Use https:// instead of http:// in bundle_onelab.sh
Once https-version is supported by https://onelab.info, all downloads by 'curl -O http://...' can be set to 'curl -O https://...' in this file: https://gitlab.onelab.info/doc/website/-/blob/master/bundle_onelab.sh I have seen https://onelab.info, https://gmsh.info and https://getdp.info are all existing. This may improve security.