build(deps): bump fpdf2 from 2.8.8 to 2.8.9

[dependabot]

Bumps fpdf2 from 2.8.8 to 2.8.9.

Release notes

Sourced from fpdf2's releases.

Improved PDF standards compliance, page number alias substitution, and rendering, plus other bug fixes

[2.8.9] - 2026-09-29

Added

• align parameter for FPDF.alias_nb_pages() to control horizontal alignment (Align.L, Align.C, Align.R) of substitution text inside reserved alias space - cf. [issue #1926](py-pdf/fpdf2#1926) - thanks to @​prateek-dagar
• support for page number alias substitution with bidirectional / RTL text shaping - cf. [issue #1925](py-pdf/fpdf2#1925) - thanks to @​prateek-dagar
• appearance parameter for FPDF.file_attachment_annotation(), accepting FileAttachmentAppearance.HIDDEN to give the annotation an empty appearance stream so its default icon is not displayed while the file stays embedded and reachable - cf. [issue #561](py-pdf/fpdf2#561) - thanks to @​ChrisJr404
• Turkish translation of the Tuto 7 - Creating PDF/A Documents tutorial section, along with fixes for duplicated clauses and mistranslations in the Tuto 2, 4 & 6 descriptions - cf. [PR #1951](py-pdf/fpdf2#1951) - thanks to @​ihsandeniz

Fixed

• escaped Markdown markers adjacent to emphasis markers in link labels no longer lose literal characters or apply unintended styling
• PDF serialization of boolean and null values: booleans in arrays and dictionaries now use lowercase true and false, including in mixed numeric/boolean arrays; None in arrays is serialized as null; and filtering empty dictionary fields preserves False and numeric zero values - thanks to @​agustin18
• SVG percentage width and height values with surrounding whitespace (e.g. width="100% ") no longer raise ValueError - thanks to @​Anai-Guo
• PDF/A-1 documents using TrueType or CFF-based CID fonts now include a /CIDSet stream in each font descriptor, as required by ISO 19005-1 (veraPDF rule 6.3.5-3) - cf. [issue #88](py-pdf/fpdf2#88)
• split font /ToUnicode and /Encoding CMap mappings into blocks of at most 100 entries, as required by the PDF specification - cf. [issue #1952](py-pdf/fpdf2#1952)
• visual gap in rendering subsequent text after {nb} page alias when text shaping is enabled - cf. [issue #1090](py-pdf/fpdf2#1090) - thanks to @​prateek-dagar
• FPDF.write_html() no longer raises IndexError: pop from empty list when a <ul> or <ol> element carries a line-height that is not a bare number (e.g. line-height: normal or line-height: 1.5em); such values are now ignored, and the default line height is used, consistently with <p line-height="x"> - thanks to @​Anai-Guo
• FPDF.write_html() now renders list bullets with correct font styling instead of inheriting preceding heading (e.g. <h1>) styles - cf. [issue #1921](py-pdf/fpdf2#1921) - thanks to @​prateek-dagar
• table cells landing in the wrong column when a row was covered by several rowspans that did not start in column order - cf. [issue #1948](py-pdf/fpdf2#1948)
• Padding.new() now accepts 1-element sequences per CSS shorthand rules and preserves existing Padding instances without redundant allocations

Changed

• Refactored _tt_font_widths to reuse _cid_font_widths glyph interval compression logic - thanks to @​agustin18

Changelog

Sourced from fpdf2's changelog.

[2.8.9] - 2026-09-29

Added

• align parameter for FPDF.alias_nb_pages() to control horizontal alignment (Align.L, Align.C, Align.R) of substitution text inside reserved alias space - cf. [issue #1926](py-pdf/fpdf2#1926) - thanks to @​prateek-dagar
• support for page number alias substitution with bidirectional / RTL text shaping - cf. [issue #1925](py-pdf/fpdf2#1925) - thanks to @​prateek-dagar
• appearance parameter for FPDF.file_attachment_annotation(), accepting FileAttachmentAppearance.HIDDEN to give the annotation an empty appearance stream so its default icon is not displayed while the file stays embedded and reachable - cf. [issue #561](py-pdf/fpdf2#561) - thanks to @​ChrisJr404
• Turkish translation of the Tuto 7 - Creating PDF/A Documents tutorial section, along with fixes for duplicated clauses and mistranslations in the Tuto 2, 4 & 6 descriptions - cf. [PR #1951](py-pdf/fpdf2#1951) - thanks to @​ihsandeniz

Fixed

• escaped Markdown markers adjacent to emphasis markers in link labels no longer lose literal characters or apply unintended styling
• PDF serialization of boolean and null values: booleans in arrays and dictionaries now use lowercase true and false, including in mixed numeric/boolean arrays; None in arrays is serialized as null; and filtering empty dictionary fields preserves False and numeric zero values - thanks to @​agustin18
• SVG percentage width and height values with surrounding whitespace (e.g. width="100% ") no longer raise ValueError - thanks to @​Anai-Guo
• PDF/A-1 documents using TrueType or CFF-based CID fonts now include a /CIDSet stream in each font descriptor, as required by ISO 19005-1 (veraPDF rule 6.3.5-3) - cf. [issue #88](py-pdf/fpdf2#88)
• split font /ToUnicode and /Encoding CMap mappings into blocks of at most 100 entries, as required by the PDF specification - cf. [issue #1952](py-pdf/fpdf2#1952)
• visual gap in rendering subsequent text after {nb} page alias when text shaping is enabled - cf. [issue #1090](py-pdf/fpdf2#1090) - thanks to @​prateek-dagar
• FPDF.write_html() no longer raises IndexError: pop from empty list when a <ul> or <ol> element carries a line-height that is not a bare number (e.g. line-height: normal or line-height: 1.5em); such values are now ignored, and the default line height is used, consistently with <p line-height="x"> - thanks to @​Anai-Guo
• FPDF.write_html() now renders list bullets with correct font styling instead of inheriting preceding heading (e.g. <h1>) styles - cf. [issue #1921](py-pdf/fpdf2#1921) - thanks to @​prateek-dagar
• table cells landing in the wrong column when a row was covered by several rowspans that did not start in column order - cf. [issue #1948](py-pdf/fpdf2#1948)
• Padding.new() now accepts 1-element sequences per CSS shorthand rules and preserves existing Padding instances without redundant allocations

Changed

• Refactored _tt_font_widths to reuse _cid_font_widths glyph interval compression logic - thanks to @​agustin18

Commits

• f6e67a4 release fpdf2 2.8.9 (#1976)
• 93fa00b small fixes (#1975)
• 9e2caae fix: embed a /CIDSet stream in CIDFont descriptors for PDF/A-1 (#1968)
• 06408e8 fix: serialize None as null keyword in PDFArray (#1974)
• dd0d451 fix: serialize booleans as lowercase keywords in create_dictionary_string (#1...
• a78182b fix: serialize booleans as lowercase keywords in PDFArray (#1969)
• 8006f67 Update github/codeql-action action to v4.38.2 (#1971)
• f2cad56 Update crate-ci/typos action to v1.50.3 (#1972)
• 2bd6d50 add swimmingbrain as a contributor for code (#1967)
• e846967 fix: insert rowspan placeholders in column order (#1949)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 4f710e3f-3f70-4c21-a3e5-bd565a370f7b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}