diff --git a/harfbuzz/.signature b/harfbuzz/.signature
index 125ad0ff7..79bdcc01c 100644
--- a/harfbuzz/.signature
+++ b/harfbuzz/.signature
@@ -1,5 +1,5 @@
 untrusted comment: verify with /etc/ports/opt.pub
-RWSE3ohX2g5d/WbY5aQRZLanAz7wXFIoPmLYLwdT30+n0UMr1XMXNrIho7JwXgNghMAvaLq6UgOoGFGm3LZ2ITGPpqAWtQ2qkQQ=
-SHA256 (Pkgfile) = 701cca1d47d4e486575d8bf70fc34518eb5dc75ccc017ec264d003c34eedd0a1
+RWSE3ohX2g5d/WOxy2e/HK8oZtJYmMXbQypZv9WAszUQ+2SDpRJD2vwOVVGOFIilhh5qefSmkwrv8j7GUvhnys7Ids8cXY5kmg8=
+SHA256 (Pkgfile) = c8b3896ad4fe54e0087fe04eebdc987dd936260f7c535e8b055815936016242d
 SHA256 (.footprint) = 3abd18c02f8fda78b57776967466fc57b90176c81a6ee9f5f35677181fe1c49d
-SHA256 (harfbuzz-3.1.2.tar.gz) = c27d2640e70e95bdbc2fbeca2f9cc212ee583da1149c9f6dacf1316217652e56
+SHA256 (harfbuzz-3.1.2.tar.xz) = 4056b1541dd8bbd8ec29207fe30e568805c0705515632d7fec53a94399bc7945
diff --git a/harfbuzz/Pkgfile b/harfbuzz/Pkgfile
index 2fb62587b..0fa1e7e7f 100644
--- a/harfbuzz/Pkgfile
+++ b/harfbuzz/Pkgfile
@@ -7,7 +7,7 @@
 name=harfbuzz
 version=3.1.2
 release=1
-source=(https://github.com/harfbuzz/harfbuzz/archive/$version/$name-$version.tar.gz)
+source=(https://github.com/harfbuzz/harfbuzz/releases/download/$version/$name-$version.tar.xz)
 
 build() {
 	meson setup build $name-$version \