From ad18a41e3e056213ab6ed6539ce18c7b9de74b94 Mon Sep 17 00:00:00 2001
From: Pankaj <5011836+antick@users.noreply.github.com>
Date: Fri, 16 Oct 2026 09:25:11 +0000
Subject: [PATCH] fix(landing): bump sharp to ^0.35.5 for CVE-2026-96889

Align the direct landing dependency with sharp 0.35.5 so GHSA-wq5f-xc86-pv6w
(librsvg) is addressed in package manifests, not only via the workspace override.
---
 apps/landing/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/landing/package.json b/apps/landing/package.json
index ff8f54f..bc8dd4a 100644
--- a/apps/landing/package.json
+++ b/apps/landing/package.json
@@ -22,7 +22,7 @@
     "clsx": "2.1.1",
     "react": "19.3.0",
     "react-dom": "19.3.0",
-    "sharp": "0.35.4",
+    "sharp": "^0.35.5",
     "tailwind-merge": "3.7.0",
     "tailwindcss": "4.3.3"
   },