Bump fonttools from 4.28.1 to 4.44.0

[dependabot]

Bumps fonttools from 4.28.1 to 4.44.0.

Release notes

Sourced from fonttools's releases.

4.44.0

• [instancer] Recalc OS/2 AvgCharWidth after instancing if default changes (#3317).
• [otlLib] Make ClassDefBuilder class order match varLib.merger's, i.e. large classes first, then glyph lexicographic order (#3321, #3324).
• [instancer] Allow not specifying any of min:default:max values and let be filled up with fvar's values (#3322, #3323).
• [instancer] When running --update-name-table ignore axes that have no STAT axis values (#3318, #3319).
• [Debg] When dumping to ttx, write the embedded JSON as multi-line string with indentation (92cbfee0d).
• [varStore] Handle > 65535 items per encoding by splitting VarData subtable (#3310).
• [subset] Handle null-offsets in MarkLigPos subtables.
• [subset] Keep East Asian spacing fatures vhal, halt, chws, vchw by default (#3305).
• [instancer.solver] Fixed case where axisDef < lower and upper < axisMax (#3304).
• [glyf] Speed up compilation, mostly around recalcBounds (#3301).
• [varLib.interpolatable] Speed it up when working on variable fonts, plus various micro-optimizations (#3300).
• Require unicodedata2 >= 15.1.0 when installed with 'unicode' extra, contains UCD 15.1.

4.43.1

• [EBDT] Fixed TypeError exception in _reverseBytes method triggered when dumping some bitmap fonts with ttx -z bitwise option (#3162).
• [v/hhea] Fixed UnboundLocalError exception in recalc method when no vmtx or hmtx tables are present (#3290).
• [bezierTools] Fixed incorrectly typed cython local variable leading to TypeError when calling calcQuadraticArcLength (#3288).
• [feaLib/otlLib] Better error message when building Coverage table with missing glyph (#3286).

4.43.0

• [subset] Set up lxml XMLParser(resolve_entities=False) when parsing OT-SVG documents to prevent XML External Entity (XXE) attacks (9f61271dc): https://codeql.github.com/codeql-query-help/python/py-xxe/
• [varLib.iup] Added workaround for a Cython bug in iup_delta_optimize that was leading to IUP tolerance being incorrectly initialised, resulting in sub-optimal deltas (60126435d, cython/cython#5732).
• [varLib] Added new command-line entry point fonttools varLib.avar to add an avar table to an existing VF from axes mappings in a .designspace file (0a3360e52).
• [instancer] Fixed bug whereby no longer used variation regions were not correctly pruned after VarData optimization (#3268).
• Added support for Python 3.12 (#3283).

4.42.1

• [t1Lib] Fixed several Type 1 issues (#3238, #3240).
• [otBase/packer] Allow sharing tables reached by different offset sizes (#3241, #3236, 457f11c2).
• [varLib/merger] Fix Cursive attachment merging error when all anchors are NULL (#3248, #3247).
• [ttLib] Fixed warning when calling addMultilingualName and ttFont parameter was not passed on to findMultilingualName (#3253).

4.42.0

• [varLib] Use sentinel value 0xFFFF to mark a glyph advance in hmtx/vmtx as non participating, allowing sparse masters to contain glyphs for variation purposes other than {H,V}VAR (#3235).
• [varLib/cff] Treat empty glyphs in non-default masters as missing, thus not participating in CFF2 delta computation, similarly to how varLib already treats them for gvar (#3234).
• Added varLib.avarPlanner script to deduce 'correct' avar v1 axis mappings based on glyph average weights (#3223).

4.41.1

• [subset] Fixed perf regression in v4.41.0 by making NameRecordVisitor only visit tables that do contain nameID references (#3213, #3214).
• [varLib.instancer] Support instancing fonts containing null ConditionSet offsets in FeatureVariationRecords (#3211, #3212).
• [statisticsPen] Report font glyph-average weight/width and font-wide slant.
• [fontBuilder] Fixed head.created date incorrectly set to 0 instead of the current timestamp, regression introduced in v4.40.0 (#3210).
• [varLib.merger] Support sparse CursivePos masters (#3209).

