Skip to content

chore(deps)(deps): bump github.com/klauspost/compress from 1.17.11 to 1.18.6 in the go-minor-and-patch group across 1 directory#105

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-623429d467
Open

chore(deps)(deps): bump github.com/klauspost/compress from 1.17.11 to 1.18.6 in the go-minor-and-patch group across 1 directory#105
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-623429d467

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 11, 2026

Bumps the go-minor-and-patch group with 1 update in the / directory: github.com/klauspost/compress.

Updates github.com/klauspost/compress from 1.17.11 to 1.18.6

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.6

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.5...v1.18.6

v1.18.5

What's Changed

Full Changelog: klauspost/compress@v1.18.4...v1.18.5

v1.18.4

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.2...v1.18.4

v1.18.3

Downstream CVE-2025-61728

See golang/go#77102

Full Changelog: klauspost/compress@v1.18.2...v1.18.3

v1.18.2

What's Changed

v1.18.1 is marked "retracted" due to invalid flate/zip/gzip encoding.

... (truncated)

Commits

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 11, 2026

Labels

The following labels could not be found: go. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the deps label May 11, 2026
Bumps the go-minor-and-patch group with 1 update in the / directory: [github.com/klauspost/compress](https://github.com/klauspost/compress).


Updates `github.com/klauspost/compress` from 1.17.11 to 1.18.6
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.17.11...v1.18.6)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps)(deps): bump github.com/klauspost/compress from 1.17.11 to 1.18.6 in the go-minor-and-patch group chore(deps)(deps): bump github.com/klauspost/compress from 1.17.11 to 1.18.6 in the go-minor-and-patch group across 1 directory May 25, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/go-minor-and-patch-623429d467 branch from 95dacc7 to 11cd59a Compare May 25, 2026 06:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants