Weasyprint

**This is a security update.**

We strongly recommend to upgrade WeasyPrint to the latest version if you use WeasyPrint 61.0 or 61.1. Older versions are not impacted.

Security

- Always use URL fetcher for attachments

Contributors

* Guillaume Ayoub
* Ilia Novoselov

Backers and sponsors

* Spacinov
* Kobalt
* Grip Angebotssoftware
* Manuel Barkhau
* SimonSoft
* Menutech
* KontextWork
* René Fritz
* Simon Sapin
* Arcanite
* TrainingSparkle
* Healthchecks.io
* Hammerbacher
* Docraptor
* Yanal-Yvez Fargialla
* Morntag
* NBCO

Released on 2024-02-26.

Bug fixes

- 2075: Use default value when variable is not defined
- 2070: Don’t crash when rendering SVGs with non-text a children
- Don’t crash when SVG file can’t be rendered

Documentation

- 2067: Suggest "dnf" instead of "yum" to install Fedora packages
- Improve documentation for Windows
- Fix required version of TinyCSS2

Contributors

* Guillaume Ayoub
* Felix Schwarz
* Lucie Anglade

Backers and sponsors

* Spacinov
* Kobalt
* Grip Angebotssoftware
* Manuel Barkhau
* SimonSoft
* Menutech
* KontextWork
* René Fritz
* Simon Sapin
* Arcanite
* TrainingSparkle
* Healthchecks.io
* Hammerbacher
* Docraptor
* Yanal-Yvez Fargialla
* Morntag
* NBCO

Read about this release [on our blog](https://www.courtbouillon.org/blog/00049-weasyprint-61).

Python API

* `DocumentMetadata.attachments` is now a list of `Attachment` objects, not
a list of `(url, description)` tuples.

New features

* 1219, 2017: Support var() in shorthand and multiple-value functions
* 1986: Support percentages for opacity
* 2050: Build executable file for Windows
* 2000: Support select fields
* 1993: Handle background-attachment: fixed to cover the whole page
* 2023, 2022: Allow text-based file objects for HTML and CSS classes
* 2014: Remove warnings for PDF/A and PDF/UA compatibility

Bug fixes

* 2052, 1869: Handle attachments for PDF/A documents
* 2013, 2051: Apply margin to running tables
* 1278, 1884: Draw collapsed borders of running tables
* 2029: Fix page counter in non-root absolute boxes
* 2043: Fix text-anchor on SVG tspan elements
* 1968, 2039: Use cell's border-height to calculate table row height
* 2030: Ensure that bounding box is set to invisible text tags
* 2040, 2041: Don’t crash on malformed URLs
* 2026: Don’t break pages when fixed-height elements don’t overflow page
* 2038: Don’t mix original streams when drawing transparent text
* 2016: Avoid duplication when breaking out-of-flow boxes
* 2012: Don’t crash when CSS properties have no value
* 2010, 1287: Fix many corner cases with CSS variables
* 1996: Don’t crash when drawing groove/ridge collapsed borders
* 1982: Fix SVG markers size, position and drawing

Contributors

* Guillaume Ayoub
* kygoh
* Lucie Anglade
* Timo Ramsauer
* Alexander Gitter
* Michael Lisitsa
* Vagner José Nicolodi
* Manolis Stamatogiannakis
* Pascal de Bruijn
* Viktor Shevtsov
* Eduardo Gonzalez
* Kesara Rathnayake

Backers and sponsors

* Spacinov
* Kobalt
* Grip Angebotssoftware
* Manuel Barkhau
* SimonSoft
* Menutech
* KontextWork
* René Fritz
* Simon Sapin
* Arcanite
* TrainingSparkle
* Healthchecks.io
* Hammerbacher
* Docraptor
* Yanal-Yvez Fargialla
* Morntag
* NBCO

Bug fixes

* 1982: Fix SVG markers size, position and drawing
* 23cfc775: Draw background behind absolutely positioned replaced boxes
* fe2f0c69: Don’t crash with bitmap fonts with no "glyf" table
* 14605225: Improve SVG text-anchor attribute

Contributors

* Guillaume Ayoub

Backers and sponsors

* Spacinov
* Kobalt
* Grip Angebotssoftware
* Manuel Barkhau
* SimonSoft
* Menutech
* KontextWork
* NCC Group
* René Fritz
* Nicola Auchmuty
* Syslifters
* Hammerbacher
* TrainingSparkle
* Daniel Kucharski
* Healthchecks.io
* Yanal-Yvez Fargialla
* WakaTime
* Paheko
* Synapsium
* DocRaptor

Bug fixes

* 1973: Fix crash caused by wrong UTF-8 indices

Contributors

* Guillaume Ayoub

Backers and sponsors

* Spacinov
* Kobalt
* Grip Angebotssoftware
* Manuel Barkhau
* SimonSoft
* Menutech
* KontextWork
* NCC Group
* René Fritz
* Nicola Auchmuty
* Syslifters
* Hammerbacher
* TrainingSparkle
* Daniel Kucharski
* Healthchecks.io
* Yanal-Yvez Fargialla
* WakaTime
* Paheko
* Synapsium
* DocRaptor

Read about this release [on our blog](https://www.courtbouillon.org/blog/00045-weasyprint-60).

New features

* 1903: Print form fields
* 1922: Add support for textLength and lengthAdjust in SVG text elements
* 1965: Handle `<wbr>` tag
* 1970: Handle y offset of glyphs
* 1909: Add a --timeout option

Bug fixes

* 1887: Fix footnote-call displayed incorrectly for some fonts
* 1890: Fix page-margin boxes layout algorithm
* 1908: Fix IndexError when rendering PDF version 1.4
* 1906: Apply text transformations to first-letter pseudo elements
* 1915: Avoid footnote appearing before its call
* 1934: Fix balance before "column-span: all"
* 1935: Only draw required glyph with OpenType-SVG fonts
* 1595: Don’t draw clipPath when defined after reference
* 1895: Don’t ignore min-width when computing cell size
* 1899: Fix named pages inheritance
* 1936: Avoid page breaks caused by children of overflow hidden boxes
* 1943: Use bleed area for page’s painting area
* 1946: Use margin box of children to define available width for leaders

Contributors

* Guillaume Ayoub
* Sahil Rohilla
* Azharuddin Syed
* kygoh
* Andy Lenards
* Gaurav Samudra
* Michael Wedl
* Lucie Anglade
* Obeida Shamoun
* Evgeniy Krysanov

Backers and sponsors

* Spacinov
* Kobalt
* Grip Angebotssoftware
* Manuel Barkhau
* SimonSoft
* Menutech
* KontextWork
* NCC Group
* René Fritz
* Nicola Auchmuty
* Syslifters
* Hammerbacher
* TrainingSparkle
* Daniel Kucharski
* Healthchecks.io
* Yanal-Yvez Fargialla
* WakaTime
* Paheko
* Synapsium
* DocRaptor