[fix](deps) change lzo download link

[morningman]

the old one is invalid

[morningman]

run buildall

[hello-stephen]

Thank you for your contribution to Apache Doris.
Don't know what should be done next? See How to process your PR.

Please clearly describe your PR:

1. What problem was fixed (it's best to include specific error reporting information). How it was fixed.
2. Which behaviors were modified. What was the previous behavior, what is it now, why was it modified, and what possible impacts might there be.
3. What features were added. Why was this function added?
4. Which code was refactored and why was this part of the code refactored?
5. Which functions were optimized and what is the difference before and after the optimization?

[hello-stephen]

BE UT Coverage Report

Increment line coverage 🎉

Increment coverage report
Complete coverage report

Category	Coverage
Function Coverage	53.93% (20955/38855)
Line Coverage	37.49% (198619/529763)
Region Coverage	33.78% (155649/460771)
Branch Coverage	34.78% (67773/194875)

[hello-stephen]

BE Regression && UT Coverage Report

Increment line coverage 100% (0/0) 🎉

Increment coverage report
Complete coverage report

Category	Coverage
Function Coverage	73.80% (28082/38054)
Line Coverage	57.73% (305058/528407)
Region Coverage	54.74% (254664/465186)
Branch Coverage	56.38% (110288/195601)

[morningman]

/review

[github-actions]

OpenCode automated review failed and did not complete.

Error: Error: Token refresh failed: 401
Workflow run: https://github.com/apache/doris/actions/runs/26679173876

Please inspect the workflow logs and rerun the review after the underlying issue is resolved.

[morningman]

/review

[github-actions]

No blocking issues found. The PR replaces the LZO2 archive URL with the upstream oberhumer download URL; the new URL is reachable in this runner and the downloaded content matches the existing MD5 . The old fossies URL returns 401 here, so the change addresses the dependency download failure without changing the selected archive.

Critical checkpoint conclusions:

• Goal and proof: The goal is to fix the LZO2 dependency download link. The URL fetch and checksum verification prove the new link supplies the same archive.
• Scope: The change is minimal and focused: one URL line, with name/source/checksum unchanged.
• Concurrency: Not applicable; this is build/dependency metadata only.
• Lifecycle/static initialization: Not applicable.
• Configuration: No runtime configuration added or changed.
• Compatibility/storage/protocol: No incompatible storage, function symbol, or FE-BE protocol change.
• Parallel code paths: No parallel Doris runtime paths are affected; this only changes third-party source acquisition.
• Special conditionals: None added.
• Test coverage: No code tests are needed for a URL-only dependency fix; I manually verified URL reachability and MD5 checksum.
• Test results: No regression files are involved.
• Observability: Not applicable.
• Transaction/persistence/data writes: Not applicable.
• FE-BE variables: Not applicable.
• Performance: Not applicable beyond dependency download reliability.
• User focus: No additional user-provided review focus was specified.

[github-actions]

No blocking issues found. The PR replaces the LZO2 archive URL with the upstream oberhumer download URL; the new URL is reachable in this runner and the downloaded content matches the existing MD5 39d3f3f9c55c87b1e5d6888e1420f4b5. The old fossies URL returns 401 here, so the change addresses the dependency download failure without changing the selected archive.

Critical checkpoint conclusions:

• Goal and proof: The goal is to fix the LZO2 dependency download link. The URL fetch and checksum verification prove the new link supplies the same archive.
• Scope: The change is minimal and focused: one URL line, with name/source/checksum unchanged.
• Concurrency: Not applicable; this is build/dependency metadata only.
• Lifecycle/static initialization: Not applicable.
• Configuration: No runtime configuration added or changed.
• Compatibility/storage/protocol: No incompatible storage, function symbol, or FE-BE protocol change.
• Parallel code paths: No parallel Doris runtime paths are affected; this only changes third-party source acquisition.
• Special conditionals: None added.
• Test coverage: No code tests are needed for a URL-only dependency fix; I manually verified URL reachability and MD5 checksum.
• Test results: No regression .out files are involved.
• Observability: Not applicable.
• Transaction/persistence/data writes: Not applicable.
• FE-BE variables: Not applicable.
• Performance: Not applicable beyond dependency download reliability.
• User focus: No additional user-provided review focus was specified.