chore(deps): update dependency weasyprint to v68

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
weasyprint (changelog)	==67.0 → ==68.0

---

Release Notes

Kozea/WeasyPrint (weasyprint)

v68.0

Compare Source

This is a security update (CVE-2025-68616).

We strongly recommend to upgrade WeasyPrint to the latest version if you use the default_url_fetcher function in your custom URL fetcher, or if you use the allowed_protocols parameter of the default_url_fetcher function.

Read about this release on our blog.

Security

• Always use URL fetcher for HTTP redirects

Python API

• default_url_fetcher() is deprecated, use the new URLFetcher class instead, see URL Fetchers for more information about URL fetchers
• DocumentMetadata.generate_rdf_metadata is now a method that can be overridden instead of a parameter, see Factur-X / ZUGFeRD (Electronic Invoices) for examples to create e-invoices

Features

• #​2609, #​2603, #​351: Refactor URL fetcher API
• #​2632: Support legacy 0 value for angles
• #​2627: Add font-face support to SVG
• #​2646, #​2255: Add font shorthand support for SVG text elements
• #​2590, #​1749: Honor language-specific rules for text-transform
• #​2645, #​2613: Improve SVG and SVG emojis rendering
• #​2658, #​2583: Add CLI for Factur-X / ZUGFeRD e-invoices

Bug fixes

• #​2649: Refactor URL fetcher API
• #​2643, #​2628: Handle box-sizing: border-box in grid layout
• #​2641, #​1875: Process whitespace after checking all pending targets
• #​2488, #​2485: Preserve page groups during layout repagination
• #​2642, #​2631: Don’t use isolated transparency groups
• #​2637: Fix repeating radial gradients rendering
• #​2622: Fix validation of colors
• #​2626: Share grid items rendering advancement between a box and its copies
• #​2621: Correctly handle fallback values of attr()
• #​2619: Fix SVG fonts
• #​2629: Always define extra skip height that may be used after
• #​2648: Fix numbers validation in font-feature-settings
• #​2648: Fix keyword values for text-decoration-thickness
• #​2661: Respect inline images when defining minimum table width

Documentation

• #​2638: Update Python command for Windows installation steps

Contributors

• Guillaume Ayoub
• Jurriaan Pruis
• Mohamed Hamed
• Alexandra Usatenko
• Andrea Corna
• Aoishik Khan
• Joe

Backers and sponsors

• Spacinov
• Syslifters
• Kobalt
• Simon Sapin
• Grip Angebotssoftware
• Manuel Barkhau
• Simonsoft
• KontextWork
• Menutech
• TrainingSparkle
• Healthchecks.io
• Method B
• FieldHub
• Hammerbacher
• Yanal-Yves Fargialla
• Morntag
• Piloterr
• Xavid
• Charlie S.
• Prothesis Dental Solutions
• Kai DeLorenzo

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) in timezone Europe/Amsterdam, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}