build(deps): bump the go-modules group across 1 directory with 3 updates

[dependabot]

Bumps the go-modules group with 3 updates in the / directory: github.com/klauspost/compress, golang.org/x/sys and mvdan.cc/sh/v3.

Updates github.com/klauspost/compress from 1.19.2 to 1.20.0

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.20.0

What's Changed

• Add lzw reader/writer by @​klauspost in klauspost/compress#1189
• xpress: add Microsoft XPRESS (MS-XCA) decompression by @​MP-GOWTHAM in klauspost/compress#1195
• s2: arm64 assembly encoders, lowered from the amd64 avo program by @​lizthegrey in klauspost/compress#1187
• zstd, huff0: improved arm64 lowering, and narrow two table loads to MOVWQZX by @​lizthegrey in klauspost/compress#1175
• gzhttp: limit jitter hash to jitterBuffer bytes by @​VedantMadane in klauspost/compress#1192
• s2: clamp the Go EncodeBetter skip to match the assembly by @​lizthegrey in klauspost/compress#1190
• xxhash: bound input of non-preemptive assembly by @​AskAlexSharov in klauspost/compress#1196
• zstd/huff0: fold two ISA-gap x86 idioms in the avo arm64 lowering by @​lizthegrey in klauspost/compress#1199
• ci: test against go1.27.x, drop go1.24.x by @​lizthegrey in klauspost/compress#1198
• zstd/huff0: break false partial-register dependencies in seqdec/4X decoders by @​lizthegrey in klauspost/compress#1197
• flate: Writer L7-9 with dictionary can emit the dictionary to stream by @​klauspost in klauspost/compress#1201

New Contributors

• @​VedantMadane made their first contribution in klauspost/compress#1192
• @​AskAlexSharov made their first contribution in klauspost/compress#1196
• @​MP-GOWTHAM made their first contribution in klauspost/compress#1195

Full Changelog: klauspost/compress@v1.19.2...v1.20.0

Commits

• 9d8ccb1 flate: Writer with a preset dictionary emits the dictionary into the output s...
• f93f23a build(deps): bump the github-actions group with 6 updates (#1200)
• 42f9d96 xpress: add Microsoft XPRESS (MS-XCA) decompression (#1195)
• 629c2ea zstd/huff0: break false partial-register dependencies in seqdec/4X decoders (...
• ba74977 ci: test against go1.27.x, drop go1.24.x (#1198)
• f5c1529 zstd/huff0: pin avo peephole folds, regenerate arm64 (#1199)
• 73508b2 s2: arm64 assembly encoders, lowered from the amd64 avo program (#1187)
• 0e43f04 xxhash: bound input of non-preemptive assembly (#1196)
• 4005c15 s2: clamp the Go EncodeBetter skip to match the assembly (#1190)
• dd6de45 gzhttp: limit jitter hash to jitterBuffer bytes (#1192)
• Additional commits viewable in compare view

Updates golang.org/x/sys from 0.47.0 to 0.48.0

Commits

• 613e257 cpu: add riscv64 hwprobe drift test
• 6f7b10f unix: add MLOCK_ONFAULT constant
• 663e7c8 cpu: add basic support for GOARCH=sparc64
• de5f12f cpu: add ppc64le POWER10 detection
• 80e8acf unix: run go fix
• 1e3c182 unix: add IPMI interface
• d429e20 unix: stop generating sparc termbits from the generic header
• bd3bddf unix: add missing HWTSTAMP_* constants
• e812f53 windows: add SO_SNDTIMEO constant for socket options
• f6989c5 unix: align Ifreq so its union accessors cannot fault
• Additional commits viewable in compare view

Updates mvdan.cc/sh/v3 from 3.13.1 to 3.14.0

Release notes

Sourced from mvdan.cc/sh/v3's releases.

v3.14.0

This release drops support for Go 1.25 and includes many enhancements, particularly in the interpreter, which implements more shell features and fixes many divergences from Bash.

