CVS commit: pkgsrc/fonts/py-fonttools

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: pkgsrc/fonts/py-fonttools
From: "Adam Ciarcinski" <adam%netbsd.org@localhost>
Date: Thu, 3 Sep 2026 07:02:00 +0000

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Sep  3 07:02:00 UTC 2026

Modified Files:
        pkgsrc/fonts/py-fonttools: Makefile PLIST distinfo

Log Message:
py-fonttools: updated to 4.64.0

4.64.0 (released 2026-08-31)

- [feaLib] Fix name-table parsing for multibyte Mac encodings
- [ttProgram] Also indent TrueType assembly following ``IDEF[ ]``, like function
  definitions
- [subset] Keep East Asian spacing ``palt`` by default
- [subset] Bug fix for MATH table in which constructions for glyphs that are only
  added during MATH closure were kept
- [ufoLib] Make glyph-to-group construction accessible outside of lookup function
- [glyf] Use reverse glyph map for O(1) ``__setitem__`` membership
- [ttLib] Fix ``fixLookupOverFlows()`` reporting success when it had not promoted
  any lookup to Extension, masking unresolvable overflows.
- [ttLib] Add support for TrueType Collection version 2
- [ttLib] Pin a single head.modified timestamp across ``TTCollection.save``
- [ttLib] Give an actionable error when LookupList overflow is unrecoverable
- [ttLib] Add support for the AAT bitmap tables ``bhed``, ``bdat``, ``bloc``,
  variants of ``head``, ``EBDT``, ``EBLC`` used in legacy Apple bitmap-only fonts
- [ttLib] Check ``OS/2`` fsSelection/macStyle consistency against ``bhed`` as well
  as ``head``
- [misc.roundTools] Add types and documentation
- [varLib.instancer] Instance the ``BASE`` table
- [varLib.instancer] Fix Private-dict ``vsindex`` handling in ``instantiateCFF2``
- [varLib.instancer] Fix crash instancing CFF2 fonts without a VariationStore
- [sfnt] Raise ``TTLibError`` instead of ``AssertionError`` or ``struct.error``
  when reading a font truncated within the table directory or a table entry
- [misc.xmlWriter] Escape the ``]]>`` terminator inside CDATA sections, so an SVG
  document containing it can no longer smuggle markup past a TTX round trip
- [varLib.instancer] Implement avar2 partial-instancing: the avar version 2
  ItemVariationStore is adjusted so that remaining axes behave the same after
  limiting the designspace
- [feaLib] Add shorthand for the value at the default location in a variable
  scalar: ``(100 wght=900:120)`` means ``(wght=400:100 wght=900:120)`` when the
  wght default is 400
- [cmap] Raise ``TTLibError`` for a truncated or out-of-bounds cmap subtable
  header
- [designspaceLib] Reject conflicting duplicate inputs in axis maps instead of
  silently keeping the last one
- [designspaceLib] Read an empty ``<lib>`` element as an empty lib instead of
  raising ``IndexError``
- [colorLib] Raise a legible error when a COLRv0 layer, or a COLRv1 PaintGlyph or
  PaintColrGlyph, references a glyph missing from the glyphMap, instead of failing
  obscurely later
- [cmap] Don't drop subtables in unsupported formats when compiling or dumping a
  font read from binary
- [ttLib] Implement ``splitSinglePos`` so GPOS lookup type 1 offset overflows can
  be recovered by splitting the subtable
- [cmap] Round-trip empty Macintosh format 2 subtables
- [glyf] Raise ``TTLibError`` instead of ``RecursionError`` when ``recalcBounds()``
  hits a composite-component reference cycle
- [svgLib] Fix crash parsing an SVG path with consecutive closepath commands
  (``Z Z``)
- [ttLib] Fix ``DefaultTable`` type annotations
- [ttLib] Add support for the ``EBSC`` (Embedded Bitmap Scaling) table
- [svgLib] Suppress spurious close segments caused by floating-point drift in
  relative path commands
- [qu2cu] Fix ``TypeError`` in the Cython-compiled build when ``Qu2CuPen`` passes
  tuple splines
- [mort] Add semantic decompilation, TTX, and compilation support for
  rearrangement, contextual-substitution, ligature, and insertion subtables
- [svgLib] Start a new subpath at the just-closed subpath's initial point when a
  drawto command follows a closepath, per SVG spec
- [misc.filesystem] **SECURITY** Reject paths that resolve outside the filesystem
  root: a malicious UFO could read arbitrary files via ``..`` components in
  ``contents.plist``, and a crafted ``.ufoz`` could create files outside its
  temporary mirror
- [ttLib] **SECURITY** Sanitise glyph names used as filenames in EBDT/CBDT
  ``ttx -z extfile`` export, preventing arbitrary file writes from untrusted
  fonts
- [misc.etree] **SECURITY** Don't resolve external XML entities in ``XMLParser``
  when lxml is used, preventing XXE file disclosure on lxml < 5.0
- [subset] Fully prune ``VARC`` auxiliary data: collect and remap variation
  indices referenced by condition tables when subsetting the ``MultiVarStore``,
  and drop the ``AxisIndicesList``, ``ConditionList``, and ``MultiVarStore``
  when they end up empty


