- fix build with nss 3.15.x
- updated harfbuz BR
- TODO: fix hafrbuzz-icu linking