Accepting request 1237898 from GNOME:Factory

OBS-URL: https://build.opensuse.org/request/show/1237898
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/harfbuzz?expand=0&rev=116

_service

@@ -0,0 +1,18 @@
+<?xml version="1.0"?>
+<services>
+  <service name="obs_scm" mode="manual">
+    <param name="scm">git</param>
+    <param name="url">https://github.com/harfbuzz/harfbuzz.git</param>
+    <param name="revision">10.2.0</param>
+    <param name="versionformat">@PARENT_TAG@+@TAG_OFFSET@</param>
+    <param name="versionrewrite-pattern">v?(.*)\+0</param>
+    <param name="versionrewrite-replacement">\1</param>
+<!--    <param name="changesgenerate">enable</param> -->
+  </service>
+  <service name="tar" mode="buildtime"/>
+  <service name="recompress" mode="buildtime">
+    <param name="file">*.tar</param>
+    <param name="compression">zst</param>
+  </service>
+  <service name="set_version" mode="manual" />
+</services>

harfbuzz-10.2.0.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c4524f9dad407546ad77848c2f35d61f2f66a56691f53f63edcd38ba7f8f0bf8
+size 97176078

harfbuzz-9.0.0.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a41b272ceeb920c57263ec851604542d9ec85ee3030506d94662067c7b6ab89e
-size 17895360

harfbuzz.changes

@@ -1,3 +1,110 @@
+-------------------------------------------------------------------
+Sun Jan 12 13:46:47 UTC 2025 - Bjørn Lie <bjorn.lie@gmail.com>
+
+- Update to version 10.2.0:
+  + Consider Unicode Variation Selectors when subsetting “cmap”
+    table.
+  + Guard hb_cairo_glyphs_from_buffer() against malformed UTF-8
+    strings.
+  + Fix incorrect “COLR” v1 glyph scaling in hb-cairo.
+  + Use locale-independent parsing of double numbers is “hb-subset”
+    command line tool.
+  + Fix incorrect zeroing of advance width of base glyphs in
+    various “Courier New” font versions due to incorrect “GDEF”
+    glyph classes.
+  + Fix handling of long language codes with “HB_LEAN”
+    configuration.
+  + Update OpenType language system registry.
+  + Allow all Myanmar tone marks (including visarga) in any order.
+  + Don’t insert U+25CC DOTTED CIRCLE before superscript/subscript
+    digits.
+  + Handle Garay script as right to left script.
+  + New API for serializing font tables and potentially repacking
+    them in optimal way.
+  + New API for converting font variation setting from and to
+    strings.
+  + Various build fixes.
+  + Various subsetter and instancer fixes.
+  + New API:
+    - +hb_subset_serialize_link_t
+    - +hb_subset_serialize_object_t
+    - +hb_subset_serialize_or_fail()
+    - +hb_subset_axis_range_from_string()
+    - +hb_subset_axis_range_to_string()
+- Drop harfbuzz-CVE-2024-56732.patch: Fixed upstream.
+
+-------------------------------------------------------------------
+Tue Dec 31 19:05:26 UTC 2024 - Michael Gorse <mgorse@suse.com>
+
+- Add harfbuzz-CVE-2024-56732.patch: guard
+  hb_cairo_glyphs_from_buffer() against bad UTF-8 (CVE-2024-56732).
+
+-------------------------------------------------------------------
+Tue Nov  5 08:44:15 UTC 2024 - Bjørn Lie <bjorn.lie@gmail.com>
+
+- Update to version 10.1.0:
+  + Fix the sign of fallback vertical glyph advance (used when font
+    has no vertical advance data).
+  + Increase maximum “CFF” operands limit 20 times to support more
+    complex fonts.
+  + Add “--face-loader” option to command line utilities.
+  + Support “COLR” v0 table in hb_font_get_glyph_extents().
+  + Add support for font functions that use Core Text APIs, similar
+    to FreeType font functions. This allows, for example, using
+    drawing fonts that use the new (and undocumented) “hvgl” table.
+  + Update IANA and OT language registries, as well ase USE data
+    files.
+  + Fix build with ICU 76.
+  + Various compiler warnings and build fixes.
+  + Various subsetter fixes.
+
+-------------------------------------------------------------------
+Wed Sep 25 08:26:48 UTC 2024 - Bjørn Lie <bjorn.lie@gmail.com>
+
+- Update to version 10.0.1:
+  + Relax sanitization checks for “morx” subtables to fix broken
+    AAT shaping of macOS 15.0 version of GeezaPro.
+- Switch to source service for tarball.
+
+-------------------------------------------------------------------
+Mon Sep 23 20:10:33 UTC 2024 - Bjørn Lie <bjorn.lie@gmail.com>
+
+- Update to version 10.0.0:
+  + Unicode 16.0.0 support.
+  + Various documentation fixes.
+  + Various build fixes.
+  + Add API to allow HarfBuzz client to set what glyph to use when
+    a Unicode Variation Selector is not supported by the font,
+    which would allow the client to customize what happens in this
+    case, by using a different font for example.
+  + Add a callback to for “hb_face_t” for getting the list of table
+    tags. This is now used to make calling
+    “hb_face_get_table_tags()” work on a faces created by
+    “hb_face_create_for_tables()” (e.g. faces returned by
+    “hb_subset_or_fail()”).
+  + CGJ and Mongolian Variation Selectors are now ignored during
+    glyph positioning, previously they would block both glyph
+    substitution and positioning across them.
+  + Support cairo script as an output format for “hb-view” command
+    line tool.
+  + Drop an optimization that would cause HarfBuzz not apply pair
+    positioning lookup subtables under certain circumstances, for
+    compatibility with other implementations that do apply these
+    subtables.
+  + Subsetting will now fail if source font has no glyphs, so
+    feeding the subsetter invalid data will not silently return an
+    empty face.
+  + If after partially instancing a font no variation data is left
+    (the instance is fully static), don’t consider this a failure.
+  + Workaround a Firefox bug in displaying SVGs generated be
+    “hb-view” command line tool under certain circumstances.
+  + Fix bug in macroman mapping for “cmap” table.
+  + Fix difference shaping output when HarfBuzz is built with with
+    “HB_NO_OT_RULESETS_FAST_PATH” enabled.
+  + Various subsetting and instancing fixes.
+  + Various fuzzing fixes.
+  + Add “with_libstdcxx” meson build option.
+
 -------------------------------------------------------------------
 Sun Jul  7 11:23:55 UTC 2024 - Andreas Stieger <andreas.stieger@gmx.de>
 

