From 0b011096a76ca844eb5b9e3f379dd609aec28fe3 Mon Sep 17 00:00:00 2001 From: "riseproject-dev[bot]" <330740410+riseproject-dev[bot]@users.noreply.github.com> Date: Tue, 22 Sep 2026 07:25:58 +0000 Subject: [PATCH 1/2] uharfbuzz: Add version 0.56.2 Signed-off-by: riseproject-dev[bot] <330740410+riseproject-dev[bot]@users.noreply.github.com> --- docs/packages/uharfbuzz.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/packages/uharfbuzz.yaml b/docs/packages/uharfbuzz.yaml index 3f71f78018e..e0d3e0d9ed9 100644 --- a/docs/packages/uharfbuzz.yaml +++ b/docs/packages/uharfbuzz.yaml @@ -31,3 +31,4 @@ versions: - filename: uharfbuzz-0.56.1-cp310-abi3-musllinux_1_2_riscv64.whl sha256: 41fead271d2521bde5c9a6bd9ed4fbdf1244a1d637a3d11b651e1f940aad2dc9 requires-python: '>=3.10' +- version: 0.56.2 From 54b8fc0292869782383466848599cacdb9b24c89 Mon Sep 17 00:00:00 2001 From: Ludovic Henry Date: Thu, 24 Sep 2026 07:09:14 +0000 Subject: [PATCH 2/2] uharfbuzz: carry forward the licence patch to 0.56.2 The nightly bump to 0.56.2 didn't copy patches/uharfbuzz/0.56.1/ forward, so build-uharfbuzz.yml's "git apply .../0.56.2/00*.patch" step failed on both the manylinux and musllinux legs (No such file or directory). setup.cfg is unchanged since 0.56.1 and the pinned harfbuzz submodule (863d3f7787c6, HarfBuzz 14.5.0) still ships harfbuzz/COPYING, so the 0.56.1 patch applies to 0.56.2 as-is (verified with git apply --check against a real checkout of the v0.56.2 tag and its submodule). --- ...-s-licence-alongside-uharfbuzz-s-own.patch | 38 +++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 patches/uharfbuzz/0.56.2/0001-ship-harfbuzz-s-licence-alongside-uharfbuzz-s-own.patch diff --git a/patches/uharfbuzz/0.56.2/0001-ship-harfbuzz-s-licence-alongside-uharfbuzz-s-own.patch b/patches/uharfbuzz/0.56.2/0001-ship-harfbuzz-s-licence-alongside-uharfbuzz-s-own.patch new file mode 100644 index 00000000000..038f018f4af --- /dev/null +++ b/patches/uharfbuzz/0.56.2/0001-ship-harfbuzz-s-licence-alongside-uharfbuzz-s-own.patch @@ -0,0 +1,38 @@ +From 19248e0348f0749399fb1f3a50c5fcd21b158238 Mon Sep 17 00:00:00 2001 +From: Ludovic Henry +Date: Tue, 8 Sep 2026 00:00:00 +0200 +Subject: [PATCH] ship harfbuzz's licence alongside uharfbuzz's own + +Upstream-Status: To upstream [not yet submitted; the same gap exists in every uharfbuzz wheel on PyPI, so this needs a maintainer discussion rather than a drive-by PR] + +The extension statically links the vendored HarfBuzz C++ sources +(harfbuzz/, a git submodule, compiled in as harfbuzz-world.cc), which +carry their own "Old MIT" notice. That licence requires the copyright +notice to travel with binary redistributions, but setup.cfg's +`license_file` names only uharfbuzz's own LICENSE (Apache-2.0), so the +built wheel ships a single notice covering the wrapper alone -- +confirmed on the published `uharfbuzz-0.56.0-cp310-abi3-*.whl`, whose +dist-info/licenses/ carries just LICENSE. + +Switching to the plural `license_files` (setuptools' modern key, +`license_file` is its deprecated singular alias) and naming the +vendored file in place keeps the patch to one line of intent and lets +it track the submodule: setuptools resolves each license-files entry +relative to the project root and preserves its path in the wheel, so +it lands as dist-info/licenses/harfbuzz/COPYING. + +Signed-off-by: Ludovic Henry +--- + setup.cfg | 4 +++- + 1 file changed, 3 insertions(+), 1 deletion(-) + +diff --git a/setup.cfg b/setup.cfg +index 0c9e0fc..7cf49c6 100644 +--- a/setup.cfg ++++ b/setup.cfg +@@ -1,2 +1,4 @@ + [metadata] +-license_file = LICENSE ++license_files = ++ LICENSE ++ harfbuzz/COPYING