Version 9.2.0

• [glyph] Check & fix bounding box of simple glyph records. (#264, #266)
• [maxp] Attempt to improve fixup of bad 'maxp' version numbers. (#267)
• [CFF] correctly parse negative operands, but don't allow -ve offset. (#270)
• [COLR] Make rejecting paint-graph cycles in COLRv1 a compile-time option. (#272)
• [STAT] Don't check designAxisSize if the designAxisCount is zero. (#277)
• [gdef] absolute_offset could overflow a 16-bit variable. (#278)
• [name] Fix typos. (#280)
• [graphite] Avoid calling Serialize() for an invalid Glat table. (#281)
• [woff2] Set correct max_size for decompressed output buffer. (#284)
• [layout] Warn rather than fail if min/max of a condition table range are reversed. (#285)
• [meson] Update wrap files. (#286)
• Fix a size_t/off_t mismatch build warning. (#271)
• Fix potential arithmetic overflows. (#279)

Version 9.1.0

• Synthesize an empty gvar table if missing and there is an fvar table, to help with CoreText that expects gvar to be present in this case. (#249)
• Correct VDMX.numRecs field if necessary. (#250)
• Improve warning message about glyf instructions maximum size. (#252)
• Support version 2 of avar table. (#257)
• If both FreeType and Win32 are enable, prefer Win32 in ots-idempotent. (#254)

Version 9.0.0

• Support for sanitizing COLR and CPAL tables, both version 0 and version 1 of the tables.

Version 8.2.2

• Fix ots-side-by-side.1 man page (#240)
• Relax requirements for axis.axisNameID (#210)
• Exit early if decompressed size exceeds OTSStream's size limit (#244)
• Fix binary builds

Version 8.2.1

• Fix a couple of uncaught out of bounds exceptions in CFF2 code.

Version 8.2.0

• Various improvements to debug messages.
• Man pages for installed executables that missed ones.
• Improvements to test suite.
• Fix CFF2 vsindex handling.

Version 8.1.4

• Speedup decompressing compressed Graphite tables.
• Improve message about out-of-order MVAR tags.

Version 8.1.3

• Use meson subprojects for third-party dependencies and allow budding against system versions.
• Partially revert a change in the previous release that would allow arbitrary sfntVersion tags.

Version 8.1.2

• Sanitize maxPoints, maxComponentPoints, and maxComponentDepth from the maxp table.
• Increase limits for decompressed tables and files from 30MB for both, to 150MB and 300MB, respectively.
• Improve warning and error messages in hhea/vhea tables.

Version 8.1.1

• Fix use of uninitialized value that results from upgrading STAT table version.
• Fix various typos.
• Add man page for ots-sanitize.