There's a merged pull request on the void-packages repository

harfbuzz: update to 2.5.2
https://github.com/void-linux/void-packages/pull/12686
Description: The .bz2 is no longer available.