From 242a10585c4d076911c3dcbc5854bc069d980c06 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 7 Jul 2026 11:17:50 +0000
Subject: [PATCH] chore: bump github.com/klauspost/compress from 1.18.6 to
 1.19.0 (#27050)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[github.com/klauspost/compress](https://github.com/klauspost/compress)
from 1.18.6 to 1.19.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/klauspost/compress/releases">github.com/klauspost/compress's
releases</a>.</em></p>
<blockquote>
<h2>v1.19.0</h2>
<h2>What's Changed</h2>
<ul>
<li>zstd: Add true concurrent stream encoding by <a
href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a
href="https://redirect.github.com/klauspost/compress/pull/1136">klauspost/compress#1136</a></li>
<li>zstd: arm64 decoder asm by <a
href="https://github.com/lizthegrey"><code>@​lizthegrey</code></a> in <a
href="https://redirect.github.com/klauspost/compress/pull/1160">klauspost/compress#1160</a></li>
<li>zstd: avoid unused BuildDict encoder allocation by <a
href="https://github.com/snissn"><code>@​snissn</code></a> in <a
href="https://redirect.github.com/klauspost/compress/pull/1147">klauspost/compress#1147</a></li>
<li>flate: Add inflate checkpoints by <a
href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a
href="https://redirect.github.com/klauspost/compress/pull/1154">klauspost/compress#1154</a></li>
<li>snappy/s2: Limit length of varint in <code>decodedLen</code> by <a
href="https://github.com/eustas"><code>@​eustas</code></a> in <a
href="https://redirect.github.com/klauspost/compress/pull/1148">klauspost/compress#1148</a></li>
<li>gzhttp: match qvalue parameter case-insensitively (RFC 7231) by <a
href="https://github.com/z9z"><code>@​z9z</code></a> in <a
href="https://redirect.github.com/klauspost/compress/pull/1149">klauspost/compress#1149</a></li>
<li>zip: add NameDecoder callback for legacy encoding rewrite by <a
href="https://github.com/SAY-5"><code>@​SAY-5</code></a> in <a
href="https://redirect.github.com/klauspost/compress/pull/1150">klauspost/compress#1150</a></li>
<li>huff0: Allow building tables from histogram. by <a
href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a
href="https://redirect.github.com/klauspost/compress/pull/1155">klauspost/compress#1155</a></li>
<li>huff0: Allow building table from oversized histogram. by <a
href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a
href="https://redirect.github.com/klauspost/compress/pull/1156">klauspost/compress#1156</a></li>
<li>s2sx: Clean symlink targets by <a
href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a
href="https://redirect.github.com/klauspost/compress/pull/1163">klauspost/compress#1163</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/snissn"><code>@​snissn</code></a> made
their first contribution in <a
href="https://redirect.github.com/klauspost/compress/pull/1147">klauspost/compress#1147</a></li>
<li><a href="https://github.com/eustas"><code>@​eustas</code></a> made
their first contribution in <a
href="https://redirect.github.com/klauspost/compress/pull/1148">klauspost/compress#1148</a></li>
<li><a href="https://github.com/z9z"><code>@​z9z</code></a> made their
first contribution in <a
href="https://redirect.github.com/klauspost/compress/pull/1149">klauspost/compress#1149</a></li>
<li><a href="https://github.com/SAY-5"><code>@​SAY-5</code></a> made
their first contribution in <a
href="https://redirect.github.com/klauspost/compress/pull/1150">klauspost/compress#1150</a></li>
<li><a
href="https://github.com/HNO3Miracle"><code>@​HNO3Miracle</code></a>
made their first contribution in <a
href="https://redirect.github.com/klauspost/compress/pull/1165">klauspost/compress#1165</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/klauspost/compress/compare/v1.18.6...v1.19.0">https://github.com/klauspost/compress/compare/v1.18.6...v1.19.0</a></p>
<h2>v1.18.7</h2>
<ul>
<li>Fix s2.NewDict OOB read.</li>
</ul>
<p>Security release without other changes.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/klauspost/compress/compare/v1.18.6...v1.18.7">https://github.com/klauspost/compress/compare/v1.18.6...v1.18.7</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/klauspost/compress/commit/f0953f938f77977980c3b9f8c09eec06f2e88a69"><code>f0953f9</code></a>
