Sourced from fonttools's releases.

4.58.1

• [varLib] Make sure that fvar named instances only reuse name ID 2 or 17 if they are at the default location across all axes, to match OT spec requirement (#3831).
• [feaLib] Improve single substitution promotion to multiple/ligature substitutions, fixing a few bugs as well (#3849).
• [loggingTools] Make Timer._time a static method that doesn't take self, makes it easier to override (#3836).
• [featureVars] Use None for empty ConditionSet, which translates to a null offset in the compiled table (#3850).
• [feaLib] Raise an error on conflicting ligature substitution rules instead of silently taking the last one (#3835).
• Add typing annotations to T2CharStringPen (#3837).
• [feaLib] Add single substitutions that were promoted to multiple or ligature substitutions to aalt feature (#3847).
• [featureVars] Create a default LangSys in a ScriptRecord if missing when adding feature variations to existing GSUB later in the build (#3838).
• [symfont] Added a main().
• [cffLib.specializer] Fix rmoveto merging when blends used (#3839, #3840).
• [pyftmerge] Add support for cmap format 14 in the merge tool (#3830).
• [varLib.instancer/cff2] Fix vsindex of Private dicts when instantiating (#3828, #3232).
• Update text file read to use UTF-8 with optional BOM so it works with e.g. Windows Notepad.exe (#3824).
• [varLib] Ensure that instances only reuse name ID 2 or 17 if they are at the default location across all axes (#3831).
• [varLib] Create a dflt LangSys in a ScriptRecord when adding variations later, to fix an avoidable crash in an edge case (#3838).

Sourced from fonttools's changelog.

4.58.1 (released 2025-05-28)

• [varLib] Make sure that fvar named instances only reuse name ID 2 or 17 if they are at the default location across all axes, to match OT spec requirement (#3831).
• [feaLib] Improve single substitution promotion to multiple/ligature substitutions, fixing a few bugs as well (#3849).
• [loggingTools] Make Timer._time a static method that doesn't take self, makes it easier to override (#3836).
• [featureVars] Use None for empty ConditionSet, which translates to a null offset in the compiled table (#3850).
• [feaLib] Raise an error on conflicting ligature substitution rules instead of silently taking the last one (#3835).
• Add typing annotations to T2CharStringPen (#3837).
• [feaLib] Add single substitutions that were promoted to multiple or ligature substitutions to aalt feature (#3847).
• [featureVars] Create a default LangSys in a ScriptRecord if missing when adding feature variations to existing GSUB later in the build (#3838).
• [symfont] Added a main().
• [cffLib.specializer] Fix rmoveto merging when blends used (#3839, #3840).
• [pyftmerge] Add support for cmap format 14 in the merge tool (#3830).
• [varLib.instancer/cff2] Fix vsindex of Private dicts when instantiating (#3828, #3232).
• Update text file read to use UTF-8 with optional BOM so it works with e.g. Windows Notepad.exe (#3824).
• [varLib] Ensure that instances only reuse name ID 2 or 17 if they are at the default location across all axes (#3831).
• [varLib] Create a dflt LangSys in a ScriptRecord when adding variations later, to fix an avoidable crash in an edge case (#3838).

• ad9e68b Release 4.58.1
• a48f5d9 Update NEWS.rst
• a228454 [loggingTools] make Timer._time a static method that doesn't take self
• 5531feb Merge pull request #3831 from fonttools/reuse-name-id-2-and-17-only-when-defa...
• e8925b4 Merge pull request #3849 from fonttools/bug3846
• 403c7ca don't call addMultilingualName twice; try to find else add
• 509ca62 [feaLib] Improve single substitution promotion
• ad964a1 Merge pull request #3836 from sminnee/fix/freezegun-conflict
• 4fc7dcf Small fixup of typing annotations
• 6d452ea Merge pull request #3850 from fonttools/null-empty-condset
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)