From 9043d5ce793302222e6908a2931252592c27e359 Mon Sep 17 00:00:00 2001
From: oech3 <79379754+oech3@users.noreply.github.com>
Date: Mon, 2 Nov 2026 10:30:32 +0900
Subject: [PATCH] fetch-gnu.sh: Use thirdparty-artifacts & verify checksum

---
 util/fetch-gnu.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/util/fetch-gnu.sh b/util/fetch-gnu.sh
index f1d92c6..c8ee98e 100755
--- a/util/fetch-gnu.sh
+++ b/util/fetch-gnu.sh
@@ -14,4 +14,7 @@
 # (init.sh + init.cfg + the extensionless test scripts), which
 # util/run-gnu-testsuite.sh drives against the Rust grep binary.
 ver="3.12"
-curl -L "https://ftp.gnu.org/gnu/grep/grep-${ver}.tar.xz" | tar --strip-components=1 -xJf -
+sha256="2649b27c0e90e632eadcd757be06c6e9a4f48d941de51e7c0f83ff76408a07b9"
+curl -fsSL "https://github.com/uutils/thirdparty-artifacts/releases/download/grep-${ver}/grep-${ver}.tar.xz" -o grep.tar.xz
+echo $sha256 grep.tar.xz | sha256sum -c
+tar --strip-components=1 -xJf grep.tar.xz