flate: fix buffer formatting in tests (<a
href="https://redirect.github.com/klauspost/compress/issues/1165">#1165</a>)</li>
<li><a
href="https://github.com/klauspost/compress/commit/ab2e3cc7ab261c8f287639760d8532afb7125425"><code>ab2e3cc</code></a>
zstd: Add arm64 decoder asm (<a
href="https://redirect.github.com/klauspost/compress/issues/1160">#1160</a>)</li>
<li><a
href="https://github.com/klauspost/compress/commit/bb2723d55de85353fd5a1817cbc382997a6a75aa"><code>bb2723d</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536"><code>539243b</code></a>
s2sx: Clean symlink targets (<a
href="https://redirect.github.com/klauspost/compress/issues/1163">#1163</a>)</li>
<li><a
href="https://github.com/klauspost/compress/commit/bd9228c884559c21e572a0eaf827ee903bca805c"><code>bd9228c</code></a>
Apply go fix and check in CI (<a
href="https://redirect.github.com/klauspost/compress/issues/1158">#1158</a>)</li>
<li><a
href="https://github.com/klauspost/compress/commit/4cc176c3325ba1d87aacfdea015a3a2038fefb08"><code>4cc176c</code></a>
zstd: Add true concurrent stream encoding (<a
href="https://redirect.github.com/klauspost/compress/issues/1136">#1136</a>)</li>
<li><a
href="https://github.com/klauspost/compress/commit/4705fcbaf5155f466ca877527f66e88634cdf1c2"><code>4705fcb</code></a>
build(deps): bump the github-actions group with 3 updates (<a
href="https://redirect.github.com/klauspost/compress/issues/1157">#1157</a>)</li>
<li><a
href="https://github.com/klauspost/compress/commit/e9c2e569c112ecc1ad8ab818ed7328e7178973e4"><code>e9c2e56</code></a>
huff0: Allow building table from oversized histogram. (<a
href="https://redirect.github.com/klauspost/compress/issues/1156">#1156</a>)</li>
<li><a
href="https://github.com/klauspost/compress/commit/ecdb779d8745b0b074dcee75d9f7fd2bd524aff8"><code>ecdb779</code></a>
huff0: Allow building tables from histogram. (<a
href="https://redirect.github.com/klauspost/compress/issues/1155">#1155</a>)</li>
<li><a
href="https://github.com/klauspost/compress/commit/38efa458d47cc5555ce4a08796ddf2bf5ca22d87"><code>38efa45</code></a>
zip: add NameDecoder callback for legacy encoding rewrite (<a
href="https://redirect.github.com/klauspost/compress/issues/1150">#1150</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/klauspost/compress/compare/v1.18.6...v1.19.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/klauspost/compress&package-manager=go_modules&previous-version=1.18.6&new-version=1.19.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index fdd3c5e32e..4bd83199bd 100644
--- a/go.mod
+++ b/go.mod
@@ -198,7 +198,7 @@ require (
 	github.com/justinas/nosurf v1.2.0
 	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
 	github.com/kirsle/configdir v0.0.0-20170128060238-e45d2f54772f
-	github.com/klauspost/compress v1.18.6
+	github.com/klauspost/compress v1.19.0
 	github.com/lib/pq v1.10.9
 	github.com/mattn/go-isatty v0.0.22
 	github.com/mitchellh/go-wordwrap v1.0.1
diff --git a/go.sum b/go.sum
index 0225cc581a..1b4e45af20 100644
--- a/go.sum
+++ b/go.sum
@@ -801,8 +801,8 @@ github.com/kirsle/configdir v0.0.0-20170128060238-e45d2f54772f/go.mod h1:4rEELDS
 github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
 github.com/kisielk/sqlstruct v0.0.0-20201105191214-5f3e10d3ab46/go.mod h1:yyMNCyc/Ib3bDTKd379tNMpB/7/H5TjM2Y9QJ5THLbE=
-github.com/klauspost/compress v1.18.6 h1:2jupLlAwFm95+YDR+NwD2MEfFO9d4z4Prjl1XXDjuao=
-github.com/klauspost/compress v1.18.6/go.mod h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ=
+github.com/klauspost/compress v1.19.0 h1:sXLILfc9jV2QYWkzFOPWStmcUVH2RHEB1JCdY2oVvCQ=
+github.com/klauspost/compress v1.19.0/go.mod h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ=
 github.com/klauspost/cpuid/v2 v2.3.0 h1:S4CRMLnYUhGeDFDqkGriYKdfoFlDnMtqTiI/sFzhA9Y=
 github.com/klauspost/cpuid/v2 v2.3.0/go.mod h1:hqwkgyIinND0mEev00jJYCxPNVRVXFQeu1XKlok6oO0=
 github.com/kortschak/wol v0.0.0-20200729010619-da482cc4850a h1:+RR6SqnTkDLWyICxS1xpjCi/3dhyV+TgZwA6Ww3KncQ=