fix(deps): update module github.com/klauspost/compress to v1.19.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/klauspost/compress	v1.17.7 → v1.19.0

---

Release Notes

klauspost/compress (github.com/klauspost/compress)

v1.19.0

Compare Source

What's Changed

• zstd: Add true concurrent stream encoding by @​klauspost in #​1136
• zstd: arm64 decoder asm by @​lizthegrey in #​1160
• zstd: avoid unused BuildDict encoder allocation by @​snissn in #​1147
• flate: Add inflate checkpoints by @​klauspost in #​1154
• snappy/s2: Limit length of varint in decodedLen by @​eustas in #​1148
• gzhttp: match qvalue parameter case-insensitively (RFC 7231) by @​z9z in #​1149
• zip: add NameDecoder callback for legacy encoding rewrite by @​SAY-5 in #​1150
• huff0: Allow building tables from histogram. by @​klauspost in #​1155
• huff0: Allow building table from oversized histogram. by @​klauspost in #​1156
• s2sx: Clean symlink targets by @​klauspost in #​1163

New Contributors

• @​snissn made their first contribution in #​1147
• @​eustas made their first contribution in #​1148
• @​z9z made their first contribution in #​1149
• @​SAY-5 made their first contribution in #​1150
• @​HNO3Miracle made their first contribution in #​1165

Full Changelog: klauspost/compress@v1.18.6...v1.19.0

v1.18.7

Compare Source

• Fix s2.NewDict OOB read.

Security release without other changes.

Full Changelog: klauspost/compress@v1.18.6...v1.18.7

v1.18.6

Compare Source

What's Changed

• s2: Fix amd64 stack frame corruption by @​klauspost in #​1145
• gzhttp: Canonicalize ETag header by @​justinmayhew in #​1139
• perf: pool hash tables in Go encode paths to reduce allocations by @​huynhanx03 in #​1143

New Contributors

• @​justinmayhew made their first contribution in #​1139
• @​huynhanx03 made their first contribution in #​1143
• @​thaJeztah made their first contribution in #​1144

Full Changelog: klauspost/compress@v1.18.5...v1.18.6

v1.18.5

Compare Source

What's Changed

• zstd: Fix crash when changing encoder dictionary with same ID by @​klauspost in #​1135
• zstd: Default to full zero frames by @​klauspost in #​1134
• flate: Clean up histogram order by @​klauspost in #​1133

Full Changelog: klauspost/compress@v1.18.4...v1.18.5

v1.18.4

Compare Source

What's Changed

• gzhttp: Add zstandard to server handler wrapper by @​klauspost in #​1121
• zstd: Add ResetWithOptions to encoder/decoder by @​klauspost in #​1122
• gzhttp: preserve qvalue when extra parameters follow in Accept-Encoding by @​analytically in #​1116

New Contributors

• @​analytically made their first contribution in #​1116
• @​ethaizone made their first contribution in #​1124
• @​zwass made their first contribution in #​1125

Full Changelog: klauspost/compress@v1.18.2...v1.18.4

v1.18.3

Compare Source

Downstream CVE-2025-61728

See golang/go#77102

Full Changelog: klauspost/compress@v1.18.2...v1.18.3

v1.18.2

Compare Source

What's Changed

• flate: Fix invalid encoding on level 9 with single value input by @​klauspost in #​1115
• flate: reduce stateless allocations by @​RXamzin in #​1106
• build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 in the github-actions group by @​dependabot[bot] in #​1111

v1.18.1 is marked "retracted" due to invalid flate/zip/gzip encoding.

New Contributors

• @​RXamzin made their first contribution in #​1106

Full Changelog: klauspost/compress@v1.18.1...v1.18.2

v1.18.1

Compare Source

What's Changed

• zstd: Fix incorrect buffer size in dictionary encodes by @​klauspost in #​1059
• s2: check for cap, not len of buffer in EncodeBetter/Best by @​vdarulis in #​1080
• zstd: Add simple zstd EncodeTo/DecodeTo functions by @​klauspost in #​1079
• zlib: Avoiding extra allocation in zlib.reader.Reset by @​travelpolicy in #​1086
• gzhttp: remove redundant err check in zstdReader by @​ryanfowler in #​1090
• Run modernize. Deprecate Go 1.22 by @​klauspost in #​1095
• flate: Simplify matchlen by @​klauspost in #​1101
• flate: Add examples by @​klauspost in #​1102
• flate: Use exact sizes for huffman tables by @​klauspost in #​1103
• flate: Faster load+store by @​klauspost in #​1104
• Add notice to S2 about MinLZ by @​klauspost in #​1065

