Bump fonttools from 4.64.0 to 4.65.0

[dependabot]

Bumps fonttools from 4.64.0 to 4.65.0.

Release notes

Sourced from fonttools's releases.

4.65.0

• [glyf] Add __iter__, items and values methods to the glyf table to make it more dict-like (#4156).
• [feaLib] Escape the anonymous block tag when scanning for its terminator, so tags containing regex metacharacters are matched literally (#4167).
• [varLib] Strip directory components from <variable-font name="..."/> when deriving the output filename in the varLib command line, so a designspace cannot write outside the output directory (#4168).
• [feaLib] Fix tracking of the current script and language across redundant script statements. Rules following a script statement that names the first declared language system no longer end up under the DFLT script, and a script statement naming the already-current script still narrows the language systems and terminates the current lookup while leaving the lookupflag alone, matching makeotf (#1824, #2522, #4169).
• [varLib.interpolatable] Escape glyph names in the HTML report (#4172).
• [otlLib] Fix overflow handling when building contextual lookups: offset overflows now raise OTLOffsetOverflowError instead of AttributeError so another contextual format can be tried (regression from #3439). When all formats overflow, split the ruleset in halves until it fits (#4171).

Changelog

Sourced from fonttools's changelog.

4.65.0 (released 2026-09-10)

• [glyf] Add __iter__, items and values methods to the glyf table to make it more dict-like (#4156).
• [feaLib] Escape the anonymous block tag when scanning for its terminator, so tags containing regex metacharacters are matched literally (#4167).
• [varLib] Strip directory components from <variable-font name="..."/> when deriving the output filename in the varLib command line, so a designspace cannot write outside the output directory (#4168).
• [feaLib] Fix tracking of the current script and language across redundant script statements. Rules following a script statement that names the first declared language system no longer end up under the DFLT script, and a script statement naming the already-current script still narrows the language systems and terminates the current lookup while leaving the lookupflag alone, matching makeotf (#1824, #2522, #4169).
• [varLib.interpolatable] Escape glyph names in the HTML report (#4172).
• [otlLib] Fix overflow handling when building contextual lookups: offset overflows now raise OTLOffsetOverflowError instead of AttributeError so another contextual format can be tried (regression from #3439). When all formats overflow, split the ruleset in halves until it fits (#4171).

Commits

• 656f89d Release 4.65.0
• 1643950 Update NEWS.rst [skip ci]
• fd0f083 Merge pull request #4177 from fonttools/sbix-to-otsvg-snippet
• 9c625d4 Merge pull request #4171 from fonttools/fix-contextual-size-overflow
• 5f04c38 Add sbix to OT-SVG conversion snippet
• 48a0cf9 Merge pull request #4172 from insaf021/interpolatable-html-escape
• d30db24 Merge pull request #4169 from cmyr/fealib-script-tracking-afdko
• ac342d7 [varLib.interpolatable] escape glyph name in HTML report
• 2a93de2 Split contextual rulesets when all formats overflow
• e6bb5fe Fix overflow reporting when sizing contextual lookups
• Additional commits viewable in compare view