Skip to content

chore(deps): bump github.com/klauspost/compress from 1.18.1 to 1.18.6#2

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/klauspost/compress-1.18.6
Closed

chore(deps): bump github.com/klauspost/compress from 1.18.1 to 1.18.6#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/klauspost/compress-1.18.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 16, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/klauspost/compress from 1.18.1 to 1.18.6.

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.6

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.5...v1.18.6

v1.18.5

What's Changed

Full Changelog: klauspost/compress@v1.18.4...v1.18.5

v1.18.4

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.2...v1.18.4

v1.18.3

Downstream CVE-2025-61728

See golang/go#77102

Full Changelog: klauspost/compress@v1.18.2...v1.18.3

v1.18.2

What's Changed

v1.18.1 is marked "retracted" due to invalid flate/zip/gzip encoding.

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 16, 2026
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.18.1 to 1.18.6.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.1...v1.18.6)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump github.com/klauspost/compress from 1.18.1 to 1.18.6 chore(deps): bump github.com/klauspost/compress from 1.18.1 to 1.18.6 May 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/klauspost/compress-1.18.6 branch from 292471a to 8048db6 Compare May 17, 2026 13:15
@altaywtf

Copy link
Copy Markdown
Member

Closing before public-history rewrite; Dependabot can recreate this after the clean history lands.

@altaywtf altaywtf closed this May 17, 2026
@altaywtf
altaywtf deleted the dependabot/go_modules/github.com/klauspost/compress-1.18.6 branch May 17, 2026 15:25
@dependabot @github

dependabot Bot commented on behalf of github May 17, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant