Version 9.3.0

• [glyf] Attempt to drop empty components from composite glyphs. (#289)
• Show invalid table tags as hex in error messages. (#292)
• fix warning text for bad sxHeight. (#293)
• ots-idempotent.cc: Use result2 correctly. (#294)
• Introduce new TABLE_ACTION_SANITIZE_SOFT action. (#297)
• [colr] Limit nesting depth of COLRv1 paint tables. (#302)
• Fix validation bugs in CFF, cmap, layout, variations, and Silf parsers. (#303)
• [colr] Avoid double-reading the base glyph list entries. (#305)
• [cff] Use CheckOffset to validate private_offset. (#306)
• Fix format string. (#307)
• Fix null pointer dereference in ProcessGeneric() with TABLE_ACTION_PASSTHRU. (#309)
• [cff] Validate ordering of hint operators in charstring. (#310)
• [cff] Reject dict with duplicate FDSelect entries. (#311)
• Add missing 'override' to silence warnings in passthru_test.cc. (#313)
• [cff] Update Operand handling. (#314)
• [cff] Reject BCD number with excessively large exponent. (#315)
• [hhea/vhea] Stop forcing caretOffset to zero for non-italic fonts. (#318)
• Update googletest wrap. (#319)
• [meson] Update wrap files. (#320)
• [cff] Fix -Wsign-compare warning. (#323)
• [layout] Don’t check substitution/context length against numGlyphs. (#324)
• [ots] Accept bitmap-only fonts with EBDT/EBLC. (#325)
• [variations] Check for potential overflow on 32-bit systems. (#327)