From fbd03de54ceb5fa6b513d06ac552ffd197dd9893 Mon Sep 17 00:00:00 2001
From: Kovid Goyal <kovid@kovidgoyal.net>
Date: Wed, 14 Jan 2026 14:19:54 +0530
Subject: [PATCH] Bump libpng version for CVE

---
 bypy/sources.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bypy/sources.json b/bypy/sources.json
index d62d83a20..227aef04b 100644
--- a/bypy/sources.json
+++ b/bypy/sources.json
@@ -154,10 +154,10 @@
     },
 
     {
-        "name": "libpng 1.6.52",
+        "name": "libpng 1.6.54",
         "unix": {
             "file_extension": "tar.xz",
-            "hash": "sha256:36bd726228ec93a3b6c22fdb49e94a67b16f2fe9b39b78b7cb65772966661ccc",
+            "hash": "sha256:01c9d8a303c941ec2c511c14312a3b1d36cedb41e2f5168ccdaa85d53b887805",
             "urls": ["https://downloads.sourceforge.net/sourceforge/libpng/{filename}"]
         }
     },