head 1.13; access; symbols pkgsrc-2026Q1:1.13.0.4 pkgsrc-2026Q1-base:1.13 pkgsrc-2025Q4:1.13.0.2 pkgsrc-2025Q4-base:1.13 pkgsrc-2025Q3:1.9.0.6 pkgsrc-2025Q3-base:1.9 pkgsrc-2025Q2:1.9.0.4 pkgsrc-2025Q2-base:1.9 pkgsrc-2025Q1:1.9.0.2 pkgsrc-2025Q1-base:1.9 pkgsrc-2024Q4:1.7.0.2 pkgsrc-2024Q4-base:1.7 pkgsrc-2024Q3:1.6.0.4 pkgsrc-2024Q3-base:1.6 pkgsrc-2024Q2:1.6.0.2 pkgsrc-2024Q2-base:1.6 pkgsrc-2024Q1:1.5.0.2 pkgsrc-2024Q1-base:1.5 pkgsrc-2023Q4:1.4.0.2 pkgsrc-2023Q4-base:1.4 pkgsrc-2023Q2:1.1.0.2 pkgsrc-2023Q2-base:1.1; locks; strict; comment @# @; 1.13 date 2025.12.13.19.55.16; author pin; state Exp; branches; next 1.12; commitid CogZdsQ4qwb7LhmG; 1.12 date 2025.12.03.18.23.52; author pin; state Exp; branches; next 1.11; commitid O7TgsonfoIWGzZkG; 1.11 date 2025.10.27.12.05.01; author pin; state Exp; branches; next 1.10; commitid YsrLzbBQH55sFcgG; 1.10 date 2025.10.16.10.51.28; author pin; state Exp; branches; next 1.9; commitid MOehoW2HtMb9CMeG; 1.9 date 2025.03.12.13.29.14; author pin; state Exp; branches; next 1.8; commitid KkzL50izZ8YIuMMF; 1.8 date 2025.02.21.14.36.35; author pin; state Exp; branches; next 1.7; commitid 02EwgICJvc3HtlKF; 1.7 date 2024.10.19.21.09.21; author pin; state Exp; branches; next 1.6; commitid 9HTIop9ELBvxFjuF; 1.6 date 2024.05.18.07.03.55; author pin; state Exp; branches; next 1.5; commitid XZVgFJFJHN3qWraF; 1.5 date 2024.03.18.09.04.33; author pin; state Exp; branches; next 1.4; commitid LC3gycFeX0OmzC2F; 1.4 date 2023.12.09.22.01.45; author pin; state Exp; branches; next 1.3; commitid YGs3eOeAtR4i5QPE; 1.3 date 2023.08.17.02.49.19; author pin; state dead; branches; next 1.2; commitid B5SE260hfm57n5BE; 1.2 date 2023.07.10.19.43.05; author pin; state Exp; branches; next 1.1; commitid 6cQJtxnYzPGDciwE; 1.1 date 2023.05.24.12.17.49; author pin; state Exp; branches; next ; commitid UyJJHHEDx2iwfdqE; desc @@ 1.13 log @textproc/typst: update to 0.14.2 Version 0.14.2 (December 12, 2025) Security Updated the WebAssembly runtime used for executing plugins. The version used in Typst 0.14.0 and 0.14.1 suffers from a memory handling vulnerability. Based on our investigation, the vulnerability would be very hard to exploit in practice, but an exploit could theoretically be feasible. In any case, we recommend upgrading to Typst 0.14.2. This holds in particular for local users. In the web app, the bug is not critical as the browser offers an extra layer of protection. Typst 0.13.1 and below are not affected by this vulnerability. Technical details: The wasmi WebAssembly runtime versions used in 0.14.0 and 0.14.1 have a use-after-free memory handling bug in certain memory growth situations. Specifically, the bug occurs when the plugin tries to grow its memory, but allocating the requested amount of memory fails. Based on our investigation, the bug is hard to trigger in practice as the WebAssembly linear memory is always limited to 4GB on a technical level and modern operating systems rarely fail to serve a 4GB memory allocation request (typically not even under RAM pressure). Once the bug is triggered, it would also still be very challenging to turn it into an actual exploit. Regardless, we recommend upgrading to Typst 0.14.2 for protection against a potential exploit. Diagnostics Added a hint when array.sorted fails because a pair of elements could not be compared. This hint aids with fixing bugs in user code that were surfaced by a change in internal sorting behavior in Typst 0.14.1. @ text @$NetBSD: patch-Cargo.toml,v 1.12 2025/12/03 18:23:52 pin Exp $ Work around unpublished crate. --- Cargo.toml.orig 2025-12-03 17:36:28.602478465 +0000 +++ Cargo.toml @@@@ -33,7 +33,7 @@@@ typst-syntax = { path = "crates/typst-sy typst-timing = { path = "crates/typst-timing", version = "0.14.2" } typst-utils = { path = "crates/typst-utils", version = "0.14.2" } typst-assets = "0.14.2" -typst-dev-assets = { git = "https://github.com/typst/typst-dev-assets", tag = "v0.14.2" } +typst-dev-assets = { path = "typst-dev-assets-fe6cad916d8b20c20742512b2a3f3b247a2bc4f8" } arrayvec = "0.7.4" az = "1.2" base64 = "0.22" @ 1.12 log @textproc/typst: update to 0.14.1 PDF export Fixed regression where links to labelled elements would sometimes not work correctly Fixed bug where PDF text attributes could be written incorrectly Fixed crash in link handling Fixed crash for zero-sized pages Fixed crash when a table vline or hline has an out-of-bounds index Fixed crash in formatting of font-related PDF export errors Fixed crash when a footnote or place element was queried and reinserted into the document Fixed crash for PNGs with invalid metadata Fixed bug where text in SVGs with fill-and-stroke paint order could be exported incorrectly Fixed bug with layer isolation in SVGs where blending/masking is used Fixed that table headers could be tagged incorrectly in some scenarios Fixed issues where generated PDFs could differ between 32-bit and 64-bit systems Upgraded JPEG decoder used during PDF export for improved compatibility, fixing a case where a valid JPEG was rejected A PDF document information dictionary that would be empty is now fully omitted instead A rare crash in PDF tagging was turned into a compiler error HTML export Fixed export of table headers and footers with gutter A page set rule in HTML export is now a warning instead of a hard error, in line with how unsupported elements are generally treated Math Fixed regression where arrow.l.r could not be used as an accent anymore Fixed that single-letter strings did not react to spaces around them like multi-letter strings do Fixed that spacing around mat and vec with a fence delimiter was whitespace-dependent Fixed height calculation for horizontally stretched glyphs Model Fixed regression where Typst would error in heading numbering functions that don't handle the counter state (0,). This can occur in the first layout iteration. Such errors are usually automatically caught by Typst, which was not the case here. Text Fixed regression where Typst would synthesize superscripts for some fonts even when typographic glyphs were available Fixed regression where some oblique fonts would be classified as italic Scripting Fixed crash due to violated invariants in array.sorted Fixed crashes due to overflow in calc.rem, calc.rem-euclid, calc.div-euclid, calc.quo, and calc.gcd Upgraded WebAssembly runtime, fixing a bug that plugins could run into Command Line Interface Compiling to standard output in combination with --deps --deps-format=make (which results in an error) will not produce an empty Make dependency file as a side effect anymore Development Increased minimum supported Rust version to 1.89 @ text @d1 1 a1 1 $NetBSD$ d8 5 a12 5 typst-timing = { path = "crates/typst-timing", version = "0.14.1" } typst-utils = { path = "crates/typst-utils", version = "0.14.1" } typst-assets = "0.14.1" -typst-dev-assets = { git = "https://github.com/typst/typst-dev-assets", tag = "v0.14.1" } +typst-dev-assets = { path = "typst-dev-assets-03addcfb64f3f95209464a521e6aa49645bd271a" } @ 1.11 log @textproc/typst: update to 0.14.0 Highlights Typst now produces accessible PDFs out of the box, with opt-in support for stricter checks and conformance to PDF/UA-1 Typst now supports all PDF/A standards PDFs can now be used as images (thanks to @@LaurenzV) Added support for character-level justification (can significantly improve the appearance of justified text) Added support for many more built-in elements in HTML export Added typed HTML API (e.g. html.div) with individually typed attributes Added support for multiple headers and subheaders in tables Added title element for displaying the document title Added frac.style property for producing skewed and inline fractions PDF export PDF export was fully rewritten to use the new krilla library, fixing various bugs and enabling many improvements. Known fixes are listed below, but there will likely be other changes in how the output behaves. If you spot any regressions, please report them on GitHub. (Thanks to @@LaurenzV for creating krilla!) Typst now produces accessible PDFs out of the