4.41.0

• [fontBuilder] Fixed bug in setupOS2 with default panose attribute incorrectly being set to a dict instead of a Panose object (#3201).
• [name] Added method to removeUnusedNameRecords in the user range (#3185).
• [varLib.instancer] Fixed issue with L4 instancing (moving default) (#3179).
• [cffLib] Use latin1 so we can roundtrip non-ASCII in {Full,Font,Family}Name (#3202).

... (truncated)

Changelog

Sourced from fonttools's changelog.

4.44.0 (released 2023-11-03)

• [instancer] Recalc OS/2 AvgCharWidth after instancing if default changes (#3317).
• [otlLib] Make ClassDefBuilder class order match varLib.merger's, i.e. large classes first, then glyph lexicographic order (#3321, #3324).
• [instancer] Allow not specifying any of min:default:max values and let be filled up with fvar's values (#3322, #3323).
• [instancer] When running --update-name-table ignore axes that have no STAT axis values (#3318, #3319).
• [Debg] When dumping to ttx, write the embedded JSON as multi-line string with indentation (92cbfee0d).
• [varStore] Handle > 65535 items per encoding by splitting VarData subtable (#3310).
• [subset] Handle null-offsets in MarkLigPos subtables.
• [subset] Keep East Asian spacing fatures vhal, halt, chws, vchw by default (#3305).
• [instancer.solver] Fixed case where axisDef < lower and upper < axisMax (#3304).
• [glyf] Speed up compilation, mostly around recalcBounds (#3301).
• [varLib.interpolatable] Speed it up when working on variable fonts, plus various micro-optimizations (#3300).
• Require unicodedata2 >= 15.1.0 when installed with 'unicode' extra, contains UCD 15.1.

4.43.1 (released 2023-10-06)

• [EBDT] Fixed TypeError exception in _reverseBytes method triggered when dumping some bitmap fonts with ttx -z bitwise option (#3162).
• [v/hhea] Fixed UnboundLocalError exception in recalc method when no vmtx or hmtx tables are present (#3290).
• [bezierTools] Fixed incorrectly typed cython local variable leading to TypeError when calling calcQuadraticArcLength (#3288).
• [feaLib/otlLib] Better error message when building Coverage table with missing glyph (#3286).

4.43.0 (released 2023-09-29)

• [subset] Set up lxml XMLParser(resolve_entities=False) when parsing OT-SVG documents to prevent XML External Entity (XXE) attacks (9f61271dc): https://codeql.github.com/codeql-query-help/python/py-xxe/
• [varLib.iup] Added workaround for a Cython bug in iup_delta_optimize that was leading to IUP tolerance being incorrectly initialised, resulting in sub-optimal deltas (60126435d, cython/cython#5732).
• [varLib] Added new command-line entry point fonttools varLib.avar to add an avar table to an existing VF from axes mappings in a .designspace file (0a3360e52).
• [instancer] Fixed bug whereby no longer used variation regions were not correctly pruned after VarData optimization (#3268).
• Added support for Python 3.12 (#3283).

4.42.1 (released 2023-08-20)

... (truncated)

Commits

• 4c64709 Release 4.44.0
• 5c6fe71 Update NEWS.rst [skip ci]
• db7d9ea Merge pull request #3325 from fonttools/unicode-15-1
• e1b0dab [ci] test on pypy3.9
• 6d43bd7 [setup.py] require unicodedata2>=15.1.0 for Unicode 15.1
• 53e71f9 Merge pull request #3309 from fonttools/pyup-scheduled-update-2023-10-23
• 335a1e5 re-run black v23.10 on all .py files
• d210cc5 requirements.txt: tell pyup bot to keep scipy pinned for py3.8
• 74da89b Merge pull request #3317 from fonttools/instantiate-avgcharwidth
• 71e991b Fixup expectations
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (2f93ee3) 94.45% compared to head (824a419) 94.86%.
Report is 2 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master      #77      +/-   ##
==========================================
+ Coverage   94.45%   94.86%   +0.41%     
==========================================
  Files           3        3              
  Lines         721      721              
  Branches      178      178              
==========================================
+ Hits          681      684       +3     
+ Misses         21       19       -2     
+ Partials       19       18       -1     

Flag	Coverage Δ
unittests	94.86% <ø> (+0.41%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

see 1 file with indirect coverage changes

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[dependabot]

Superseded by #79.