From: Felipe Correa da Silva Sanches <juca@members.fsf.org>
Date: Tue, 2 Jun 2026 09:45:26 +0000 (+0100)
Subject: Noto Sans Arabic UI: correct source provenance for fontc_crater build (REFRESH REQUIRED)
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=1e5f6e57656f7a6355edbb5f8a3d33ddca08fbd0;p=thirdparty%2Fgoogle%2Ffonts.git

Noto Sans Arabic UI: correct source provenance for fontc_crater build (REFRESH REQUIRED)

Repointed from the deprecated googlefonts/noto-fonts monorepo (sources removed) to the per-script Noto repo.
The declared source resolves at the new commit. This does NOT reproduce the
shipped binary (refresh_needed) -- a rebuild yields an updated font and needs
human QA before shipping. See upstream_info.md.

Repo:   https://github.com/googlefonts/noto-fonts -> https://github.com/notofonts/arabic
Commit: e30ce1b55b8f57a238edcf4bf906e6f3faeceef1 -> 78340846460d29a6d673bb2ae355e394a0d81a9d (2023-01-02)
Status: source resolves at new commit; rebuild REFRESHES the font (not byte-exact)
Confidence: High

Assisted by an AI agent (Claude Opus 4.8)
---

diff --git a/ofl/notosansarabicui/METADATA.pb b/ofl/notosansarabicui/METADATA.pb
index c78b80c216..3cbd69e8d6 100644
--- a/ofl/notosansarabicui/METADATA.pb
+++ b/ofl/notosansarabicui/METADATA.pb
@@ -109,6 +109,6 @@ languages: "zlm_Arab"  # Malay, Arabic
 primary_script: "Arab"
 
 source {
-  repository_url: "https://github.com/googlefonts/noto-fonts"
-  commit: "e30ce1b55b8f57a238edcf4bf906e6f3faeceef1"
+  repository_url: "https://github.com/notofonts/arabic"
+  commit: "78340846460d29a6d673bb2ae355e394a0d81a9d"
 }
diff --git a/ofl/notosansarabicui/upstream_info.md b/ofl/notosansarabicui/upstream_info.md
index c75ea4a12b..102d932e31 100644
--- a/ofl/notosansarabicui/upstream_info.md
+++ b/ofl/notosansarabicui/upstream_info.md
@@ -39,3 +39,18 @@ UI variant (tighter vertical metrics for Android/web). Binary from Nov 17 2020 p
 ## Build Configuration (Override)
 
 An override `config.yaml` has been created in the google/fonts family directory, copied from `sources/config-sans-arabic-ui.yaml` in the `notofonts/arabic` repository (the current per-script Noto repo). **Important caveat**: this config references the current notofonts/ per-script repo sources, which may produce a newer version than the binary currently shipped in google/fonts. The shipped binary was built from the older `googlefonts/noto-fonts` monorepo using a different build pipeline. This override config serves as a starting point for reproducible build attempts but is not expected to produce a byte-identical match.
+
+
+## Source-metadata correction (2026-06-02) — ⚠ REFRESH REQUIRED
+
+**Model**: Claude Opus 4.8
+
+fontc_crater reported a `missing source` failure for this family because the `repository_url` pointed at the deprecated `googlefonts/noto-fonts` monorepo, which no longer contains the Glyphs/glyphspackage sources (only built binaries). The sources now live in the per-script repo.
+
+Corrected the METADATA.pb source block:
+- repository_url: `https://github.com/googlefonts/noto-fonts` → `https://github.com/notofonts/arabic`
+- commit: `e30ce1b55b8f57a238edcf4bf906e6f3faeceef1` → `78340846460d29a6d673bb2ae355e394a0d81a9d` (2023-01-02)
+
+The declared source is confirmed present at the new commit.
+
+**⚠ REFRESH REQUIRED — this does NOT reproduce the shipped binary.** The per-script Noto repos postdate the 2021-01-13 onboarding of the shipped binary, so the source now resolves and the family becomes buildable, but a rebuild produces an **updated** font, not the originally-shipped artifact. Before shipping any rebuild, a human must QA the output for reflow / vertical-metric / glyph-coverage / version differences. The original build provenance (the exact source + commit that produced the shipped binary) is not recoverable from the current upstream.