Bump ufo2ft from 2.28.0 to 2.33.4

[dependabot]

Bumps ufo2ft from 2.28.0 to 2.33.4.

Release notes

Sourced from ufo2ft's releases.

v2.33.4

• Fix remaining issues with missing .notdef glyph in sparse layer masters (c0e8aa13, #773)
• When building name table, keep or drop both nameID=16 and 17 in pair, never leave either one without the other (#774).

v2.33.3

• Set OVERLAP_SIMPLE glyf flag when "public.truetype.overlap" lib key set to true for a simple contour glyph; previously we were only taking it into account for composite glyphs (OVERLAP_COMPOUND flag) (#772)
• Fixed error when compiling variable TTF containing sparse masters and the default master's .notdef glyph contains cubic curves (#772).

v2.33.2

• Allow to reverseDirection=True even when convertCubics=False (#770).

v2.33.1

• Added convertCubics=True to compileInterpolatableTTFs/compileVariableTTF methods, to allow disabling cu2qu altogether (similar to the existing option that was already there for compileTTF for statics).
• OutlineTTFCompiler: ensure that only quadratic curves are present in TrueType glyphs if glyphDataFormat=0 was not explicitly set to 1 (#769).

v2.33.0

• Support public.openTypePostUnderlinePositionunified-font-object/ufo-spec#217#760).
• [instructionCompiler] Make logging less noisy (#767).
• Added allQuadratic=True compile option; when False, tells cu2qu to keep mix of cubic and quadratic curves (whichever has fewer points) as per glyf v1 draft spec proposal (#768, https://github.com/harfbuzz/boring-expansion-spec/blob/main/glyf1.md).

v2.32.0

• Raise error when multiple glyphs claim the same Unicode codepoint. When expanding color layers to glyphs, ensure any codepoint is stripped to prevent unintentional clashes (#739).
• Use fontTools.cu2qu instead of standalone cu2qu module, no changes, just one less dependency (#756).
• Added compile option for static/variable TTF outputs to dropImpliedOnCurves to omit on-curve points that are halfway between two consecutive off-curve points, slightly reducing glyf table size with no visible differences (#753).
• [constants] Updated Indic / USE script lists (#755).
• Require fonttools >= 4.40.0

v2.31.1

• [featureWriter.ast] Have iterClassDefinitions search not just top-level but inside feature and lookup blocks as well (#732).
• Added autoUseMyMetrics=True compile option (for TrueType output only) to allow disabling the automatic setting of USE_MY_METRICS glyf component flags, which is not needed for fonts without hinted metrics (#741).
• [kernFeatureWriter] Only use exported glyphs when generating mark filtering sets (#740).

v2.31.0

• Dropped support for Python 3.7 which reached EOL. We now require Python >= 3.8.
• Take into account extra substitutions found in DesignSpace rules when classifying glyphs by various unicode properties in feature writers (#731).
• Added support for compiling TrueType instructions and flags stored in the UFO's public.truetype.* lib keys (#654).
• Automatically compute COLRv1 ClipBoxes if none are explicitly provided. This is enabled by default for static builds only. You can set colrAutoClipBoxes=True for interpolatable/variable builds if safe to do so (#728).
• Improved "no default source" error (#677).
• Warn about mis-cased # Automatic Code insertion marker comments; also warn if there are no insertion markers but kerning.plist is non empty and there are manual kern/dist features in the FEA code (#719).
• Respect openTypeNameRecords overrides for the predefined name IDs (#727).
• Reorder class definitions in feature writers such that they appear before the lookups that use them (#725).
• Renamed dottedCircleFilter module to dottedCirlce, was wrongly named; old kept for backward compat (#716).
• [kernFeatureWriter] Avoid overwriting classDefs (#705). Register kern lookups for all defined languages (#711). Correctly split mark and base kerning pairs (#713). Don't skip over spacing marks when kerning (#720).
• Fixed FEA include dir detection when in current dir (#689)
• Automatically decompose components when 2x2 transforms differ (#698)
• [kernFeatureWriter] Split kerning by script, not horizontal direction, which should be faster to compile and produce smaller GPOS. The old kernFeatureWriter is still kept in a separate module (#679, #636, #697).

... (truncated)

Commits

• b3895a9 Merge pull request #774 from googlefonts/fix-pref-names
• e931d18 keep or drop nameID=16 and 17 only when both == 1 and 2
• d1c5ad4 Merge pull request #773 from googlefonts/sparse-notdef
• 85e28b7 Make sparse layers without .notdef not participate in gvar/CFF2/HVAR
• c0e8aa1 bool(glyph) is False for empty glyphs.. fix logic for notdefGlyph
• d4747ee Merge pull request #772 from googlefonts/ttf-vf-empty-default-notdef
• 8d676d9 use empty .notdef for sparse TTF masters
• e390805 add reproducer for #501
• 9dacc83 Merge pull request #652 from bkmgit/patch-1
• bce1f26 Merge pull request #771 from googlefonts/overlap-simple
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)