To generate a diff of this commit:
cvs rdiff -u -r1.133 -r1.134 pkgsrc/fonts/py-fonttools/Makefile
cvs rdiff -u -r1.61 -r1.62 pkgsrc/fonts/py-fonttools/PLIST
cvs rdiff -u -r1.105 -r1.106 pkgsrc/fonts/py-fonttools/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/fonts/py-fonttools/Makefile
diff -u pkgsrc/fonts/py-fonttools/Makefile:1.133 pkgsrc/fonts/py-fonttools/Makefile:1.134
--- pkgsrc/fonts/py-fonttools/Makefile:1.133    Sun Jun 28 15:41:20 2026
+++ pkgsrc/fonts/py-fonttools/Makefile  Thu Sep  3 07:02:00 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.133 2026/06/28 15:41:20 wiz Exp $
+# $NetBSD: Makefile,v 1.134 2026/09/03 07:02:00 adam Exp $
 
-DISTNAME=      fonttools-4.63.0
+DISTNAME=      fonttools-4.64.0
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    fonts python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=F/FontTools/}
@@ -10,14 +10,12 @@ HOMEPAGE=   https://github.com/fonttools/f
 COMMENT=       Library for manipulating fonts
 LICENSE=       mit
 
-TOOL_DEPENDS+= ${PYPKGPREFIX}-setuptools-[0-9]*:../../devel/py-setuptools
-TOOL_DEPENDS+= ${PYPKGPREFIX}-cython-[0-9]*:../../devel/py-cython
-TOOL_DEPENDS+= ${PYPKGPREFIX}-wheel-[0-9]*:../../devel/py-wheel
+TOOL_DEPENDS+= ${PYPKGPREFIX}-cython>=0:../../devel/py-cython
+TOOL_DEPENDS+= ${PYPKGPREFIX}-setuptools>=0:../../devel/py-setuptools
 DEPENDS+=      ${PYPKGPREFIX}-lxml>=4.0:../../textproc/py-lxml
 # woff
 DEPENDS+=      ${PYPKGPREFIX}-brotli>=1.0.1:../../archivers/py-brotli
 DEPENDS+=      ${PYPKGPREFIX}-zopfli>=0.1.4:../../archivers/py-zopfli
-TEST_DEPENDS+= ${PYPKGPREFIX}-test>=3.0:../../devel/py-test
 
