CVS commit: pkgsrc/fonts/harfbuzz

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Mon Oct 26 17:54:39 UTC 2026

Modified Files:
        pkgsrc/fonts/harfbuzz: Makefile.common distinfo

Log Message:
harfbuzz: update to 15.0.0.

Overview of changes leading to 15.0.0
Thursday, October 22, 2026
=====================================
- Support for the new tables and formats in the ISO Open Font Format (OFF) 5th
  edition is now enabled by default:
  * New tables and formats for 24-bit glyph indices (a.k.a. beyond-64k): the
    `GLYF`, `LOCA`, `GVAR`, `MAXP`, `HHEA`, `HMTX`, `VHEA`, and `VMTX` tables,
    `cmap` format 15, `VORG` version 2, `COLR` `PaintGlyph2`, the 24-bit
    `GSUB`, `GPOS`, `GDEF`, `BASE`, and `JSTF` formats, and extended TrueType
    Collection directories.
    A test font, `NotoSans-beyond64k.ttf`, which merges the Noto Sans fonts
    into a single font, can be found at:
    https://drive.google.com/file/d/1vMQI9mZMzfKIMHD96Iie40Oyo9NnnweH/view
  * Cubic curves in `GLYF` outlines.
  * The `DMAP` table, supported since 14.6.0.
- Support instancing axes not referenced by retained `VARC` data. The latest
  `VARC` test fonts can be found at:
  https://github.com/notofonts/noto-cjk-varco/releases/tag/v0.005
- The raster (`libharfbuzz-raster`), vector (`libharfbuzz-vector`), and GPU
  (`libharfbuzz-gpu`) libraries are no longer considered experimental.
  This means that the HarfBuzz API and ABI stability guarantees now apply to
  these libraries as well.
- Fix possible use-after-free in `hb_font_set_face()`, which now resets the
  font functions to the defaults for the new face. The function is now
  deprecated. Use `hb_font_create()` instead.
- Fix heap-buffer-overflow in `hb_font_set_variation()` after
  `hb_font_set_face()` switches to a face with more variation axes.
- Subsetting `CFF` and `CFF2` fonts whose subroutine calls are not preceded by
  an immediate subroutine number now fails instead of silently dropping the
  table, unless desubroutinizing.
- Overriding atomic operators at compile time is not supported anymore.
- Rewrite the number parser without Ragel, fixing various edge cases.
- Harden the experimental WebAssembly shaper against malicious fonts.
- Update the experimental Rust shaper (HarfRust) to 0.15, and the `fontations`
  font functions to read-fonts 0.46.
- Update the `kbts` shaping backend to `kb_text_shape` 2.28g, and support font
  variations in it.
- Various subsetting and instancing fixes, especially for `CFF2`, `COLR`, and
  variable layout tables.
- Various fixes to the raster and vector libraries.
- Various variable font fixes.
- Various fixes for malformed fonts.
- Various documentation fixes.
- Various build and CI fixes.

- Deprecated API:
  -hb_font_set_face()


To generate a diff of this commit:
cvs rdiff -u -r1.90 -r1.91 pkgsrc/fonts/harfbuzz/Makefile.common
cvs rdiff -u -r1.179 -r1.180 pkgsrc/fonts/harfbuzz/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/fonts/harfbuzz/Makefile.common
diff -u pkgsrc/fonts/harfbuzz/Makefile.common:1.90 pkgsrc/fonts/harfbuzz/Makefile.common:1.91
--- pkgsrc/fonts/harfbuzz/Makefile.common:1.90  Tue Oct  6 07:49:40 2026
+++ pkgsrc/fonts/harfbuzz/Makefile.common       Mon Oct 26 17:54:39 2026
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile.common,v 1.90 2026/10/06 07:49:40 adam Exp $
+# $NetBSD: Makefile.common,v 1.91 2026/10/26 17:54:39 wiz Exp $
 # used by fonts/harfbuzz-docs/Makefile
 # used by fonts/harfbuzz-icu/Makefile
 
-DISTNAME=      harfbuzz-14.6.0
+DISTNAME=      harfbuzz-15.0.0
 CATEGORIES=    fonts
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=harfbuzz/}
 GITHUB_RELEASE=        ${PKGVERSION_NOREV}

Index: pkgsrc/fonts/harfbuzz/distinfo
diff -u pkgsrc/fonts/harfbuzz/distinfo:1.179 pkgsrc/fonts/harfbuzz/distinfo:1.180
--- pkgsrc/fonts/harfbuzz/distinfo:1.179        Tue Oct  6 07:49:40 2026
+++ pkgsrc/fonts/harfbuzz/distinfo      Mon Oct 26 17:54:39 2026
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.179 2026/10/06 07:49:40 adam Exp $
+$NetBSD: distinfo,v 1.180 2026/10/26 17:54:39 wiz Exp $
 
-BLAKE2s (harfbuzz-14.6.0.tar.xz) = fc15425c96a972d9f1eb9e68107b036c289054eab8ed7f0ba95dc22c4826928e
-SHA512 (harfbuzz-14.6.0.tar.xz) = 085c7248a0b3eed4adb5259d7cd27a3a99c51cebf20fde0e0389bb7f517797562c2460430dc78758ce62264e008625893745618615bb124efad69bd8625100eb
-Size (harfbuzz-14.6.0.tar.xz) = 20295260 bytes
+BLAKE2s (harfbuzz-15.0.0.tar.xz) = 5f6210dc56f0516478d85c2d4ee67b0ae91f7cfcc0b439ee9189125ece20e7f0
+SHA512 (harfbuzz-15.0.0.tar.xz) = 5a0e4f446d47c56f1a7eec0890d6c4dee036ebde398bfb372d883004737518621a7167a368384b411b67920c0a8807e74517574929b0982ba0fd72509ed68d19
+Size (harfbuzz-15.0.0.tar.xz) = 20396372 bytes
 SHA1 (patch-src_meson.build) = 5b46f9933d5dea1f842fccf63eb92faae1f7c90f
 SHA1 (patch-util_meson.build) = 22c427472e3e1edd1cb6e3c9da0435da46e31e15