From ac1d34eb0c7e2c5537b5e4d41fce40916ecd21f8 Mon Sep 17 00:00:00 2001
From: Kovid Goyal <kovid@kovidgoyal.net>
Date: Wed, 14 Jan 2026 10:45:52 +0530
Subject: [PATCH] Bump version of harfbuzz for CVE

---
 bypy/sources.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bypy/sources.json b/bypy/sources.json
index 5165e3a8f..d62d83a20 100644
--- a/bypy/sources.json
+++ b/bypy/sources.json
@@ -262,10 +262,10 @@
     },
 
     {
-        "name": "harfbuzz 8.5.0",
+        "name": "harfbuzz 12.3.0",
         "unix": {
             "file_extension": "tar.xz",
-            "hash": "sha256:77e4f7f98f3d86bf8788b53e6832fb96279956e1c3961988ea3d4b7ca41ddc27",
+            "hash": "sha256:8660ebd3c27d9407fc8433b5d172bafba5f0317cb0bb4339f28e5370c93d42b7",
             "urls": ["https://github.com/harfbuzz/harfbuzz/releases/download/{version}/{filename}"]
         }
     },