 PYTHON_VERSIONS_INCOMPATIBLE=  310 311
 

Index: pkgsrc/fonts/py-fonttools/PLIST
diff -u pkgsrc/fonts/py-fonttools/PLIST:1.61 pkgsrc/fonts/py-fonttools/PLIST:1.62
--- pkgsrc/fonts/py-fonttools/PLIST:1.61        Sun May 17 15:55:21 2026
+++ pkgsrc/fonts/py-fonttools/PLIST     Thu Sep  3 07:02:00 2026
@@ -1,8 +1,15 @@
-@comment $NetBSD: PLIST,v 1.61 2026/05/17 15:55:21 wiz Exp $
+@comment $NetBSD: PLIST,v 1.62 2026/09/03 07:02:00 adam Exp $
 bin/fonttools-${PYVERSSUFFIX}
 bin/pyftmerge-${PYVERSSUFFIX}
 bin/pyftsubset-${PYVERSSUFFIX}
 bin/ttx-${PYVERSSUFFIX}
+${PYSITELIB}/${WHEEL_INFODIR}/METADATA
+${PYSITELIB}/${WHEEL_INFODIR}/RECORD
+${PYSITELIB}/${WHEEL_INFODIR}/WHEEL
+${PYSITELIB}/${WHEEL_INFODIR}/entry_points.txt
+${PYSITELIB}/${WHEEL_INFODIR}/licenses/LICENSE
+${PYSITELIB}/${WHEEL_INFODIR}/licenses/LICENSE.external
+${PYSITELIB}/${WHEEL_INFODIR}/top_level.txt
 ${PYSITELIB}/fontTools/__init__.py
 ${PYSITELIB}/fontTools/__init__.pyc
 ${PYSITELIB}/fontTools/__init__.pyo
@@ -572,6 +579,9 @@ ${PYSITELIB}/fontTools/ttLib/tables/E_B_
 ${PYSITELIB}/fontTools/ttLib/tables/E_B_L_C_.py
 ${PYSITELIB}/fontTools/ttLib/tables/E_B_L_C_.pyc
 ${PYSITELIB}/fontTools/ttLib/tables/E_B_L_C_.pyo
+${PYSITELIB}/fontTools/ttLib/tables/E_B_S_C_.py
+${PYSITELIB}/fontTools/ttLib/tables/E_B_S_C_.pyc
+${PYSITELIB}/fontTools/ttLib/tables/E_B_S_C_.pyo
 ${PYSITELIB}/fontTools/ttLib/tables/F_F_T_M_.py
 ${PYSITELIB}/fontTools/ttLib/tables/F_F_T_M_.pyc
 ${PYSITELIB}/fontTools/ttLib/tables/F_F_T_M_.pyo
@@ -695,9 +705,18 @@ ${PYSITELIB}/fontTools/ttLib/tables/_a_n
 ${PYSITELIB}/fontTools/ttLib/tables/_a_v_a_r.py
 ${PYSITELIB}/fontTools/ttLib/tables/_a_v_a_r.pyc
 ${PYSITELIB}/fontTools/ttLib/tables/_a_v_a_r.pyo
+${PYSITELIB}/fontTools/ttLib/tables/_b_d_a_t.py
+${PYSITELIB}/fontTools/ttLib/tables/_b_d_a_t.pyc
+${PYSITELIB}/fontTools/ttLib/tables/_b_d_a_t.pyo
 ${PYSITELIB}/fontTools/ttLib/tables/_b_g_c_l.py
 ${PYSITELIB}/fontTools/ttLib/tables/_b_g_c_l.pyc
 ${PYSITELIB}/fontTools/ttLib/tables/_b_g_c_l.pyo
+${PYSITELIB}/fontTools/ttLib/tables/_b_h_e_d.py
+${PYSITELIB}/fontTools/ttLib/tables/_b_h_e_d.pyc
+${PYSITELIB}/fontTools/ttLib/tables/_b_h_e_d.pyo
+${PYSITELIB}/fontTools/ttLib/tables/_b_l_o_c.py
+${PYSITELIB}/fontTools/ttLib/tables/_b_l_o_c.pyc
+${PYSITELIB}/fontTools/ttLib/tables/_b_l_o_c.pyo
 ${PYSITELIB}/fontTools/ttLib/tables/_b_s_l_n.py
 ${PYSITELIB}/fontTools/ttLib/tables/_b_s_l_n.pyc
 ${PYSITELIB}/fontTools/ttLib/tables/_b_s_l_n.pyo
@@ -1028,11 +1047,4 @@ ${PYSITELIB}/fontTools/voltLib/parser.py
 ${PYSITELIB}/fontTools/voltLib/voltToFea.py
 ${PYSITELIB}/fontTools/voltLib/voltToFea.pyc
 ${PYSITELIB}/fontTools/voltLib/voltToFea.pyo
-${PYSITELIB}/${WHEEL_INFODIR}/METADATA
-${PYSITELIB}/${WHEEL_INFODIR}/RECORD
-${PYSITELIB}/${WHEEL_INFODIR}/WHEEL
-${PYSITELIB}/${WHEEL_INFODIR}/entry_points.txt
-${PYSITELIB}/${WHEEL_INFODIR}/licenses/LICENSE
-${PYSITELIB}/${WHEEL_INFODIR}/licenses/LICENSE.external
-${PYSITELIB}/${WHEEL_INFODIR}/top_level.txt
 man/man1/ttx-${PYVERSSUFFIX}.1

Index: pkgsrc/fonts/py-fonttools/distinfo
diff -u pkgsrc/fonts/py-fonttools/distinfo:1.105 pkgsrc/fonts/py-fonttools/distinfo:1.106
--- pkgsrc/fonts/py-fonttools/distinfo:1.105    Sun May 17 15:55:21 2026
+++ pkgsrc/fonts/py-fonttools/distinfo  Thu Sep  3 07:02:00 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.105 2026/05/17 15:55:21 wiz Exp $
+$NetBSD: distinfo,v 1.106 2026/09/03 07:02:00 adam Exp $
 
-BLAKE2s (fonttools-4.63.0.tar.gz) = 4f8474451dc2acdb175a0af539f96b18ee121fbafde2dcd36e01fc72995534dd
-SHA512 (fonttools-4.63.0.tar.gz) = e2bde6283aa2c88b0cef56557d1ef7cebbdf14abfdbde2a1cea6b4aba79a6d920c8eef2844d57b4d9db0b2647fa130f5f08cae62a71be9c9cbc2c95e6e52c081
-Size (fonttools-4.63.0.tar.gz) = 3597189 bytes
+BLAKE2s (fonttools-4.64.0.tar.gz) = f4b74c9badd51db5d293a13340b1c2018b9a6e59f7e4a90471e6783c793a7c6a
+SHA512 (fonttools-4.64.0.tar.gz) = 9414fd480b81cf7ad4b963ada3389011dff1549d9ae888b02d293769a18a3d7fcb7c99f6856038a13aa6057bc6898e096958dd7cb475b38007ce05a041957516
+Size (fonttools-4.64.0.tar.gz) = 3664266 bytes

Prev by Date: CVS commit: pkgsrc/print/py-weasyprint
Next by Date: CVS commit: pkgsrc/doc
Previous by Thread: CVS commit: pkgsrc/print/py-weasyprint
Next by Thread: CVS commit: pkgsrc/doc
Indexes:

Home | Main Index | Thread Index | Old Index