box. Such documents are suitable for consumption in a wide range of circumstances. That not only includes consumption by people with permanent or temporary disabilities, but also by those with different devices or preferences. Typst PDFs are now tagged by default. Tags are rich metadata that PDF viewers can use to make the document consumable in other ways than visually (e.g., through a screen reader). In addition, Typst can now emit documents conforming to the PDF/UA-1 standard. (PDF/UA-2 is not yet supported, but planned.) There is an increasing amount of existing and upcoming legislation requiring documents to be accessible, for instance, the European Accessibility Act and the Americans with Disabilities Act. For more details on all of this, read the new Accessibility Guide. Typst now supports all PDF/A standards: PDF/A-1b, PDF/A-1a, PDF/A-2b, PDF/A-2u, PDF/A-2a, PDF/A-3b, PDF/A-3u, PDF/A-3a, PDF/A-4, PDF/A-4f, and PDF/A-4e. See the expanded PDF/A documentation for guidance on how to select a suitable standard. Typst now supports the PDF versions 1.4, 1.5, 1.6, and 2.0 in addition to PDF 1.7. See the relevant section of the PDF documentation for details. Added pdf.artifact function for marking content as not semantically meaningful Added experimental pdf.header-cell, pdf.data-cell, and pdf.table-summary functions for enhancing accessibility of documents with complex tables. These functions are guarded by the a11y-extras feature. They do not have a final interface and will be removed in the future, either through integration into table functions or through full removal. PDF heading bookmarks now contain the heading's numbering Attachments Renamed pdf.embed to pdf.attach (the old name will remain as a deprecated alias until Typst 0.15) The mime property of pdf.attach is now checked for syntactical correctness (Minor breaking change) Fixed parsing of the data argument of pdf.attach Attachments now smartly determine whether they should be compressed Text extraction (i.e. copy paste) Now works correctly even when multiple different characters result in the same glyph Spaces between words at which a natural line break occurred are now correctly retained for text extraction Fixed mapping of hyphenation artifacts to Unicode text Images CMYK images now work properly in PDF export Improved export of text in SVG images with a filter Improved compatibility of SVG images with Quartz rendering engine (the engine used in Apple Preview) Improved handling of SVG images with high group nesting depth Fixed a bug with text in patterns Fixed gradients with transparency HTML export Added support for many more built-in elements (the Model category is now fully covered) The image element The footnote and footnote.entry element The outline and outline.entry element The bibliography element The smartquote element The sub and super elements The underline, overline, strike, and highlight elements The smallcaps element The lower and upper functions Added typed HTML API (e.g. html.div) with individually typed attributes For example, to generate a video element you can now write #html.video(width: 400, src: "sunrise.mp4") instead of #html.elem("video", attrs: (width: "400", src: "sunrise.mp4")). Note how the width attribute takes an integer instead of a string. Added support for intra-doc link targets The raw element Added syntax highlighting support Block-level raw elements now emit both a and a
 tag
        The language tag of raw elements is now preserved as a data-lang attribute on the  tag
    The authors and keywords properties of the document function now yield corresponding HTML  tags
    The html.elem function now supports custom HTML element names
    Improved encoding of html.frame
    Empty attributes are now encoded with shorthand syntax (e.g. )
    Zero-sized horizontal weak spacing (h(0pt, weak: true)) does not cause a "was ignored during HTML export" warning anymore, so it can be used to destruct surrounding spaces without producing any output, as in paged export
    Fixed encoding of 
 and