Fix outdated freetype URL causing intermittent 502 error - #31341

Thank you for opening your first PR into Matplotlib!

If you have not heard from us in a week or so, please leave a new comment below and that should bring it to our attention. Most of our reviewers are volunteers and sometimes things fall through the cracks. We also ask that you please finish addressing any review comments on this PR and wait for it to be merged (or closed) before opening a new one, as it can be a valuable learning experience to go through the review process.

You can also join us on gitter for real-time discussion.

For details on testing, writing docs, and our review process, please see the developer guide.
Please let us know if (and how) you use AI, it will help us give you better feedback on your PR.

We strive to be a welcoming and open project. Please follow our Code of Conduct.

Updated the URL to use download-mirror.savannah.gnu.org as suggested.

It looks like the CI failure is on macOS with Python 3.14. Since this PR only updates the FreeType download URL, I believe the failure may be unrelated.
I also noticed some warnings about Node.js 20 deprecation in the workflow, which might need a separate update, but they seem unrelated to this change.
Please let me know if you'd like me to investigate further.

Please link some GNU supporting documentation for using this new url

Thanks for the suggestion!

The download-mirror.savannah.gnu.org URL is part of Savannah’s mirror infrastructure and serves the same official source files, but via a more reliable endpoint. This helps avoid intermittent failures like the 502 error seen with the original URL.

However, if preferred, I can switch to a more explicitly documented or commonly used source (for example, a GNU FTP or another officially referenced FreeType source) to make the origin clearer.

Please let me know your preference, and I’ll update the PR accordingly.

I just mean comment here with a link to where those docs are so we can verify

Thanks for the clarification!

I wasn’t able to find a Savannah page explicitly documenting "download-mirror.savannah.gnu.org", but GNU does distribute source packages via a network of official mirrors to improve availability and reliability.

For reference, the GNU FTP server mentions that archives are available from mirrors worldwide:
https://ftp.gnu.org/

The "download-mirror.savannah.gnu.org" endpoint follows this pattern by serving the same official source files through a mirror, helping avoid intermittent failures like the 502 error seen with the original URL.

Please let me know if you’d prefer switching to a primary GNU-hosted URL instead for clarity.

Without a listing of this as an official mirror, we will not be switching this source for supply chain security reasons. Yes it's on the savannah.gnu.org subdomain, but it's unclear how and how often this is updated.

Also, your last two comments here appear to be AI-written. Please do not use AI in comments, except for direct translation of your own words.

Got it, thanks.

I’ll avoid using the mirror then. I’ll update the PR with a proper official source.

If there’s a specific URL you prefer, let me know.

We need a URL that we can guarantee is provided by the official source. It's the job of the PR author to find that.

⏰ This pull request might be automatically closed in two weeks from now.

Thank you for your contribution to Matplotlib and for the effort you have put into this PR. This pull request does not yet meet the quality and clarity standards needed for an effective review. Project maintainers have limited time for code reviews, and our goal is to prioritize well-prepared contributions to keep Matplotlib maintainable.

Matplotlib maintainers cannot provide one-to-one guidance on this PR. However, if you ask focused, well-researched questions, a community member may be willing to help. 💬

To increase the chance of a productive review:

• Use the template provided in the PR description and fill it out as completely as possible, especially the summary and AI Disclosure sections.
• Make sure your PR conforms to our PR checklist.

As the author, you are responsible for driving this PR, which entails doing necessary background research as well as presenting its context and your thought process. If you are a new contributor, or do not know how to fulfill these requirements, we recommend that you familiarize yourself with Matplotlib's development conventions or engage with the community via our Discourse or one of our meetings before submitting code.

If you substantially improve this PR within two weeks, leave a comment and a team member may remove the status: autoclose candidate label and the PR stays open. Cosmetic changes or incomplete fixes will not be sufficient. Maintainers will assess improvements on their own schedule. Please do not ping (@) maintainers.

Got it, thanks.

I wasn’t able to find a direct official source URL for this version that doesn’t rely on mirrors or redirects, so I’ll close this for now.

Appreciate the guidance.