This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+6 more
Summary
AI summaryFixed subset_ttf mismatch in the post table glyph count for TrueType subsetting.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds four real example images to README for subsetting, instancing, color glyphs, shaping. Adds four real example images to README for subsetting, instancing, color glyphs, shaping. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Low |
Changes README image URLs to absolute GitHub-hosted links for rendering on crates.io and npmjs.com. Changes README image URLs to absolute GitHub-hosted links for rendering on crates.io and npmjs.com. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Low |
Excludes `assets/` and `scripts/` directories from the published crate. Excludes `assets/` and `scripts/` directories from the published crate. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Fixes mismatched post table size in subset_ttf causing strict OTS rejection. Fixes mismatched post table size in subset_ttf causing strict OTS rejection. Source: llm_adapter@2026-07-17 Confidence: high |
— |
Full changelog
Fixed
subset_ttfcopied the source font'sposttable verbatim, leaving its glyph-name array sized to the original glyph count instead of the subset's. Strict OpenType consumers (browsers via OTS, some embedders) rejected the mismatch outright. Now downgrades topostversion 3.0 (header only) on every subset. TrueType/glyfsubsetting only – CFF was never affected.
Added
- Four real, reproducible example images in the README (subsetting, instancing, color glyphs, shaping), generated by scripts under
scripts/gen-images/.
Changed
- README images now use absolute GitHub-hosted URLs instead of relative paths, so they render correctly on crates.io and npmjs.com, not just GitHub.
assets/andscripts/excluded from the published crate.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Taetype
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]