From ffa8357d8bf316d8812dc0f0332b20813d283e68 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 28 Aug 2026 02:07:04 +0000
Subject: [PATCH] build(deps): bump png from 0.17.16 to 0.18.1

Bumps [png](https://github.com/image-rs/image-png) from 0.17.16 to 0.18.1.
- [Changelog](https://github.com/image-rs/image-png/blob/master/CHANGES.md)
- [Commits](https://github.com/image-rs/image-png/commits)

---
updated-dependencies:
- dependency-name: png
  dependency-version: 0.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock                   | 6 +++---
 Cargo.toml                   | 2 +-
 crates/ffai-bench/Cargo.toml | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index b522fc1..bd1051c 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3066,11 +3066,11 @@ checksum = "19f132c84eca552bf34cab8ec81f1c1dcc229b811638f9d283dceabe58c5569e"
 
 [[package]]
 name = "png"
-version = "0.17.16"
+version = "0.18.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "82151a2fc869e011c153adc57cf2789ccb8d9906ce52c0b39a6b5697749d7526"
+checksum = "60769b8b31b2a9f263dae2776c37b1b28ae246943cf719eb6946a1db05128a61"
 dependencies = [
- "bitflags 1.3.2",
+ "bitflags 2.13.1",
  "crc32fast",
  "fdeflate",
  "flate2",
diff --git a/Cargo.toml b/Cargo.toml
index 37cf2d8..86023bb 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -51,7 +51,7 @@ sha2 = "0.10"
 serde_json = "1"
 regex = "1"
 rayon = "1"
-png = "0.17"
+png = "0.18"
 
 # ---- our own codecs (Principle 7), from crates.io ----
 # Still-image decoding comes from home AND publishes. `rusty_png` is our
diff --git a/crates/ffai-bench/Cargo.toml b/crates/ffai-bench/Cargo.toml
index 5b04a78..fffcc73 100644
--- a/crates/ffai-bench/Cargo.toml
+++ b/crates/ffai-bench/Cargo.toml
@@ -27,7 +27,7 @@ regex = { workspace = true }
 # Only the synthetic-corpus generator examples use these; the library needs
 # neither a rasterizer nor a PNG encoder.
 fontdue = "0.9"
-png = "0.17"
+png = "0.18"
 # TESTS ONLY, and only one test: `vlm::tests::a_stub_engine_refuses_...` needs
 # a registered stub VLM engine to prove the harness refuses it. Keeping this
 # out of [dependencies] matters — ffai-bench must not gain a dependency on a