[renovate]

This PR contains the following updates:

Package	Update	Change
harfbuzz	major	14.5.0 → 15.0.0

---

Release Notes

harfbuzz/harfbuzz (harfbuzz)

v15.0.0

Compare Source

• Support for the new tables and formats in the ISO Open Font Format (OFF) 5th
  edition is now enabled by default:

  • New tables and formats for 24-bit glyph indices (a.k.a. beyond-64k): the GLYF, LOCA, GVAR, MAXP, HHEA, HMTX, VHEA, and VMTX tables, cmap format 15, VORG version 2, COLR PaintGlyph2, the 24-bit GSUB, GPOS, GDEF, BASE, and JSTF formats, and extended TrueType Collection directories.
    A test font, NotoSans-beyond64k.ttf, which merges the Noto Sans fonts into a single font, can be found at:
    https://drive.google.com/file/d/1vMQI9mZMzfKIMHD96Iie40Oyo9NnnweH/view
  • Cubic curves in GLYF outlines.
  • The DMAP table, supported since 14.6.0.

• Support instancing axes not referenced by retained VARC data. The latest VARC test fonts can be found at:
  https://github.com/notofonts/noto-cjk-varco/releases/tag/v0.005

• The raster (libharfbuzz-raster), vector (libharfbuzz-vector), and GPU (libharfbuzz-gpu) libraries are no longer considered experimental.
  This means that the HarfBuzz API and ABI stability guarantees now apply to these libraries as well.

• Fix possible use-after-free in hb_font_set_face(), which now resets the font functions to the defaults for the new face. The function is now deprecated. Use hb_font_create() instead.

• Fix heap-buffer-overflow in hb_font_set_variation() after hb_font_set_face() switches to a face with more variation axes.

• Subsetting CFF and CFF2 fonts whose subroutine calls are not preceded by an immediate subroutine number now fails instead of silently dropping the table, unless desubroutinizing.

• Overriding atomic operators at compile time is not supported anymore.

• Rewrite the number parser without Ragel, fixing various edge cases.

• Harden the experimental WebAssembly shaper against malicious fonts.

• Update the experimental Rust shaper (HarfRust) to 0.15, and the fontations font functions to read-fonts 0.46.

• Update the kbts shaping backend to kb_text_shape 2.28g, and support font variations in it.

• Various subsetting and instancing fixes, especially for CFF2, COLR, and variable layout tables.

• Various fixes to the raster and vector libraries.

• Various variable font fixes.

• Various fixes for malformed fonts.

• Various documentation fixes.

• Various build and CI fixes.

• Deprecated API:
  -hb_font_set_face()

v14.6.0

Compare Source

• Fix shaping failures caused by out-of-range glyph IDs, a regression from 11.4.0.
• Update experimental beyond-64k support to the final ISO Open Font Format 5th edition. This support remains disabled by default.
• Add support for the DMAP table.
• Support FeatureVariations 1.1 lookup variations, including subsetting and instancing.
• Update VARC to the revised variation-store format. The new format is incompatible with the previous one.
• Various VARC fixes.
• Fix background color and stride handling in the experimental raster library.
• Improve the experimental Rust shaper (HarfRust) and font functions (fontations), and update HarfRust to 0.14.
• Various subsetting fixes and improvements.
• Various fixes for malformed fonts.
• Various build and CI fixes.

v14.5.1

Compare Source

• Map the fonupa (Uralic Phonetic Alphabet) BCP 47 variant to the UPPH OpenType language system tag.
• Produce smaller cmap subtables and drop no-op variation device tables when subsetting.
• Fix possible deadlock in hb_font_destroy() after hb_ft_font_set_funcs(), a regression from 14.5.0.
• Fix signed integer overflows when scaling glyph extents and applying synthetic slant and emboldening.
• Fix float-to-int overflow in VARC component axis coordinates with malformed fonts.
• Fix a memory leak in the experimental WebAssembly shaper when shaping with features.
• Fix accumulator overflows in the experimental raster library when rendering glyphs with very many overlapping edges.
• Fix heap buffer overflow in the experimental GPU library with malicious COLR fonts.
• Various build and CI fixes.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • On day 3 of the month (* * 3 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.