Only the latest versions of deps that hold data are acceptable

* gflanguages
* shaperglot
* axisregistry
* glyphsets

Rule enforced by Google Fonts profile's section of setup.py
(issue #4351)

CHANGELOG.md

@@ -2,10 +2,15 @@ Below are the most important changes from each release.
 A more detailed list of changes is available in the corresponding milestones for each release in the Github issue tracker (https://github.com/googlefonts/fontbakery/milestones?state=closed).
 
 
-## Upcoming release: 0.10.6 (2023-Dec-??)
+## Upcoming release: 0.10.7 (2023-Dec-??)
   - ...
 
 
+## 0.10.6 (2023-Dec-01)
+### Note-worthy code changes
+  - There are a few Google Fonts profile dependencies that MUST always be up-to-date because they hold data: **glyphsets**, **gflanguages**, **shaperglot** and **axisregistry**. These will from now on be handled differenty on `setup.py`, so that only their latest available packages are acceptable for installation. Thanks @yanone for noticing and reporting this issue. (issue #4351)
+
+
 ## 0.10.5 (2023-Dec-01)
 ### Note-worthy code changes
   - Serialize a check's documentation along with the other properties so reporters can use the info. (PR #4345)

setup.py

@@ -51,23 +51,33 @@
 
 adobefonts_extras = []
 
+
+# These Google Fonts profile dependencies contain data that is critical to
+# always be up-to-date, so we treat any update to these deps the same way we would
+# deal with API-breaking updates. Only the latest released version is acceptable:
+googlefonts_always_latest = [
+    "axisregistry>=0.4.5",
+    "gflanguages>=0.5.10",
+    "glyphsets>=0.6.6",
+    "shaperglot>=0.3.1",
+]
+
+
 googlefonts_extras = (
     [
-        "axisregistry>=0.3.0",
         f"beautifulsoup4{BEAUTIFULSOUP4_VERSION}",
         "dehinter>=3.1.0",  # 3.1.0 added dehinter.font.hint function
         "font-v>=0.6.0",  # com.google.fonts/check/fontv produces an ERROR with font-v
         # version 0.5.0 or earlier because it uses the method
         # FontVersion.get_name_id5_version_string which was added in version 0.6.0
         f"fontTools[lxml,unicode]{FONTTOOLS_VERSION}",
-        "gflanguages>=0.3.0",  # 0.3.0 had an api simplification/update
         # (see https://github.com/googlefonts/gflanguages/pull/7)
-        "glyphsets>=0.6.6",  # api update: glyph_data.glyphsets_fulfilled
         "protobuf>=3.7.0, <4",  # 3.7.0 fixed a bug on parsing some METADATA.pb files.
         # We cannot use v4 because our protobuf files have been compiled with v3.
         # (see https://github.com/fonttools/fontbakery/issues/2200)
         f"vharfbuzz{VHARFBUZZ_VERSION}",
     ]
+    + googlefonts_always_latest
     + shaping_extras
     + ufo_sources_extras
 )
@@ -81,7 +91,7 @@
     f"ufo2ft{UFO2FT_VERSION}",
     f"vharfbuzz{VHARFBUZZ_VERSION}",
     "uharfbuzz",
-    "shaperglot>=0.2.0",
+    "shaperglot>=0.3.1",
 ]
 
 iso15008_extras = [