Kurale: fix Simon's source-block bugs + document the rebuild

Repo: https://github.com/etunni/kurale (was https://www.github.com/...)
Commit: 08bf7684d57c6faacff84e6c5ab31df6b7beae18 (unchanged)
Config: override config.yaml in family dir (unchanged)
Branch: master (was main; corrected to match upstream default)
Source file: fonts/Kurale-Regular.ttf (was fonts/ttf/...)
Status: complete (with ttfautohint provenance caveat)
Confidence: HIGH

Simon Cozens' 2026-02-27 commit c9a8edf41 ("Rebuild and update
kurale") rebuilt the binary locally with ttfautohint v1.8.4.7-5d5b
and rewrote the source block. The rewritten source block had three
bugs that this commit corrects:

1. repository_url: Removed redundant www. prefix
   (https://www.github.com/etunni/kurale -> https://github.com/etunni/kurale)
2. source_file: Corrected path
   (fonts/ttf/Kurale-Regular.ttf -> fonts/Kurale-Regular.ttf;
    the file is in fonts/, not fonts/ttf/, at the recorded commit)
3. branch: Corrected to match upstream default
   (main -> master; the etunni/kurale default branch is master)

Provenance caveat documented in upstream_info.md: the shipping
binary (265304 bytes, Version "2.000; ttfautohint (v1.8.4.7-5d5b)")
is NOT byte-identical to upstream fonts/Kurale-Regular.ttf at the
recorded commit (250224 bytes, Version 2.000). Simon's ttfautohint
post-process was applied locally and not pushed upstream. The
recorded commit identifies the source state (consistent with the
override config.yaml's Kurale.glyphs source) but does not directly
reproduce the shipping binary.

Verified upstream:
- etunni/kurale default branch: master (in repo archive at HEAD ref).
- 08bf7684d:fonts/Kurale-Regular.ttf: 250224 bytes, md5
  7e63a40022b4b92268acd6a84d703a06, Version 2.000.
- shipping ofl/kurale/Kurale-Regular.ttf: 265304 bytes, md5
  2636a6a61057bb6c505d14b3762be5e1, Version "2.000; ttfautohint
  (v1.8.4.7-5d5b)".

Changes:
- Fixed 3 bugs in METADATA.pb source block.
- Appended Recent upstream/main activity section with diagnosis,
  before/after source block, and provenance caveat.

Assisted by an AI agent (Claude Opus 4.7 (1M context))

diff --git a/ofl/kurale/METADATA.pb b/ofl/kurale/METADATA.pb
index 42b9cb6776f9cac791eece822a2af7655d72c323..2f733e9a28ade15d8870b27fb21c62ae8ab7f7d7 100644 (file)
--- a/ofl/kurale/METADATA.pb
+++ b/ofl/kurale/METADATA.pb
@@ -19,16 +19,16 @@ subsets: "latin"
 subsets: "latin-ext"
 subsets: "menu"
 source {
-  repository_url: "https://www.github.com/etunni/kurale"
+  repository_url: "https://github.com/etunni/kurale"
   commit: "08bf7684d57c6faacff84e6c5ab31df6b7beae18"
   files {
-    source_file: "fonts/ttf/Kurale-Regular.ttf"
+    source_file: "fonts/Kurale-Regular.ttf"
     dest_file: "Kurale-Regular.ttf"
   }
   files {
     source_file: "OFL.txt"
     dest_file: "OFL.txt"
   }
-  branch: "main"
+  branch: "master"
 }
 primary_script: "Deva"

diff --git a/ofl/kurale/upstream_info.md b/ofl/kurale/upstream_info.md
index e8e8bd213ac7951fbc4338b08231f55b54790c91..2c39e57e388dbbfec6177cb122f531a80d82a2d6 100644 (file)
--- a/ofl/kurale/upstream_info.md
+++ b/ofl/kurale/upstream_info.md
@@ -102,3 +102,45 @@ The source block in METADATA.pb was complete with:
 - **Confidence**: HIGH
 
 No further action was required for this family.
+
+## Recent upstream/main activity (post-investigation)
+
+- **2026-02-27** — Simon Cozens, commit [`c9a8edf41`](https://github.com/google/fonts/commit/c9a8edf41) ("Rebuild and update kurale"): rebuilt the binary locally with `ttfautohint` and rewrote the source block. The Kurale-Regular.ttf binary changed from 250224 bytes (`Version 2.000`) to 265304 bytes (`Version 2.000; ttfautohint (v1.8.4.7-5d5b)`); md5 changed from `7e63a40022b4b92268acd6a84d703a06` to `2636a6a61057bb6c505d14b3762be5e1`. Simon also added file mappings + `branch` and updated the recorded commit.
+
+  ### Bugs introduced by Simon's commit (corrected here)
+
+  Simon's source block had three errors that this PR corrects:
+  1. `repository_url` was set to `https://www.github.com/etunni/kurale` (with `www.` prefix). Corrected to `https://github.com/etunni/kurale` — the canonical URL form used elsewhere in google/fonts.
+  2. `source_file` was set to `fonts/ttf/Kurale-Regular.ttf`. The actual path at upstream commit `08bf7684d` is `fonts/Kurale-Regular.ttf` (no `ttf/` subdirectory). Corrected.
+  3. `branch` was set to `main`. The upstream `etunni/kurale` repo's default branch is `master`. Corrected.
+
+  After the fixes, the source block reads:
+
+  ```
+  source {
+    repository_url: "https://github.com/etunni/kurale"
+    commit: "08bf7684d57c6faacff84e6c5ab31df6b7beae18"
+    files {
+      source_file: "fonts/Kurale-Regular.ttf"
+      dest_file: "Kurale-Regular.ttf"
+    }
+    files {
+      source_file: "OFL.txt"
+      dest_file: "OFL.txt"
+    }
+    branch: "master"
+  }
+  ```
+
+  ### Provenance caveat
+
+  The shipping Kurale-Regular.ttf in google/fonts is **NOT byte-identical** to upstream `08bf7684d:fonts/Kurale-Regular.ttf`:
+
+  | Source | size | md5 | Version string |
+  |---|---|---|---|
+  | upstream `08bf7684d:fonts/Kurale-Regular.ttf` | 250224 | `7e63a40022b4b92268acd6a84d703a06` | `Version 2.000` |
+  | shipping `ofl/kurale/Kurale-Regular.ttf` | 265304 | `2636a6a61057bb6c505d14b3762be5e1` | `Version 2.000; ttfautohint (v1.8.4.7-5d5b)` |
+
+  Simon ran `ttfautohint` locally on the upstream binary and committed the autohinted result to google/fonts without pushing the rebuilt binary upstream. The recorded `commit` therefore identifies the *source state* (which is consistent with the override `config.yaml`'s `Kurale.glyphs` source) but does NOT reproduce the shipping binary directly — a `ttfautohint v1.8.4.7-5d5b` post-process is required.
+
+  This is acceptable for source-provenance tracking since the override `config.yaml` documents the buildable state. A future improvement would be to either (a) push the autohinted binary upstream, or (b) record the ttfautohint invocation alongside the source block.