New Contributors

• @​wooffie made their first contribution in #​1069
• @​vdarulis made their first contribution in #​1080
• @​travelpolicy made their first contribution in #​1086
• @​ryanfowler made their first contribution in #​1090

Full Changelog: klauspost/compress@v1.18.0...v1.18.1

v1.18.0

Compare Source

What's Changed

• Deprecate Go 1.21 and add 1.24 by @​klauspost in #​1055
• Add unsafe little endian loaders by @​klauspost in #​1036
• fix: check r.err != nil but return a nil value error err by @​alingse in #​1028
• refactor: use built-in min function by @​Juneezee in #​1038
• zstd: use slices.Max for max value in slice by @​Juneezee in #​1041
• flate: Simplify L4-6 loading by @​klauspost in #​1043
• flate: Simplify matchlen (remove asm) by @​klauspost in #​1045
• s2: Add block decode fuzzer by @​klauspost in #​1044
• s2: Improve small block compression speed w/o asm by @​klauspost in #​1048
• flate: Fix matchlen L5+L6 by @​klauspost in #​1049
• flate: Cleanup & reduce casts by @​klauspost in #​1050

New Contributors

• @​tcpdumppy made their first contribution in #​1021
• @​sam9291 made their first contribution in #​1022
• @​dezza made their first contribution in #​1023
• @​alingse made their first contribution in #​1028
• @​hyunsooda made their first contribution in #​1031
• @​Juneezee made their first contribution in #​1038
• @​Bbulatov made their first contribution in #​1052

Full Changelog: klauspost/compress@v1.17.11...v1.18.0

v1.17.11

Compare Source

What's Changed

• zstd: Fix extra CRC written with multiple Close calls by @​klauspost in #​1017
• s2: Don't use stack for index tables by @​klauspost in #​1014
• gzhttp: No content-type on no body response code by @​juliens in #​1011
• gzhttp: Do not set the content-type when response has no body by @​kevinpollet in #​1013

New Contributors

• @​juliens made their first contribution in #​1011
• @​kevinpollet made their first contribution in #​1013

Full Changelog: klauspost/compress@v1.17.10...v1.17.11

v1.17.10

Compare Source

What's Changed

• gzhttp: Add TransportAlwaysDecompress option. by @​klauspost in #​978
• s2: Add EncodeBuffer buffer recycling callback by @​klauspost in #​982
• zstd: Improve memory usage on small streaming encodes by @​klauspost in #​1007
• gzhttp: Add supported decompress request body by @​mirecl in #​1002
• flate: read data written with partial flush by @​vajexal in #​996
• ci: Upgrade Go & other by @​klauspost in #​1008
• docs: Small typofix in comment by @​Jille in #​976
• build(deps): bump the github-actions group with 2 updates by @​dependabot in #​979
• docs: Fix URL typo when installing builddict by @​Wikidepia in #​980
• build(deps): bump the github-actions group with 2 updates by @​dependabot in #​985
• Fix typos by @​deining in #​986
• build(deps): bump github/codeql-action from 3.25.15 to 3.26.6 in the github-actions group by @​dependabot in #​997

New Contributors

• @​Wikidepia made their first contribution in #​980
• @​deining made their first contribution in #​986
• @​vajexal made their first contribution in #​996
• @​mirecl made their first contribution in #​1002

Full Changelog: klauspost/compress@v1.17.9...v1.17.10

v1.17.9

Compare Source

What's Changed

• s2: Reduce ReadFrom temporary allocations by @​klauspost in #​949
• Fix arm64 vet issues by @​klauspost in #​964
• flate, zstd: Shave some bytes off amd64 matchLen by @​greatroar in #​963
• Upgrade zip to 1.22.4 upstream by @​klauspost in #​970
• zstd: BuildDict fails with RLE table by @​klauspost in #​951
• Upgrade zlib to upstream by @​klauspost in #​971

Full Changelog: klauspost/compress@v1.17.8...v1.17.9

v1.17.8

Compare Source

What's Changed

• zstd: Reject blocks where reserved values are not 0 by @​klauspost in #​885
• zstd: Add RLE detection+encoding by @​klauspost in #​938

New Contributors

• @​ankon made their first contribution in #​932
• @​kindhuge made their first contribution in #​946

Full Changelog: klauspost/compress@v1.17.7...v1.17.8

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.19 -> 1.24

[coveralls]

Coverage Report for CI Build 25200169044

Coverage remained the same at 1.796%

Details

• Coverage remained the same as the base build.
• Patch coverage: No coverable lines changed in this PR.
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	668
Covered Lines:	12
Line Coverage:	1.8%
Coverage Strength:	0.02 hits per line

---

💛 - Coveralls