harfbuzz.obsinfo

@@ -0,0 +1,4 @@
+name: harfbuzz
+version: 10.2.0
+mtime: 1736611998
+commit: 7b27c8edd46c674e01dd226fa9e1aa7549f5c436

harfbuzz.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package harfbuzz
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 # Copyright (c) 2024 Andreas Stieger <Andreas.Stieger@gmx.de>
 #
 # All modifications and additions to the file contributed by third parties
@@ -18,13 +18,14 @@
 
 
 Name:           harfbuzz
-Version:        9.0.0
+Version:        10.2.0
 Release:        0
 Summary:        An OpenType text shaping engine
 License:        MIT
 URL:            https://www.freedesktop.org/wiki/Software/HarfBuzz
-Source0:        https://github.com/harfbuzz/harfbuzz/releases/download/%{version}/%{name}-%{version}.tar.xz
+Source0:        %{name}-%{version}.tar.zst
 Source99:       baselibs.conf
+
 BuildRequires:  c++_compiler
 BuildRequires:  c_compiler
 BuildRequires:  meson
@@ -165,7 +166,7 @@ export CXXFLAGS="%optflags -std=c++17"
 
 %files devel
 %license COPYING
-%doc AUTHORS README THANKS
+%doc AUTHORS README.md THANKS
 %{_includedir}/harfbuzz/
 %{_libdir}/*.so
 %{_libdir}/pkgconfig/harfbuzz.pc