CVS commit: pkgsrc/fonts/py-fonttools

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Mon Sep 28 15:31:37 UTC 2026

Modified Files:
        pkgsrc/fonts/py-fonttools: Makefile distinfo

Log Message:
py-fonttools: update to 4.66.0.

4.66.0 (released 2026-09-23)
----------------------------

- Drop support for EOL Python 3.10; fontTools now requires Python 3.11 or later.
  ``fontTools.misc.enumTools`` now only re-exports ``enum.StrEnum`` and is
  deprecated. Explicitly test and declare support for Python 3.15 (#4183, #4196).
- [unicodedata] Update the bundled script, script extension, block and
  bidi-mirroring tables to Unicode 18.0.0, and require ``unicodedata2`` 18.0.0
  when it is used (#4192, #4197).
- [feaLib] Support ``language`` statements listing multiple language tags, e.g.
  ``language AZE CRT;``, as Glyphs does and as proposed for the spec
  (adobe-type-tools/feature_file_workshops#8): the following rules and lookup
  references are registered under every listed language. ``dflt`` cannot be
  combined with other tags. ``LanguageStatement.language`` is still the first
  tag; all of them are in the new ``languages`` attribute (#4201, #4202).
- [feaLib] Fix lookups being dropped when a ``script``/``language`` pair is
  repeated within a feature block: the repeated statement replaced the language
  system's lookups with a fresh copy of the default ones (#4189).
- [feaLib] Raise ``FeatureLibError`` instead of ``UnboundLocalError`` when a
  ``STAT`` table block lacks ``ElidedFallbackName`` or ``ElidedFallbackNameID``
  (#3834, #4179).
- [cffLib] Always recompile the CFF2 ``VarStore`` when saving. Previously the
  bytes compiled by an earlier save were reused, so a CFF2 variable font that
  was saved and then modified in place, e.g. by the instancer, was written with
  a stale ``VarStore`` next to its updated charstrings (#4199).
- [ttLib] Support static ``VARC`` fonts that omit ``fvar`` while retaining
  ``gvar`` or CFF2 variation data for component-internal axes: hidden axes are
  addressed by index and ``gvar`` can compile, decompile and round-trip through
  TTX without ``fvar``, reading the axis count from a new ``axisCount``
  element (#4187, #4188).
- [ttLib] Fix drawing ``VARC`` components whose condition is negated
  (format 5), which raised ``AttributeError`` (#4191).
- [instancer] Fix ``VARC`` axis references left stale when removing an
  unrelated axis, reject pinning or restricting axes referenced by ``VARC``
  components, and stop culling avar2 ranges for component-internal variations,
  which can reach outside the font-level ranges (#4190, #4193).
- [bezierTools] Preserve exact endpoints in ``splitQuadraticAtT`` and
  ``splitCubicAtTC`` as well, like ``splitCubicAtT`` since 4.55.4
  (#3742, #4194).
- [bezierTools] Fix ``ZeroDivisionError`` in ``lineLineIntersections`` for
  collinear vertical lines; they are now treated as parallel like horizontal
  ones (#3515, #4181).
- [subset] ``pyftsubset`` now preserves the input font's flavor (WOFF, WOFF2)
  when ``--flavor`` is omitted, instead of writing uncompressed sfnt data under
  the same extension; pass ``--flavor=none`` to force uncompressed output
  (#3630, #4182).
- [merge] Report incompatible ``unitsPerEm`` values by name, with the input
  values, instead of a bare assertion (#2844, #4184).
- [designspaceLib] Fix the type annotation and documentation of
  ``DesignSpaceDocument.default``, which holds a ``SourceDescriptor``, not a
  source name (#2994, #4186).
- [ttLib.sfnt] Raise ``TTLibError`` instead of ``AssertionError`` for
  inconsistent WOFF table, metadata and private-data lengths, so the checks
  also hold under ``python -O`` (#4178).
- [misc.etree] Disable entity resolution altogether on lxml >= 5.0 as well:
  lxml's ``resolve_entities="internal"`` still fetched external parameter
  entities before lxml 6.1.3, so a crafted DTD could read local files into
  parsed XML content (#4195).
- [cmap] Bound the expansion of format 4 segments and format 12/13 groups when
  decompiling, like HarfBuzz does: groups are clamped to U+10FFFF, inverted or
  overlapping groups are skipped with a warning, and groups mapped to the
  missing glyph are not expanded. A crafted font could previously exhaust
  memory with a single group ending at 0xFFFFFFFF (#4204).
- [varLib.avar] Escape axis names and tags when ``varLib.avar.unbuild`` emits
  its designspace snippet, so a crafted font cannot inject markup (#4203).


