From eed6046be0f45ac78fc778efbcb7d710e8ece67e Mon Sep 17 00:00:00 2001
From: Kovid Goyal <kovid@kovidgoyal.net>
Date: Wed, 14 Jan 2026 14:20:10 +0530
Subject: [PATCH] Bump libpng version for CVE

---
 bypy/sources.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bypy/sources.json b/bypy/sources.json
index 836701f4eb..ec94ea276c 100644
--- a/bypy/sources.json
+++ b/bypy/sources.json
@@ -242,10 +242,10 @@
     },
 
     {
-        "name": "libpng 1.6.52",
+        "name": "libpng 1.6.54",
         "unix": {
             "file_extension": "tar.xz",
-            "hash": "sha256:36bd726228ec93a3b6c22fdb49e94a67b16f2fe9b39b78b7cb65772966661ccc",
+            "hash": "sha256:01c9d8a303c941ec2c511c14312a3b1d36cedb41e2f5168ccdaa85d53b887805",
             "urls": ["https://downloads.sourceforge.net/sourceforge/libpng/{filename}"]
         }
     },