From: Felipe Correa da Silva Sanches <juca@members.fsf.org>
Date: Tue, 2 Jun 2026 09:45:28 +0000 (+0100)
Subject: Noto Sans Telugu UI: correct source provenance for fontc_crater build (REFRESH REQUIRED)
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=d9da016620e0734d9c8ccf4e58537b3fe540eb24;p=thirdparty%2Fgoogle%2Ffonts.git

Noto Sans Telugu UI: correct source provenance for fontc_crater build (REFRESH REQUIRED)

Repointed from the deprecated googlefonts/noto-fonts monorepo (sources removed) to the per-script Noto repo.
The declared source resolves at the new commit. This does NOT reproduce the
shipped binary (refresh_needed) -- a rebuild yields an updated font and needs
human QA before shipping. See upstream_info.md.

Repo:   https://github.com/googlefonts/noto-fonts -> https://github.com/notofonts/telugu
Commit: 1b5d974daaa002333b2a5a068d0a7f2d1121b3b7 -> 0d8cb2a9550d76f4349915664f1115ea4c42f4ed (2022-07-05)
Status: source resolves at new commit; rebuild REFRESHES the font (not byte-exact)
Confidence: High

Assisted by an AI agent (Claude Opus 4.8)
---

diff --git a/ofl/notosansteluguui/METADATA.pb b/ofl/notosansteluguui/METADATA.pb
index 1e56e5ff80..32e0eb332e 100644
--- a/ofl/notosansteluguui/METADATA.pb
+++ b/ofl/notosansteluguui/METADATA.pb
@@ -32,6 +32,6 @@ languages: "wbq_Telu"  # Waddar
 primary_script: "Telu"
 
 source {
-  repository_url: "https://github.com/googlefonts/noto-fonts"
-  commit: "1b5d974daaa002333b2a5a068d0a7f2d1121b3b7"
+  repository_url: "https://github.com/notofonts/telugu"
+  commit: "0d8cb2a9550d76f4349915664f1115ea4c42f4ed"
 }
diff --git a/ofl/notosansteluguui/upstream_info.md b/ofl/notosansteluguui/upstream_info.md
index aece399fdb..50695a42d8 100644
--- a/ofl/notosansteluguui/upstream_info.md
+++ b/ofl/notosansteluguui/upstream_info.md
@@ -25,3 +25,18 @@ The commit was verified by blob-hash comparison: the font binary blob hash at th
 ## Build Configuration (Override)
 
 An override `config.yaml` has been created in the google/fonts family directory, copied from `sources/config-sans-telugu.yaml` in the `notofonts/telugu` repository (the current per-script Noto repo). **Important caveat**: this config references the current notofonts/ per-script repo sources, which may produce a newer version than the binary currently shipped in google/fonts. The shipped binary was built from the older `googlefonts/noto-fonts` monorepo using a different build pipeline. This override config serves as a starting point for reproducible build attempts but is not expected to produce a byte-identical match.
+
+
+## Source-metadata correction (2026-06-02) — ⚠ REFRESH REQUIRED
+
+**Model**: Claude Opus 4.8
+
+fontc_crater reported a `missing source` failure for this family because the `repository_url` pointed at the deprecated `googlefonts/noto-fonts` monorepo, which no longer contains the Glyphs/glyphspackage sources (only built binaries). The sources now live in the per-script repo.
+
+Corrected the METADATA.pb source block:
+- repository_url: `https://github.com/googlefonts/noto-fonts` → `https://github.com/notofonts/telugu`
+- commit: `1b5d974daaa002333b2a5a068d0a7f2d1121b3b7` → `0d8cb2a9550d76f4349915664f1115ea4c42f4ed` (2022-07-05)
+
+The declared source is confirmed present at the new commit.
+
+**⚠ REFRESH REQUIRED — this does NOT reproduce the shipped binary.** The per-script Noto repos postdate the 2021-01-13 onboarding of the shipped binary, so the source now resolves and the family becomes buildable, but a rebuild produces an **updated** font, not the originally-shipped artifact. Before shipping any rebuild, a human must QA the output for reflow / vertical-metric / glyph-coverage / version differences. The original build provenance (the exact source + commit that produced the shipped binary) is not recoverable from the current upstream.