Bump fonttools[woff] from 4.23.0 to 4.46.0

[dependabot]

Bumps fonttools[woff] from 4.23.0 to 4.46.0.

Release notes

Sourced from fonttools[woff]'s releases.

4.46.0

• [featureVars] Allow to register the same set of substitution rules to multiple features. The addFeatureVariations function can now take a list of featureTags; similarly, the lib key 'com.github.fonttools.varLib.featureVarsFeatureTag' can now take a comma-separateed string of feature tags (e.g. "salt,ss01") instead of a single tag (#3360).
• [featureVars] Don't overwrite GSUB FeatureVariations, but append new records to it for features which are not already there. But raise VarLibError if the feature tag already has feature variations associated with it (#3363).
• [varLib] Added addGSUBFeatureVariations function to add GSUB Feature Variations to an existing variable font from rules defined in a DesignSpace document (#3362).
• [varLib.interpolatable] Various bugfixes and rendering improvements. In particular, a new test for "underweight" glyphs. The new test reports quite a few false-positives though. Please send feedback.

4.45.1

• [varLib.interpolatable] Various bugfixes and improvements, better reporting, reduced false positives.
• [ttGlyphSet] Added option to not recalculate glyf bounds (#3348).

4.45.0

• [varLib.interpolator] Vastly improved algorithms. Also available now is --pdf and --html options to generate a PDF or HTML report of the interpolation issues.
  The PDF/HTML report showcases the problematic masters, the interpolated broken glyph, as well as the proposed fixed version.

4.44.3

• [subset] Only prune codepage ranges for OS/2.version >= 1, ignore otherwise (#3334).
• [instancer] Ensure hhea vertical metrics stay in sync with OS/2 ones after instancing MVAR table containing 'hasc', 'hdsc' or 'hlgp' tags (#3297).

4.44.2

• [glyf] Have Glyph.recalcBounds skip empty components (base glyph with no contours) when computing the bounding box of composite glyphs. This simply restores the existing behavior before some changes were introduced in fonttools 4.44.0 (#3333).

4.44.1

• [feaLib] Ensure variable mark anchors are deep-copied while building since they get modified in-place and later reused (#3330).
• [OS/2|subset] Added method to recalcCodePageRanges to OS/2 table class; added --prune-codepage-ranges to fonttools subset command (#3328, #2607).

NOTE: this release was "yanked" from PyPI because it introduced a regression: fonttools/fonttools#3334

4.44.0

• [instancer] Recalc OS/2 AvgCharWidth after instancing if default changes (#3317).
• [otlLib] Make ClassDefBuilder class order match varLib.merger's, i.e. large classes first, then glyph lexicographic order (#3321, #3324).
• [instancer] Allow not specifying any of min:default:max values and let be filled up with fvar's values (#3322, #3323).
• [instancer] When running --update-name-table ignore axes that have no STAT axis values (#3318, #3319).
• [Debg] When dumping to ttx, write the embedded JSON as multi-line string with indentation (92cbfee0d).
• [varStore] Handle > 65535 items per encoding by splitting VarData subtable (#3310).
• [subset] Handle null-offsets in MarkLigPos subtables.
• [subset] Keep East Asian spacing fatures vhal, halt, chws, vchw by default (#3305).
• [instancer.solver] Fixed case where axisDef < lower and upper < axisMax (#3304).
• [glyf] Speed up compilation, mostly around recalcBounds (#3301).
• [varLib.interpolatable] Speed it up when working on variable fonts, plus various micro-optimizations (#3300).
• Require unicodedata2 >= 15.1.0 when installed with 'unicode' extra, contains UCD 15.1.

4.43.1

• [EBDT] Fixed TypeError exception in _reverseBytes method triggered when dumping some bitmap fonts with ttx -z bitwise option (#3162).
• [v/hhea] Fixed UnboundLocalError exception in recalc method when no vmtx or hmtx tables are present (#3290).
• [bezierTools] Fixed incorrectly typed cython local variable leading to TypeError when calling calcQuadraticArcLength (#3288).
• [feaLib/otlLib] Better error message when building Coverage table with missing glyph (#3286).

4.43.0

• [subset] Set up lxml XMLParser(resolve_entities=False) when parsing OT-SVG documents to prevent XML External Entity (XXE) attacks (9f61271dc): https://codeql.github.com/codeql-query-help/python/py-xxe/
• [varLib.iup] Added workaround for a Cython bug in iup_delta_optimize that was leading to IUP tolerance being incorrectly initialised, resulting in sub-optimal deltas (60126435d, cython/cython#5732).

... (truncated)

Changelog

Sourced from fonttools[woff]'s changelog.

4.46.0 (released 2023-12-02)

• [featureVars] Allow to register the same set of substitution rules to multiple features. The addFeatureVariations function can now take a list of featureTags; similarly, the lib key 'com.github.fonttools.varLib.featureVarsFeatureTag' can now take a comma-separateed string of feature tags (e.g. "salt,ss01") instead of a single tag (#3360).
• [featureVars] Don't overwrite GSUB FeatureVariations, but append new records to it for features which are not already there. But raise VarLibError if the feature tag already has feature variations associated with it (#3363).
• [varLib] Added addGSUBFeatureVariations function to add GSUB Feature Variations to an existing variable font from rules defined in a DesignSpace document (#3362).
• [varLib.interpolatable] Various bugfixes and rendering improvements. In particular, a new test for "underweight" glyphs. The new test reports quite a few false-positives though. Please send feedback.

4.45.1 (released 2023-11-23)

• [varLib.interpolatable] Various bugfixes and improvements, better reporting, reduced false positives.
• [ttGlyphSet] Added option to not recalculate glyf bounds (#3348).

4.45.0 (released 2023-11-20)

• [varLib.interpolatable] Vastly improved algorithms. Also available now is --pdf and --html options to generate a PDF or HTML report of the interpolation issues. The PDF/HTML report showcases the problematic masters, the interpolated broken glyph, as well as the proposed fixed version.

4.44.3 (released 2023-11-15)

• [subset] Only prune codepage ranges for OS/2.version >= 1, ignore otherwise (#3334).
• [instancer] Ensure hhea vertical metrics stay in sync with OS/2 ones after instancing MVAR table containing 'hasc', 'hdsc' or 'hlgp' tags (#3297).

4.44.2 (released 2023-11-14)

• [glyf] Have Glyph.recalcBounds skip empty components (base glyph with no contours) when computing the bounding box of composite glyphs. This simply restores the existing behavior before some changes were introduced in fonttools 4.44.0 (#3333).

4.44.1 (released 2023-11-14)

• [feaLib] Ensure variable mark anchors are deep-copied while building since they get modified in-place and later reused (#3330).

... (truncated)

Commits

• d38c2d5 Release 4.46.0
• 641884d Update NEWS.rst [skip ci]
• a7b4cc3 [NEWS] Update
• 6e14cda Merge pull request #3363 from fonttools/append-fea-vars
• e538b9c [featureVars_test] test appending records for new features
• 9994829 Merge pull request #3364 from fonttools/interpolatable-remake
• 6358b47 [featureVars] don't overwrite FeatureVariations, append new records
• 4c527e6 Merge pull request #3362 from fonttools/add-gsub-feavars-api
• 0db0b35 Fixup
• e225847 Another try
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #118.