Skip to content

MNT: Update bundled font libraries#31485

Open
QuLogic wants to merge 1 commit intomatplotlib:mainfrom
QuLogic:update-bundles
Open

MNT: Update bundled font libraries#31485
QuLogic wants to merge 1 commit intomatplotlib:mainfrom
QuLogic:update-bundles

Conversation

@QuLogic
Copy link
Copy Markdown
Member

@QuLogic QuLogic commented Apr 11, 2026

PR summary

SheenBidi 3.0.0 adds new text editing and analysis API, but that does not directly affect us as it is used by libraqm only.

HarfBuzz 12.3.1 and 12.3.2 fix several bugs and vulnerabilities.

HarfBuzz 13 adds experimental raster and vector rendering libraries. These may be useful for implementing colour emoji, but we remain using FreeType right now.

HarfBuzz 14 adds a GPU text rasterization library. This is again not useful for us right now, unless we start making a GPU backend.

As we have disabled these new features, there should be no size change in the resulting Python extensions, or increased compile time.

Note, the Meson wrapdb hasn't been updated: mesonbuild/wrapdb#2695 but I updated the fallback URL anyway.

AI Disclosure

None

PR checklist

@QuLogic QuLogic added this to the v3.11.0 milestone Apr 11, 2026
libraqm 0.10.5 fixes some minor issues.

SheenBidi 3.0.0 adds new text editing and analysis API, but that does
not directly affect us as it is used by libraqm only.

HarfBuzz 12.3.1 and 12.3.2 fix several bugs and vulnerabilities.

HarfBuzz 13 adds experimental raster and vector rendering libraries.
These may be useful for implementing colour emoji, but we remain using
FreeType right now.

HarfBuzz 14 adds a GPU text rasterization library. This is again not
useful for us right now, unless we start making a GPU backend.

As we have disabled these new features, there should be no size change
in the resulting Python extensions, or increased compile time.
@QuLogic QuLogic changed the title MNT: Update bundled SheenBidi and HarfBuzz MNT: Update bundled font libraries Apr 11, 2026
@QuLogic
Copy link
Copy Markdown
Member Author

QuLogic commented Apr 11, 2026

Also added the libraqm update that was released a few hours ago; it fixes some NULL dereference problems, but only where malloc fails, which seems an unlikely problem.

@QuLogic
Copy link
Copy Markdown
Member Author

QuLogic commented Apr 11, 2026

HarfBuzz 13 also fixes the CodeQL alert that was just raised.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant