/freetype-old/freetype-2.6.1.tar.gz
Resolving fosszone.csd.auth.gr... 155.207.200.222
Connecting to fosszone.csd.auth.gr|155.207.200.222|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2302080 (2.2M) [application/x-gzip]
Saving to: ‘freetype-2.6.1.tar.gz.1’
freetype-2.6.1.tar.gz.1 100%[====================================================================================================>] 2.20M 5.57MB/s in 0.4s
2026-03-20 18:10:37 (5.57 MB/s) - ‘freetype-2.6.1.tar.gz.1’ saved [2302080/2302080]
Code for reproduction
/usr/local/bin/pip3.12 install /usr/src/build/matplotlib-3.10.8/ --no-binary all --no-build-isolation --no-cache-dir --no-deps --no-index --no-warn-script-location --progress-bar off --root "?url=https%3A%2F%2Fgithub.com%2Fusr%2Flocal%2Fstow%2FLanguages%2FPython_312%2Fmatplotlib_312-3.10.8" --verboseActual outcome
Downloading freetype-2.6.1 source from https://download.savannah.gnu.org/releases/freetype/freetype-old/freetype-2.6.1.tar.gz
HTTP Error 502: Bad Gateway
Expected outcome
The file freetype-2.6.1.tar.gz should be downloaded.
Additional information
No response
Operating system
No response
Matplotlib Version
3.10.8
Matplotlib Backend
No response
Python version
Python 3.12
Jupyter version
No response
Installation
from source (.tar.gz)