Skip to content

build(deps): github.com/klauspost/compress v1.18.7 - #78

Merged
vvoland merged 1 commit into
moby:mainfrom
thaJeztah:bump_compress
Jul 23, 2026
Merged

build(deps): github.com/klauspost/compress v1.18.7#78
vvoland merged 1 commit into
moby:mainfrom
thaJeztah:bump_compress

Conversation

@thaJeztah

@thaJeztah thaJeztah commented Jul 23, 2026

Copy link
Copy Markdown
Member

Advisory: GHSA-259r-337f-4rfw / CVE-2026-63209

update to the latest v1.18.x release; v1.18.7 is a security release (not impacting go-archive);

  • Fix s2.NewDict OOB read.

diff: klauspost/compress@v1.18.6...v1.18.7
diff: klauspost/compress@v1.18.3...v1.18.6

update to the latest v1.18.x release; v1.18.7 is a security release
(not impacting go-archive);

- Fix s2.NewDict OOB read.

diff: klauspost/compress@v1.18.6...v1.18.7
diff: klauspost/compress@v1.18.3...v1.18.6

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Copilot AI review requested due to automatic review settings July 23, 2026 13:59

This comment was marked as off-topic.

@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 65.91%. Comparing base (216738e) to head (664ad7c).
⚠️ Report is 14 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main      #78      +/-   ##
==========================================
+ Coverage   65.81%   65.91%   +0.09%     
==========================================
  Files          42       42              
  Lines        2039     2039              
==========================================
+ Hits         1342     1344       +2     
+ Misses        519      517       -2     
  Partials      178      178              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@thaJeztah
thaJeztah requested a review from vvoland July 23, 2026 14:02
@vvoland
vvoland merged commit 6e28a6c into moby:main Jul 23, 2026
12 checks passed
@thaJeztah
thaJeztah deleted the bump_compress branch July 23, 2026 14:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants