fix(deps): update module github.com/klauspost/compress to v1.20.0
Metadata
Current evaluation
Mend Renovate PR updating github.com/klauspost/compress from v1.19.2 to v1.20.0; CI has one failing check (OSV-scanner), no maintainer comments yet
Suggested action: keep open
Reason: The PR is only 6 days old with recent activity (4 days ago), but the OSV-scanner CI check is failing, which requires investigation before merging. The PR should remain open to allow the security scan failure to be addressed or dismissed by maintainers.
Impact:
20
Quick Win:
19.0
Staleness:
10
Complexity:
5
Confidence:
60
Issue body
This PR contains the following updates:
| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [github.com/klauspost/compress](https://redirect.github.com/klauspost/compress) | `v1.19.2` → `v1.20.0` |  |  |
---
### Release Notes
<details>
<summary>klauspost/compress (github.com/klauspost/compress)</summary>
### [`v1.20.0`](https://redirect.github.com/klauspost/compress/releases/tag/v1.20.0)
[Compare Source](https://redirect.github.com/klauspost/compress/compare/v1.19.2...v1.20.0)
#### What's Changed
- Add lzw reader/writer by [@​klauspost](https://redirect.github.com/klauspost) in [#​1189](https://redirect.github.com/klauspost/compress/pull/1189)
- xpress: add Microsoft XPRESS (MS-XCA) decompression by [@​MP-GOWTHAM](https://redirect.github.com/MP-GOWTHAM) in [#​1195](https://redirect.github.com/klauspost/compress/pull/1195)
- s2: arm64 assembly encoders, lowered from the amd64 avo program by [@​lizthegrey](https://redirect.github.com/lizthegrey) in [#​1187](https://redirect.github.com/klauspost/compress/pull/1187)
- zstd, huff0: improved arm64 lowering, and narrow two table loads to MOVWQZX by [@​lizthegrey](https://redirect.github.com/lizthegrey) in [#​1175](https://redirect.github.com/klauspost/compress/pull/1175)
- gzhttp: limit jitter hash to jitterBuffer bytes by [@​VedantMadane](https://redirect.github.com/VedantMadane) in [#​1192](https://redirect.github.com/klauspost/compress/pull/1192)
- s2: clamp the Go EncodeBetter skip to match the assembly by [@​lizthegrey](https://redirect.github.com/lizthegrey) in [#​1190](https://redirect.github.com/klauspost/compress/pull/1190)
- xxhash: bound input of non-preemptive assembly by [@​AskAlexSharov](https://redirect.github.com/AskAlexSharov) in [#​1196](https://redirect.github.com/klauspost/compress/pull/1196)
- zstd/huff0: fold two ISA-gap x86 idioms in the avo arm64 lowering by [@​lizthegrey](https://redirect.github.com/lizthegrey) in [#​1199](https://redirect.github.com/klauspost/compress/pull/1199)
- ci: test against go1.27.x, drop go1.24.x by [@​lizthegrey](https://redirect.github.com/lizthegrey) in [#​1198](https://redirect.github.com/klauspost/compress/pull/1198)
- zstd/huff0: break false partial-register dependencies in seqdec/4X decoders by [@​lizthegrey](https://redirect.github.com/lizthegrey) in [#​1197](https://redirect.github.com/klauspost/compress/pull/1197)
- flate: Writer L7-9 with dictionary can emit the dictionary to stream by [@​klauspost](https://redirect.github.com/klauspost) in [#​1201](https://redirect.github.com/klauspost/compress/pull/1201)
#### New Contributors
- [@​VedantMadane](https://redirect.github.com/VedantMadane) made their first contribution in [#​1192](https://redirect.github.com/klauspost/compress/pull/1192)
- [@​AskAlexSharov](https://redirect.github.com/AskAlexSharov) made their first contribution in [#​1196](https://redirect.github.com/klauspost/compress/pull/1196)
- [@​MP-GOWTHAM](https://redirect.github.com/MP-GOWTHAM) made their first contribution in [#​1195](https://redirect.github.com/klauspost/compress/pull/1195)
**Full Changelog**: <https://github.com/klauspost/compress/compare/v1.19.2...v1.20.0>
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/fetch-service).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC41Ny4zIiwidXBkYXRlZEluVmVyIjoiNDQuNjEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b |
Impact:
20
Quick Win:
19.0
Staleness:
10
Complexity:
5
Confidence:
60
|
keep open | Mend Renovate PR updating github.com/klauspost/compress from v1.19.2 to v1.20.0; CI has one failing check (OSV-scanner), no maintainer comments yet |
Update history
| Date | Change |
|---|---|
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #559 fix(deps): update module github.com/klauspost/compress to v1.18.4 | fetch-service | merged | Merged automated dependency update upgrading github.com/klauspost/compress from v1.18.2 to v1.18.4. Approved by reviewers and merged after CI checks passed, with a non-blocking OSV-scanner warning noted. | |
| #116 fix(deps): update module github.com/klauspost/compress to v1.17.9 | fetch-service | merged | Merged automated dependency update upgrading github.com/klauspost/compress from v1.17.4 to v1.17.9. Submitted by Renovate bot, approved by two reviewers, passed CI checks, and merged successfully. | |
| #629 fix(deps): update module github.com/klauspost/compress to v1.19.0 | fetch-service | merged | Merged automated dependency update for github.com/klauspost/compress from v1.18.6 to v1.19.0. Approved by one reviewer, passed all CI checks, and integrated into main. | |
| #637 fix(deps): update module github.com/klauspost/compress to v1.19.2 | fetch-service | merged | Merged automated dependency update for github.com/klauspost/compress from v1.19.0 to v1.19.2. The change passed CI checks and was successfully merged into the main branch. | |
| #539 fix(deps): update module github.com/klauspost/compress to v1.18.2 | fetch-service | merged | Merged automated dependency update to github.com/klauspost/compress v1.18.2. Prior v1.18.1 was retracted due to invalid encoding. Approved by two reviewers, passed CI checks, and merged. | |
| #602 fix(deps): update module github.com/klauspost/compress to v1.18.6 | fetch-service | merged | Merged automated dependency update upgrading github.com/klauspost/compress from v1.18.5 to v1.18.6. Upstream fixes and performance improvements were applied. CI checks passed and the change was merged. | |
| #479 fix(deps): update module github.com/klauspost/compress to v1.18.1 | fetch-service | merged | Merged automated dependency update for github.com/klauspost/compress from v1.18.0 to v1.18.1. Approved by two reviewers, passed all CI checks, and integrated into the main branch. | |
| #340 fix(deps): update module github.com/klauspost/compress to v1.18.0 | fetch-service | merged | Merged automated dependency update upgrading github.com/klauspost/compress from v1.17.11 to v1.18.0. Approved by two reviewers and passed CI checks before integration. | |
| #267 fix(deps): update module github.com/klauspost/compress to v1.17.11 | fetch-service | merged | Merged automated dependency update for github.com/klauspost/compress from v1.17.10 to v1.17.11. Approved by two reviewers, passed CI checks, and merged into main. | |
| #227 fix(deps): update module github.com/klauspost/compress to v1.17.10 | fetch-service | merged | Merged automated dependency update upgrading github.com/klauspost/compress from v1.17.9 to v1.17.10. Approved by reviewers, passed CI checks, and successfully merged into the main branch. |