Update fonttools requirement from >=4.43.0 to >=4.63.0 by dependabot[bot] · Pull Request #94 · mrayanasim09/python-projects

dependabot · 2026-08-03T09:27:34Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Updates the requirements on fonttools to permit the latest version.

Release notes

4.63.0

[ttLib] Add support for Apple Color Emoji bgcl table (#4065).

[ttLib] Add support for IFT and IFTX tables (Incremental Font Transfer, PatchMapFormat2) (#4070, #4072).

[otData] Introduce FieldSpec dataclass for OpenType table schema definitions, replacing raw tuples in otData.py (#4076).

[Feat] Show name table strings as comments next to label IDs in TTX output, matching the convention used by fvar, STAT, trak (#4089).

[cu2qu] Fix Cython complex-division rounding difference in split_cubic_into_three that could cause ±1 off-curve coordinate shifts (#3928, #4083).

[designspaceLib] Fix map_backwardgooglefonts/ufo2ft#978#4085).

[OS/2] Fix setUnicodeRanges to accept reserved bits 123-127, restoring round-trip with getUnicodeRanges and fixing recalcUnicodeRanges crash in the subsetter (#4087, #4088).

[cython] Declare Cython extensions as free-threading compatible on Python 3.13+, so that importing them on free-threaded Python no longer re-enables the GIL (#4073, #4090).

Changelog

Sourced from fonttools's changelog.

4.63.0 (released 2026-05-14)

[ttLib] Add support for Apple Color Emoji bgcl table (#4065).

[ttLib] Add support for IFT and IFTX tables (Incremental Font Transfer, PatchMapFormat2) (#4070, #4072).

[otData] Introduce FieldSpec dataclass for OpenType table schema definitions, replacing raw tuples in otData.py (#4076).

[Feat] Show name table strings as comments next to label IDs in TTX output, matching the convention used by fvar, STAT, trak (#4089).

[cu2qu] Fix Cython complex-division rounding difference in split_cubic_into_three that could cause ±1 off-curve coordinate shifts (#3928, #4083).

[designspaceLib] Fix map_backward for many-to-one (flat-segment) axis maps that silently dropped entries via dict comprehension googlefonts/ufo2ft#978#4085).

[OS/2] Fix setUnicodeRanges to accept reserved bits 123-127, restoring round-trip with getUnicodeRanges and fixing recalcUnicodeRanges crash in the subsetter (#4087, #4088).

[cython] Declare Cython extensions as free-threading compatible on Python 3.13+, so that importing them on free-threaded Python no longer re-enables the GIL (#4073, #4090).

4.62.1 (released 2026-03-13)

[feaLib] Extend contextual rule merging to all rule types: single subst, GSUB/GPOS named lookups, ignore rules, and chained alternate subst (#4061).

4.62.0 (released 2026-03-09)

[diff] Add new fonttools diff command for comparing font files, imported from the fdiff project and heavily reworked (#1190, #4007, #4009, #4011, #4013, #4019).

[feaLib] Fix VariableScalar interpolation bug with non-linear avar mappings. Also decouple VariableScalar from compiled fonts, allowing it to work with designspace data before compilation (#3938, #4054).

[feaLib] Fix VariableScalar axis ordering and iterative delta rounding to match fontc behavior (#4053).

[feaLib] Merge chained multi subst rules with same context into a single subtable instead of emitting one subtable per glyph (#4016, #4058).

[feaLib] Pass location to ConditionsetStatement to fix glyphsLib round-tripping fontra/fontra-glyphs#130#4057).

[feaLib] Write 0xFFFF instead of 0 for missing nameIDs in cv feature params (#4010, #4012).

[cmap] Fix CmapSubtable.__lt__() TypeError on Python 3 when subtables share the same encoding record, and add compile-time validation for unique encoding records (#4035, #4055).

[svgLib] Skip non-element XML nodes (comments, processing instructions) when drawing SVG paths (#4042, #4043).

... (truncated)

Commits

978d9ed Release 4.63.0
6b40ecb Add changelog entries for 4.63.0
382a35f Merge pull request #4090 from fonttools/fix-freethreading-compat
0e999b5 Declare Cython extensions as free-threading compatible
9e55ea5 Merge pull request #4089 from fonttools/graphite-feat-labels
e84db3a Merge pull request #4088 from fonttools/fix-setUnicodeRanges-bits-123-127
d6eabd1 Feat: show name table strings as comments next to label IDs in ttx
7d0902b OS/2: fix setUnicodeRanges round-trip for reserved bits 123-127
06e266c Merge pull request #4085 from fonttools/fix-map-backward-non-injective
6d64598 Add more tests for map_backward with many-to-one axis maps
Additional commits viewable in compare view

This change is

vercel · 2026-08-03T09:27:37Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
100-python-projects	Error		Aug 13, 2026 12:23pm
python-projects	Ready	Preview	Aug 13, 2026 12:23pm
python-projects-1	Error		Aug 13, 2026 12:23pm
python-projects-rqac	Ready	Preview	Aug 13, 2026 12:23pm
python-projects1	Ready	Preview	Aug 13, 2026 12:23pm

codesandbox · 2026-08-03T09:27:38Z

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

github-actions · 2026-08-03T09:27:50Z

Seems you are using me but didn't get OPENAI_API_KEY seted in Variables/Secrets for this repo. you could follow readme for more information

codacy-production · 2026-08-03T09:28:21Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results

Complexity 0

Duplication 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

netlify · 2026-08-03T09:33:50Z

❌ Deploy Preview for joyful-gelato-ff27ed failed. Why did it fail? →

Name	Link
🔨 Latest commit	`3e0694d`
🔍 Latest deploy log	https://app.netlify.com/projects/joyful-gelato-ff27ed/deploys/6a7db72b6c0e0400089b556c

netlify · 2026-08-03T09:33:56Z

❌ Deploy Preview for heroic-strudel-239c3c failed. Why did it fail? →

Name	Link
🔨 Latest commit	`3e0694d`
🔍 Latest deploy log	https://app.netlify.com/projects/heroic-strudel-239c3c/deploys/6a7db72b7d0a130008e7b86e

github-actions · 2026-08-13T00:51:07Z

Seems you are using me but didn't get OPENAI_API_KEY seted in Variables/Secrets for this repo. you could follow readme for more information

github-actions · 2026-08-13T00:56:32Z

Seems you are using me but didn't get OPENAI_API_KEY seted in Variables/Secrets for this repo. you could follow readme for more information

Updates the requirements on [fonttools](https://github.com/fonttools/fonttools) to permit the latest version. - [Release notes](https://github.com/fonttools/fonttools/releases) - [Changelog](https://github.com/fonttools/fonttools/blob/main/NEWS.rst) - [Commits](fonttools/fonttools@4.43.0...4.63.0) --- updated-dependencies: - dependency-name: fonttools dependency-version: 4.63.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

guardrails · 2026-08-13T12:23:21Z

⚠️ We detected 5 security issues in this pull request:

Vulnerable Libraries (5)

Severity	Details
High	pkg:pypi/fastapi@0.95.0 upgrade to: 0.109.1
High	pkg:pypi/pillow@10.0.0 upgrade to: 12.3.0
N/A	pkg:pypi/protobuf@4.25.8 upgrade to: 5.29.6,6.33.5
Medium	pkg:pypi/requests@2.31.0 upgrade to: 2.32.4
Medium	pkg:pypi/urllib3@2.5.0 upgrade to: 2.7.0

More info on how to fix Vulnerable Libraries in Python.

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 3, 2026

dependabot Bot requested review from drik-493 and mrayanasim09 as code owners August 3, 2026 09:27

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 3, 2026

pull-request-size Bot added the size/XS label Aug 3, 2026

vercel Bot had a problem deploying to Preview – python-projects August 3, 2026 09:30 Failure

vercel Bot had a problem deploying to Preview – python-projects-1 August 3, 2026 09:31 Failure

vercel Bot had a problem deploying to Preview – 100-python-projects August 3, 2026 09:32 Failure

dependabot Bot force-pushed the dependabot/pip/fonttools-gte-4.63.0 branch from de990f2 to 9d54c16 Compare August 13, 2026 00:50

vercel Bot deployed to Preview – python-projects August 13, 2026 00:51 View deployment

vercel Bot deployed to Preview – python-projects-rqac August 13, 2026 00:52 View deployment

dependabot Bot force-pushed the dependabot/pip/fonttools-gte-4.63.0 branch from 9d54c16 to 7c3f2fe Compare August 13, 2026 00:56

vercel Bot deployed to Preview – python-projects August 13, 2026 00:57 View deployment

vercel Bot deployed to Preview – python-projects-rqac August 13, 2026 00:57 View deployment

dependabot Bot force-pushed the dependabot/pip/fonttools-gte-4.63.0 branch from 7c3f2fe to afa6445 Compare August 13, 2026 12:20

vercel Bot deployed to Preview August 13, 2026 12:21 View deployment

chore: merge main into PR-94 to resolve conflicts (auto)

3e0694d

mrayanasim09 merged commit 7ad8642 into main Aug 13, 2026

pull-request-size Bot removed the size/XS label Aug 13, 2026

pull-request-size Bot added the size/M label Aug 13, 2026

dependabot Bot deleted the dependabot/pip/fonttools-gte-4.63.0 branch August 13, 2026 12:23

vercel Bot deployed to Preview August 13, 2026 12:23 View deployment

Navigation Menu

Uh oh!

Update fonttools requirement from >=4.43.0 to >=4.63.0 - #94

Update fonttools requirement from >=4.43.0 to >=4.63.0#94
mrayanasim09 merged 2 commits into
mainfrom
dependabot/pip/fonttools-gte-4.63.0

dependabot Bot commented on behalf of github Aug 3, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Aug 3, 2026 •

edited

Loading

Uh oh!

codesandbox Bot commented Aug 3, 2026

Uh oh!

github-actions Bot commented Aug 3, 2026

Uh oh!

codacy-production Bot commented Aug 3, 2026

Uh oh!

netlify Bot commented Aug 3, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Aug 3, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 13, 2026

Uh oh!

github-actions Bot commented Aug 13, 2026

Uh oh!

guardrails Bot commented Aug 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

4.63.0

4.63.0 (released 2026-05-14)

4.62.1 (released 2026-03-13)

4.62.0 (released 2026-03-09)

Uh oh!

vercel Bot commented Aug 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

codesandbox Bot commented Aug 3, 2026

Review or Edit in CodeSandbox

Uh oh!

github-actions Bot commented Aug 3, 2026

Uh oh!

codacy-production Bot commented Aug 3, 2026

Up to standards ✅

Uh oh!

netlify Bot commented Aug 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌ Deploy Preview for joyful-gelato-ff27ed failed. Why did it fail? →

Uh oh!

netlify Bot commented Aug 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌ Deploy Preview for heroic-strudel-239c3c failed. Why did it fail? →

Uh oh!

github-actions Bot commented Aug 13, 2026

Uh oh!

github-actions Bot commented Aug 13, 2026

Uh oh!

guardrails Bot commented Aug 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Aug 3, 2026 •

edited

Loading

vercel Bot commented Aug 3, 2026 •

edited

Loading

netlify Bot commented Aug 3, 2026 •

edited

Loading

netlify Bot commented Aug 3, 2026 •

edited

Loading