• cmd/shfmt
  • Add --detect to find shell files by executable bit or shebang - #944
• syntax
  • Add Preorder, an iterator over all nodes, complementing Walk
  • Add encoding.TextUnmarshaler implementations for each operator type
  • Support ${ foo;} and ${|foo;} inside double quotes - #1368
  • Support array elements in {varname} redirects, like exec {fds[3]}>&- - #719
  • Backslashes inside backquotes within double quotes escape double quotes - #1083
  • Allow pound signs in associative array keys like ${args[cmd,#]} - #1285
  • Don't treat # as the start of a comment inside [[ ]] tests - #1326
  • Don't join then or do with a semicolon when heredocs are pending - #1047
  • Print a space after ! in arithmetic expressions, avoiding history expansion - #987
  • Space nested closing parentheses like the opening ones - #876
  • Make SplitBraces reject malformed sequences and skip backslash escapes - #1330
  • Zsh: support the ${=name}, ${~name}, and ${^name} prefixes - #1238
  • Zsh: support the ;| case terminator and leading parentheses for globs - #1293, #1279
  • Zsh: parse subscript flag arguments as patterns, and allow [ globs in arrays - #1278, #1322
• syntax/typedjson
  • Encode operators as their syntax form, such as ">>", rather than integers - #1321
  • Return errors rather than panicking on malformed input
• interp
  • Add BashOpts to set Bash options like shopt - #962
  • Add AccessHandler to control file access checks, used by -r and cd - #1318
  • Add HandlerContext.LastExitStatus, and provide a HandlerContext to stat handlers
  • Implement the help and times builtins, as well as $- - #1398
  • Implement the ;& and ;;& case terminators - #1391
  • Implement the -N test operator, and make -nt and -ot follow POSIX - #1340
  • Support sparse indexed arrays such as a=([5]=x) - #1373
  • Run files as shell scripts when exec fails with ENOEXEC - #1065
  • Support empty here-documents, and don't expand quoted ones - #1390
  • Support js/wasm, where subprocesses and pipes are unavailable
  • Keep the redirections applied by exec with no arguments
  • Only fire the exit trap when the shell exits, rather than after every Run
• expand
  • Add BracesSeq with a config and error reporting, deprecating Braces
  • Add Variable.Indexes to describe sparse indexed arrays
  • Support integer bases in arithmetic - #339
  • Short-circuit the arithmetic && and || operators - #1371
  • Apply per-element operators to quoted array expansions like "${a[@]%o}" - #1081
  • Make unquoted ${!arr[@]} consistent with the quoted form - #672
  • Fix many divergences from Bash in arithmetic, string, and brace expansions
  • Reject unsupported Zsh syntax rather than panicking - #1363
• pattern
  • Treat an unmatched [ as a literal character, like Bash - #1372
  • Fix panics and mismatches in bracket expressions, such as [![:space:]]
• fileutil
  • Recognize dash shebangs as POSIX shell for -ln=auto - #1307

... (truncated)

Changelog

Sourced from mvdan.cc/sh/v3's changelog.

[3.14.0] - 2026-08-28

This release drops support for Go 1.25 and includes many enhancements, particularly in the interpreter, which implements more shell features and fixes many divergences from Bash.

• cmd/shfmt
  • Add --detect to find shell files by executable bit or shebang - #944
• syntax
  • Add Preorder, an iterator over all nodes, complementing Walk
  • Add encoding.TextUnmarshaler implementations for each operator type
  • Support ${ foo;} and ${|foo;} inside double quotes - #1368
  • Support array elements in {varname} redirects, like exec {fds[3]}>&- - #719
  • Backslashes inside backquotes within double quotes escape double quotes - #1083
  • Allow pound signs in associative array keys like ${args[cmd,#]} - #1285
  • Don't treat # as the start of a comment inside [[ ]] tests - #1326
  • Don't join then or do with a semicolon when heredocs are pending - #1047
  • Print a space after ! in arithmetic expressions, avoiding history expansion - #987
  • Space nested closing parentheses like the opening ones - #876
  • Make SplitBraces reject malformed sequences and skip backslash escapes - #1330
  • Zsh: support the ${=name}, ${~name}, and ${^name} prefixes - #1238
  • Zsh: support the ;| case terminator and leading parentheses for globs - #1293, #1279
  • Zsh: parse subscript flag arguments as patterns, and allow [ globs in arrays - #1278, #1322
• syntax/typedjson
  • Encode operators as their syntax form, such as ">>", rather than integers - #1321
  • Return errors rather than panicking on malformed input
• interp
  • Add BashOpts to set Bash options like shopt - #962
  • Add AccessHandler to control file access checks, used by -r and cd - #1318
  • Add HandlerContext.LastExitStatus, and provide a HandlerContext to stat handlers
  • Implement the help and times builtins, as well as $- - #1398
  • Implement the ;& and ;;& case terminators - #1391
  • Implement the -N test operator, and make -nt and -ot follow POSIX - #1340
  • Support sparse indexed arrays such as a=([5]=x) - #1373
  • Run files as shell scripts when exec fails with ENOEXEC - #1065
  • Support empty here-documents, and don't expand quoted ones - #1390
  • Support js/wasm, where subprocesses and pipes are unavailable
  • Keep the redirections applied by exec with no arguments
  • Only fire the exit trap when the shell exits, rather than after every Run
• expand
  • Add BracesSeq with a config and error reporting, deprecating Braces
  • Add Variable.Indexes to describe sparse indexed arrays
  • Support integer bases in arithmetic - #339
  • Short-circuit the arithmetic && and || operators - #1371
  • Apply per-element operators to quoted array expansions like "${a[@]%o}" - #1081
  • Make unquoted ${!arr[@]} consistent with the quoted form - #672
  • Fix many divergences from Bash in arithmetic, string, and brace expansions
  • Reject unsupported Zsh syntax rather than panicking - #1363
• pattern
  • Treat an unmatched [ as a literal character, like Bash - #1372

... (truncated)

Commits

• 868c8e8 CHANGELOG: add entry for v3.14.0
• 0d67740 interp: define the shortPathName test stub just once
• 8976822 interp: fix getAtime on the BSDs, Solaris, and AIX
• 48af1f3 expand: detect reading a file as a directory via syscall.ENOTDIR
• cd3ef1f interp: retry executing a program on ETXTBSY
• 13c4e98 interp: add regression test for the exec ETXTBSY race
• a64648d README: replace gosh and fuzzing with a sponsorship summary
• 1599bef syntax: allow pound signs in associative array keys
• 971ffa8 syntax: add test cases for issue #1285
• 4da6033 interp: note that Params should be split in v4
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions