fix(deps): update module github.com/klauspost/compress to v1.18.4
Metadata
Current evaluation
Renovate PR #559 bumping github.com/klauspost/compress v1.18.2 -> v1.18.4 was merged to main as commit 8fa0ac6 (+3/-1, go.mod/go.sum), 2 approvals; later superseded by v1.18.5 (#587) and v1.20.1 (#657).
Resolution: closed resolved
Reason: The PR was approved and merged into main, landing as commit 8fa0ac6 'fix(deps): update module github.com/klauspost/compress to v1.18.4 (#559)' in the fetch-service go.mod history. All CI checks passed except the advisory OSV-scanner check, which was overridden; v1.18.4 also carried the downstream CVE-2025-61728 fix from v1.18.3.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [github.com/klauspost/compress](https://redirect.github.com/klauspost/compress) | `v1.18.2` → `v1.18.4` |  |  |
---
### Release Notes
<details>
<summary>klauspost/compress (github.com/klauspost/compress)</summary>
### [`v1.18.4`](https://redirect.github.com/klauspost/compress/releases/tag/v1.18.4)
[Compare Source](https://redirect.github.com/klauspost/compress/compare/v1.18.3...v1.18.4)
#### What's Changed
- gzhttp: Add zstandard to server handler wrapper by [@​klauspost](https://redirect.github.com/klauspost) in [#​1121](https://redirect.github.com/klauspost/compress/pull/1121)
- zstd: Add ResetWithOptions to encoder/decoder by [@​klauspost](https://redirect.github.com/klauspost) in [#​1122](https://redirect.github.com/klauspost/compress/pull/1122)
- gzhttp: preserve qvalue when extra parameters follow in Accept-Encoding by [@​analytically](https://redirect.github.com/analytically) in [#​1116](https://redirect.github.com/klauspost/compress/pull/1116)
#### New Contributors
- [@​analytically](https://redirect.github.com/analytically) made their first contribution in [#​1116](https://redirect.github.com/klauspost/compress/pull/1116)
- [@​ethaizone](https://redirect.github.com/ethaizone) made their first contribution in [#​1124](https://redirect.github.com/klauspost/compress/pull/1124)
- [@​zwass](https://redirect.github.com/zwass) made their first contribution in [#​1125](https://redirect.github.com/klauspost/compress/pull/1125)
**Full Changelog**: <https://github.com/klauspost/compress/compare/v1.18.2...v1.18.4>
### [`v1.18.3`](https://redirect.github.com/klauspost/compress/releases/tag/v1.18.3)
[Compare Source](https://redirect.github.com/klauspost/compress/compare/v1.18.2...v1.18.3)
Downstream CVE-2025-61728
See [golang/go#77102](https://redirect.github.com/golang/go/issues/77102)
**Full Changelog**: <https://github.com/klauspost/compress/compare/v1.18.2...v1.18.3>
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/fetch-service).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi43NC41IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Renovate PR #559 bumping github.com/klauspost/compress v1.18.2 -> v1.18.4 was merged to main as commit 8fa0ac6 (+3/-1, go.mod/go.sum), 2 approvals; later superseded by v1.18.5 (#587) and v1.20.1 (#657). | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #559 (8fa0ac6), upgrading github.com/klauspost/compress from v1.18.2 to v1.18.4. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged automated dependency update upgrading github.com/klauspost/compress from v1.18.2 to v1.18.4. Approved by reviewers and merged after CI checks passed, with a non-blocking OSV-scanner warning noted. |
Update history
| Date | Change |
|---|---|
| created |
Related work
-
Related To:
canonical/fetch-service#587
(confidence 92%)
Follow-up bump to klauspost/compress v1.18.5, commit 2cb4c4b, building on the v1.18.4 update merged here.
-
Related To:
canonical/fetch-service#539
(confidence 80%)
Preceding bump v1.18.1 -> v1.18.2 (commit 0417b9b) that this PR continues.
-
Superseded By:
canonical/fetch-service#657
(confidence 75%)
Later Renovate bump of klauspost/compress to v1.20.1 (commit dfadde3) supersedes this version in main.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #629 fix(deps): update module github.com/klauspost/compress to v1.19.0 | fetch-service | merged | Renovate PR merged as commit e81c1bd, bumping github.com/klauspost/compress v1.18.6 -> v1.19.0 in go.mod/go.sum (approved, all CI green). Later superseded by #637 (v1.19.2), #642 (v1.20.0) and #657 (v1.20.1). | |
| #587 fix(deps): update module github.com/klauspost/compress to v1.18.5 | fetch-service | merged | Renovate PR #587 merged via commit 2cb4c4b, bumping github.com/klauspost/compress from v1.18.4 to v1.18.5 in go.mod/go.sum. All CI checks passed; later bumps (#602, #629, #642, #657) moved it to v1.20.1. | |
| #637 fix(deps): update module github.com/klauspost/compress to v1.19.2 | fetch-service | merged | Renovate PR #637 merged as commit d542773, bumping github.com/klauspost/compress v1.19.0 -> v1.19.2 in go.mod/go.sum. Later superseded by #642 (v1.20.0) and #657 (v1.20.1). | |
| #602 fix(deps): update module github.com/klauspost/compress to v1.18.6 | fetch-service | merged | Renovate dependency bump of github.com/klauspost/compress v1.18.5 -> v1.18.6 approved by 2 reviewers and merged into main via commit 8d62dd9 (go.mod/go.sum, +4/-2). | |
| #116 fix(deps): update module github.com/klauspost/compress to v1.17.9 | fetch-service | merged | Renovate PR #116 bumping github.com/klauspost/compress v1.17.4 -> v1.17.9 was approved by 2 reviewers and merged into main as commit b91d17a (go.mod/go.sum updated). | |
| #227 fix(deps): update module github.com/klauspost/compress to v1.17.10 | fetch-service | merged | Renovate dependency bump of github.com/klauspost/compress v1.17.9 -> v1.17.10 approved (2 reviewers) and merged to main as commit 629a102, updating go.mod/go.sum. | |
| #267 fix(deps): update module github.com/klauspost/compress to v1.17.11 | fetch-service | merged | Renovate PR #267 merged into main (commit 0e45084), bumping github.com/klauspost/compress v1.17.10 -> v1.17.11 in go.mod/go.sum. Approved by 2 reviewers; shipped in release 0.4.0 (2024-10-14) per docs/changelog.rst. | |
| #340 fix(deps): update module github.com/klauspost/compress to v1.18.0 | fetch-service | merged | Renovate bump merged as commit c549c4b, updating github.com/klauspost/compress from v1.17.11 to v1.18.0 after two approvals. | |
| #657 fix(deps): update module github.com/klauspost/compress to v1.20.1 | fetch-service | closed | Renovate PR #657 was merged, updating github.com/klauspost/compress from v1.20.0 to v1.20.1 in commit dfadde3. | |
| #479 fix(deps): update module github.com/klauspost/compress to v1.18.1 | fetch-service | merged | Renovate dependency bump of klauspost/compress v1.18.0 to v1.18.1 merged as commit 315c39c; all CI checks passed and follow-up bumps (#539, #559, #587) moved it to v1.20.1. |