To generate a diff of this commit:
cvs rdiff -u -r1.135 -r1.136 pkgsrc/fonts/py-fonttools/Makefile
cvs rdiff -u -r1.107 -r1.108 pkgsrc/fonts/py-fonttools/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/fonts/py-fonttools/Makefile
diff -u pkgsrc/fonts/py-fonttools/Makefile:1.135 pkgsrc/fonts/py-fonttools/Makefile:1.136
--- pkgsrc/fonts/py-fonttools/Makefile:1.135    Sun Sep 13 13:05:08 2026
+++ pkgsrc/fonts/py-fonttools/Makefile  Mon Sep 28 15:31:36 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.135 2026/09/13 13:05:08 wiz Exp $
+# $NetBSD: Makefile,v 1.136 2026/09/28 15:31:36 wiz Exp $
 
-DISTNAME=      fonttools-4.65.0
+DISTNAME=      fonttools-4.66.0
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    fonts python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=F/FontTools/}
@@ -19,9 +19,9 @@ DEPENDS+=     ${PYPKGPREFIX}-zopfli>=0.1.4:.
 
 PYTHON_VERSIONS_INCOMPATIBLE=  310 311
 
-# as of 4.63.0
+# as of 4.66.0
 # https://github.com/fonttools/fonttools/issues/3660
-# 8 failed, 4611 passed, 65 skipped, 2 xfailed, 29 warnings
+# 8 failed, 4898 passed, 66 skipped, 2 xfailed, 28 warnings
 
 SUBST_CLASSES+=                man
 SUBST_STAGE.man=       pre-configure

Index: pkgsrc/fonts/py-fonttools/distinfo
diff -u pkgsrc/fonts/py-fonttools/distinfo:1.107 pkgsrc/fonts/py-fonttools/distinfo:1.108
--- pkgsrc/fonts/py-fonttools/distinfo:1.107    Sun Sep 13 13:05:08 2026
+++ pkgsrc/fonts/py-fonttools/distinfo  Mon Sep 28 15:31:36 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.107 2026/09/13 13:05:08 wiz Exp $
+$NetBSD: distinfo,v 1.108 2026/09/28 15:31:36 wiz Exp $
 
-BLAKE2s (fonttools-4.65.0.tar.gz) = bce533376aff0a93a3023415134d5b2b3f67f839287e7f45bbcba12344aa2372
-SHA512 (fonttools-4.65.0.tar.gz) = d13c6ed76444f849b4202caa4e38ff1b50ffb470d2767562e43c6ef98eb418fa9467326abe1c4721144e1668af0ed0e4ad33af92c0938d799e6224c5a1afbab9
-Size (fonttools-4.65.0.tar.gz) = 3674467 bytes
+BLAKE2s (fonttools-4.66.0.tar.gz) = 55c6ee1097d46104bacef87952634babe581dcc4d4568d371ae9907fa0c26b01
+SHA512 (fonttools-4.66.0.tar.gz) = b34103dc27ede318d63f50f235fa3c9fed41f059d9ee24d707202e00faaa48b131abc55cee7a8506bc2f1dd3abf6a10002f7efe60363d22833a8eb798c09d741
+Size (fonttools-4.66.0.tar.gz) = 3692007 bytes