Merge #4624

4624: Update fonttools requirement from ~=4.37.1 to ~=4.37.2 r=jenshnielsen a=dependabot[bot]

Updates the requirements on [fonttools](https://github.com/fonttools/fonttools) to permit the latest version.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/fonttools/fonttools/releases">fonttools's releases</a>.</em></p>
<blockquote>
<h2>4.37.2</h2>
<ul>
<li>[subset] Keep CPAL table and don't attempt to prune unused color indices if OT-SVG table is present even if COLR table was subsetted away; OT-SVG may be referencing the CPAL table; for now we assume that's the case (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2814">fonttools/fonttools#2814</a>, <a href="https://github-redirect.dependabot.com/fonttools/fonttools/pull/2815">fonttools/fonttools#2815</a>).</li>
<li>[varLib.instancer] Downgrade GPOS/GSUB version if there are no more FeatureVariations after instancing (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/pull/2812">fonttools/fonttools#2812</a>).</li>
<li>[subset] Added <code>--no-lazy</code> to optionally load fonts eagerly (mostly to ease debugging of table lazy loading, no practical effects) (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/pull/2807">fonttools/fonttools#2807</a>).</li>
<li>[varLib] Avoid building empty COLR.DeltaSetIndexMap with only identity mappings (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/pull/2803">fonttools/fonttools#2803</a>).</li>
<li>[feaLib] Allow multiple value record types (by promoting to the most general format) within the same PairPos subtable; e.g. this allows variable and non variable kerning rules to share the same subtable. This also fixes a bug whereby some kerning pairs would become unreachable while shapiong because of premature subtable splitting (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2772">fonttools/fonttools#2772</a>, <a href="https://github-redirect.dependabot.com/fonttools/fonttools/pull/2776">fonttools/fonttools#2776</a>).</li>
<li>[feaLib] Speed up <code>VarScalar</code> by caching models for recurring master locations (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/pull/2798">fonttools/fonttools#2798</a>).</li>
<li>[feaLib] Optionally cythonize <code>feaLib.lexer</code>, speeds up parsing FEA a bit (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/pull/2799">fonttools/fonttools#2799</a>).</li>
<li>[designspaceLib] Avoid crash when handling unbounded rule conditions (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/pull/2797">fonttools/fonttools#2797</a>).</li>
<li>[post] Don't crash if <code>post</code> legacy format 1 is malformed/improperly used (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/pull/2786">fonttools/fonttools#2786</a>)</li>
<li>[gvar] Don't be &quot;lazy&quot; (load all glyph variations up front) when TTFont.lazy=False (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/pull/2771">fonttools/fonttools#2771</a>).</li>
<li>[TTFont] Added <code>normalizeLocation</code> method to normalize a location dict from the font's defined axes space (also known as &quot;user space&quot;) into the normalized (-1..+1) space. It applies <code>avar</code> mapping if the font contains an <code>avar</code> table (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/pull/2789">fonttools/fonttools#2789</a>).</li>
<li>[TTVarGlyphSet] Support drawing glyph instances from CFF2 variable glyph set (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/pull/2784">fonttools/fonttools#2784</a>).</li>
<li>[fontBuilder] Do not error when building cmap if there are zero code points (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/pull/2785">fonttools/fonttools#2785</a>).</li>
<li>[varLib.plot] Added ability to plot a variation model and set of accompaning master values corresponding to the model's master locations into a pyplot figure (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/pull/2767">fonttools/fonttools#2767</a>).</li>
<li>[Snippets] Added <code>statShape.py</code> script to draw statistical shape of a glyph as an ellips (requires pycairo) (<a href="https://github.com/fonttools/fonttools/commit/baecd8850b878b1cc5ccf140d884754c4b8d2e9b">https://github.com/fonttools/fonttools/commit/baecd8850b878b1cc5ccf140d884754c4b8d2e9b</a>).</li>
<li>[TTVarGlyphSet] implement drawPoints natively, avoiding going through SegmentToPointPen (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/pull/2778">fonttools/fonttools#2778</a>).</li>
<li>[TTVarGlyphSet] Fixed bug whereby drawing a composite glyph multiple times, its components would shif; needed an extra copy (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2774">fonttools/fonttools#2774</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/fonttools/fonttools/blob/main/NEWS.rst">fonttools's changelog</a>.</em></p>
<blockquote>
<h2>4.37.2 (released 2022-09-15)</h2>
<ul>
<li>[subset] Keep CPAL table and don't attempt to prune unused color indices if OT-SVG
table is present even if COLR table was subsetted away; OT-SVG may be referencing the
CPAL table; for now we assume that's the case (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2814">#2814</a>, <a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2815">#2815</a>).</li>
<li>[varLib.instancer] Downgrade GPOS/GSUB version if there are no more FeatureVariations
after instancing (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2812">#2812</a>).</li>
<li>[subset] Added <code>--no-lazy</code> to optionally load fonts eagerly (mostly to ease
debugging of table lazy loading, no practical effects) (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2807">#2807</a>).</li>
<li>[varLib] Avoid building empty COLR.DeltaSetIndexMap with only identity mappings (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2803">#2803</a>).</li>
<li>[feaLib] Allow multiple value record types (by promoting to the most general format)
within the same PairPos subtable; e.g. this allows variable and non variable kerning
rules to share the same subtable. This also fixes a bug whereby some kerning pairs
would become unreachable while shapiong because of premature subtable splitting (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2772">#2772</a>, <a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2776">#2776</a>).</li>
<li>[feaLib] Speed up <code>VarScalar</code> by caching models for recurring master locations (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2798">#2798</a>).</li>
<li>[feaLib] Optionally cythonize <code>feaLib.lexer</code>, speeds up parsing FEA a bit (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2799">#2799</a>).</li>
<li>[designspaceLib] Avoid crash when handling unbounded rule conditions (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2797">#2797</a>).</li>
<li>[post] Don't crash if <code>post</code> legacy format 1 is malformed/improperly used (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2786">#2786</a>)</li>
<li>[gvar] Don't be &quot;lazy&quot; (load all glyph variations up front) when TTFont.lazy=False (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2771">#2771</a>).</li>
<li>[TTFont] Added <code>normalizeLocation</code> method to normalize a location dict from the
font's defined axes space (also known as &quot;user space&quot;) into the normalized (-1..+1)
space. It applies <code>avar</code> mapping if the font contains an <code>avar</code> table (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2789">#2789</a>).</li>
<li>[TTVarGlyphSet] Support drawing glyph instances from CFF2 variable glyph set (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2784">#2784</a>).</li>
<li>[fontBuilder] Do not error when building cmap if there are zero code points (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2785">#2785</a>).</li>
<li>[varLib.plot] Added ability to plot a variation model and set of accompaning master
values corresponding to the model's master locations into a pyplot figure (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2767">#2767</a>).</li>
<li>[Snippets] Added <code>statShape.py</code> script to draw statistical shape of a glyph as an
ellips (requires pycairo) (baecd88).</li>
<li>[TTVarGlyphSet] implement drawPoints natively, avoiding going through
SegmentToPointPen (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2778">#2778</a>).</li>
<li>[TTVarGlyphSet] Fixed bug whereby drawing a composite glyph multiple times, its
components would shif; needed an extra copy (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2774">#2774</a>).</li>
</ul>
<h2>4.37.1 (released 2022-08-24)</h2>
<ul>
<li>[subset] Fixed regression introduced with v4.37.0 while subsetting the VarStore of
<code>HVAR</code> and <code>VVAR</code> tables, whereby an <code>AttributeError: subset_varidxes</code> was
thrown because an apparently unused import statement (with the side-effect of
dynamically binding that <code>subset_varidxes</code> method to the VarStore class) had been
accidentally deleted in an unrelated PR (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2679">#2679</a>, <a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2773">#2773</a>).</li>
<li>[pens] Added <code>cairoPen</code> (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2678">#2678</a>).</li>
<li>[gvar] Read <code>gvar</code> more lazily by not parsing all of the <code>glyf</code> table (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2771">#2771</a>).</li>
<li>[ttGlyphSet] Make <code>drawPoints(pointPen)</code> method work for CFF fonts as well via
adapter pen (<a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2770">#2770</a>).</li>
</ul>
<h2>4.37.0 (released 2022-08-23)</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/fonttools/fonttools/commit/1f9e6eb132366ee5fcbe290f6759709e36b384ed"><code>1f9e6eb</code></a> Release 4.37.2</li>
<li><a href="https://github.com/fonttools/fonttools/commit/0be37c37ae1a676db03d68d747cd749a5839822b"><code>0be37c3</code></a> Update changelog [skip ci]</li>
<li><a href="https://github.com/fonttools/fonttools/commit/276f6aaf4480ec2ad81cbd5fcc2210af78c0c3f8"><code>276f6aa</code></a> [subset] keep and don't prune CPAL if OT-SVG table is present</li>
<li><a href="https://github.com/fonttools/fonttools/commit/1f8803af961aa4800e0542f87c7caf52c525b41d"><code>1f8803a</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2812">#2812</a> from fonttools/instancer-no-featurevars</li>
<li><a href="https://github.com/fonttools/fonttools/commit/87bbb64061f62c8815f0a0cbace4b975793d0aab"><code>87bbb64</code></a> [instancer] downgrade GSUB/GPOS version if there are no FeatureVariations aft...</li>
<li><a href="https://github.com/fonttools/fonttools/commit/ecb8ee9104aa6c4327e530187b18a980a5349be4"><code>ecb8ee9</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2807">#2807</a> from fonttools/subset-no-lazy</li>
<li><a href="https://github.com/fonttools/fonttools/commit/25a05c72ab21ba54d0321d5e28eee4f8a9d1d7fd"><code>25a05c7</code></a> subset: add --no-lazy option to load font eagerly as TTFont(lazy=False)</li>
<li><a href="https://github.com/fonttools/fonttools/commit/ebeffeba13e16dbce24ee2bcaf103a68e77c0953"><code>ebeffeb</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/fonttools/fonttools/issues/2803">#2803</a> from fonttools/colr-without-varidxmap</li>
<li><a href="https://github.com/fonttools/fonttools/commit/e4b3394a38fc06648854930c30a6802e945e90b4"><code>e4b3394</code></a> [varLib] omit optional COLR.VarIndexMap for identity mapping</li>
<li><a href="https://github.com/fonttools/fonttools/commit/964df076e18d978a38537abb49276f45ff6a8b32"><code>964df07</code></a> varLib_test: test we don't add no-op DeltaSetIndexMap when not needed</li>
<li>Additional commits viewable in <a href="https://github.com/fonttools/fonttools/compare/4.37.1...4.37.2">compare view</a></li>
</ul>
</details>
<br />


You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

requirements.txt

@@ -33,7 +33,7 @@ exceptiongroup~=1.0.0rc9
 execnet~=1.9.0
 executing~=1.0.0
 fastjsonschema~=2.16.1
-fonttools~=4.37.1
+fonttools~=4.37.2
 future~=0.18.2
 google-api-core~=2.10.1
 google-auth~=2.11.0