Skip to content

chore(deps): bump github.com/klauspost/compress from 1.17.9 to 1.18.7 in /app - #1707

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/app/github.com/klauspost/compress-1.18.7
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/app/github.com/klauspost/compress-1.18.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •

Copy link
Copy Markdown
Contributor

Bumps github.com/klauspost/compress from 1.17.9 to 1.18.7.

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.7

  • Fix s2.NewDict OOB read.

Security release without other changes.

Full Changelog: klauspost/compress@v1.18.6...v1.18.7

v1.18.6

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.5...v1.18.6

v1.18.5

What's Changed

Full Changelog: klauspost/compress@v1.18.4...v1.18.5

v1.18.4

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.2...v1.18.4

v1.18.3

Downstream CVE-2025-61728

See golang/go#77102

Full Changelog: klauspost/compress@v1.18.2...v1.18.3

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 20, 2026
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.17.9 to 1.18.7.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.17.9...v1.18.7)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/app/github.com/klauspost/compress-1.18.7 branch from 5293e22 to d248b7c Compare November 9, 2026 00:54

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants