From ed87c14135ece425b0d3bffe317fe815878a89b4 Mon Sep 17 00:00:00 2001
From: neon <18559658+neonsolstice@users.noreply.github.com>
Date: Wed, 17 Jun 2026 20:25:12 +0000
Subject: [PATCH] test(user): use valid PNG fixture for avatar test (sharp 0.35
 libpng)

---
 server/src/modules/user/user-avatar.service.test.ts | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/server/src/modules/user/user-avatar.service.test.ts b/server/src/modules/user/user-avatar.service.test.ts
index d853f9ada..d3cdd5f3a 100644
--- a/server/src/modules/user/user-avatar.service.test.ts
+++ b/server/src/modules/user/user-avatar.service.test.ts
@@ -2,7 +2,11 @@ import { BadRequestException, ForbiddenException } from '@nestjs/common';
 
 import { UserAvatarService } from './user-avatar.service';
 
-const ONE_BY_ONE_PNG = Buffer.from('iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/x8AAwMCAO+lmL8AAAAASUVORK5CYII=', 'base64');
+// Must be a strictly valid PNG: sharp >= 0.35 bundles a stricter libpng that rejects minimal hand-crafted streams.
+const ONE_BY_ONE_PNG = Buffer.from(
+  'iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAACXBIWXMAAAPoAAAD6AG1e1JrAAAADUlEQVQImWM4YWT0HwAFHgIsBxDy5AAAAABJRU5ErkJggg==',
+  'base64',
+);
 
 describe('UserAvatarService', () => {
   const userRepo = {