build(deps): bump fonttools from 4.66.0 to 4.66.1

[dependabot]

Bumps fonttools from 4.66.0 to 4.66.1.

Release notes

Sourced from fonttools's releases.

4.66.1

• [designspaceLib] When splitting a DesignSpace v5 document with makeNames=True (as varLib.build_many does), family and style names set explicitly on an instance now take precedence over the ones computed from the STAT labels, in all languages, and a PostScript name is no longer made up from the labels for an instance that has its own style name (#3131, #4206, #4208).
• [cmap] Decompiling a format 4 subtable whose idRangeOffset points outside glyphIndexArray now raises TTLibError. A negative index used to silently map the code point to the wrong glyph, and one past the end raised a bare AssertionError (#4209).
• [cmap] Fix compiling a format 2 subtable when the lowest glyph ID in a lead-byte row is 32768 or higher, which failed with struct.error (#4210).

Changelog

Sourced from fonttools's changelog.

4.66.1 (released 2026-09-29)

• [designspaceLib] When splitting a DesignSpace v5 document with makeNames=True (as varLib.build_many does), family and style names set explicitly on an instance now take precedence over the ones computed from the STAT labels, in all languages, and a PostScript name is no longer made up from the labels for an instance that has its own style name (#3131, #4206, #4208).
• [cmap] Decompiling a format 4 subtable whose idRangeOffset points outside glyphIndexArray now raises TTLibError. A negative index used to silently map the code point to the wrong glyph, and one past the end raised a bare AssertionError (#4209).
• [cmap] Fix compiling a format 2 subtable when the lowest glyph ID in a lead-byte row is 32768 or higher, which failed with struct.error (#4210).

Commits

• 9e95795 Release 4.66.1
• 8fc91fb Update NEWS.rst [skip ci]
• 82dc507 Merge pull request #4209 from insaf021/cmap4-idrangeoffset-bounds
• a83553e trim comments
• 85049d3 Merge pull request #4208 from fonttools/fix-split-stat-names-override
• 1ad111d Merge pull request #4210 from youdie006/cmap-format2-high-gids
• c9e9d68 [cmap] fix format 2 compile for glyph IDs above 32767
• 85625c5 raise TTLibError for out-of-range glyphIndexArray offset in cmap format 4
• 879173e [designspaceLib] Let explicit instance names win over STAT labels when splitting
• 718b61b Bump version: 4.66.0 → 4.66.1.dev0
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 72.19%. Comparing base (b7cbeb5) to head (1ac45a1).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #8568   +/-   ##
=======================================
  Coverage   72.19%   72.19%           
=======================================
  Files         307      307           
  Lines       32322    32322           
=======================================
  Hits        23336    23336           
  Misses       8986     8986           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.