fix(deps): update module github.com/klauspost/compress to v1.19.0 - autoclosed

[renovate-sh-app]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/klauspost/compress	v1.18.6 → v1.19.0
github.com/klauspost/compress	v1.18.0 → v1.19.0

---

Release Notes

klauspost/compress (github.com/klauspost/compress)

v1.19.0

Compare Source

What's Changed

• zstd: Add true concurrent stream encoding by @​klauspost in #​1136
• zstd: arm64 decoder asm by @​lizthegrey in #​1160
• zstd: avoid unused BuildDict encoder allocation by @​snissn in #​1147
• flate: Add inflate checkpoints by @​klauspost in #​1154
• snappy/s2: Limit length of varint in decodedLen by @​eustas in #​1148
• gzhttp: match qvalue parameter case-insensitively (RFC 7231) by @​z9z in #​1149
• zip: add NameDecoder callback for legacy encoding rewrite by @​SAY-5 in #​1150
• huff0: Allow building tables from histogram. by @​klauspost in #​1155
• huff0: Allow building table from oversized histogram. by @​klauspost in #​1156
• s2sx: Clean symlink targets by @​klauspost in #​1163

New Contributors

• @​snissn made their first contribution in #​1147
• @​eustas made their first contribution in #​1148
• @​z9z made their first contribution in #​1149
• @​SAY-5 made their first contribution in #​1150
• @​HNO3Miracle made their first contribution in #​1165

Full Changelog: klauspost/compress@v1.18.6...v1.19.0

v1.18.7

Compare Source

• Fix s2.NewDict OOB read.

Security release without other changes.

Full Changelog: klauspost/compress@v1.18.6...v1.18.7

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

[codecov-commenter]

Codecov Report

Caution

This repository is currently using the Sentry GitHub App to receive Codecov PR comments. This integration will be deprecated on July 8, 2026. Please install the Codecov GitHub App to continue receiving coverage reports on your pull requests.
✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 72.37%. Comparing base (ec8c5c9) to head (af73e82).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #362   +/-   ##
=======================================
  Coverage   72.37%   72.37%           
=======================================
  Files          59       59           
  Lines        7391     7391           
=======================================
  Hits         5349     5349           
  Misses       1634     1634           
  Partials      408      408           

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[github-actions]

⚠️ The workflow jobs listed below don't declare a permissions: block and may break when the organization's default GITHUB_TOKEN permissions are restricted to read-only.

Expand for findings

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:1:1
    |
  1 | / name: CI
  2 | |
  3 | | on:
  4 | |   push:
...   |
494 | |       - name: Run CLI linter
495 | |         run: make cli-lint
    | |___________________________^ default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/ci.yml:14:3
   |
14 | /   generate:
15 | |     name: Generated Files
16 | |     runs-on: ubuntu-latest
17 | |     container:
...  |
32 | |             exit 1
33 | |           fi
   | |            ^
   | |            |
   | |____________this job
   |              default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/ci.yml:35:3
   |
35 | /   format:
36 | |     name: Format
37 | |     runs-on: ubuntu-latest
38 | |     container:
...  |
51 | |             exit 1
52 | |           fi
   | |            ^
   | |            |
   | |____________this job
   |              default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/ci.yml:54:3
   |
54 | /   lint:
55 | |     name: Lint
56 | |     runs-on: ubuntu-latest
57 | |     container:
...  |
63 | |       - name: Run linter
64 | |         run: make lint
   | |                      ^
   | |                      |
   | |______________________this job
   |                        default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/ci.yml:66:3
   |
66 | /   test-unit:
67 | |     name: Unit Tests
68 | |     runs-on: ubuntu-latest
69 | |     container:
...  |
89 | |           CGO_ENABLED: 1
90 | |         run: make test-unit
   | |                           ^
   | |                           |
   | |___________________________this job
   |                             default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:134:3
    |
134 | /   test-integration:
135 | |     name: Integration Tests
136 | |     runs-on: ubuntu-latest
137 | |     container:
...   |
157 | |           CGO_ENABLED: 1
158 | |         run: make test-integration
    | |                                  ^
    | |                                  |
    | |__________________________________this job
    |                                    default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:330:3
    |
330 | /   security:
331 | |     name: Security
332 | |     runs-on: ubuntu-latest
333 | |     container:
...   |
341 | |           go install golang.org/x/vuln/cmd/govulncheck@latest
342 | |           govulncheck ./...
    | |                           ^
    | |                           |
    | |___________________________this job
    |                             default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:344:3
    |
344 | /   trufflehog:
345 | |     name: Secrets Scan
346 | |     runs-on: ubuntu-latest
347 | |     steps:
...   |
353 | |         with:
354 | |           extra_args: --results=verified,unknown --exclude-globs='protocol/signing/testsigning/**'
    | |                                                                                                  ^
    | |                                                                                                  |
    | |__________________________________________________________________________________________________this job
    |                                                                                                    default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:356:3
    |
356 | /   deps:
357 | |     name: Dependencies
358 | |     runs-on: ubuntu-latest
359 | |     container:
...   |
375 | |           go install github.com/remyoudompheng/go-misc/deadcode@latest
376 | |           deadcode ./... || true
    | |                                ^
    | |                                |
    | |________________________________this job
    |                                  default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:378:3
    |
378 | /   staticcheck:
379 | |     name: Static Analysis
380 | |     runs-on: ubuntu-latest
381 | |     container:
...   |
389 | |           go install honnef.co/go/tools/cmd/staticcheck@latest
390 | |           staticcheck ./...
    | |                           ^
    | |                           |
    | |___________________________this job
    |                             default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:392:3
    |
392 | /   test-clone-perf:
393 | |     name: Clone Performance Tests
394 | |     runs-on: ubuntu-latest
395 | |     container:
...   |
415 | |           cd perf
416 | |           make test-clone-perf
    | |                              ^
    | |                              |
    | |______________________________this job
    |                                default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:418:3
    |
418 | /   test-clone-perf-full:
419 | |     name: Full Clone Performance Test (1 minute limit)
420 | |     runs-on: ubuntu-latest
421 | |     container:
...   |
445 | |           echo "Test will FAIL if clone takes more than 60 seconds"
446 | |           go test -v -timeout 1m -run TestCloneGrafanaGrafanaFullRepository .
    | |                                                                             ^
    | |                                                                             |
    | |_____________________________________________________________________________this job
    |                                                                               default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:448:3
    |
448 | /   cli-build:
449 | |     name: CLI Build
450 | |     runs-on: ubuntu-latest
451 | |     container:
...   |
463 | |           test -f bin/nanogit || (echo "Binary not found" && exit 1)
464 | |           ./bin/nanogit --version
    | |                                 ^
    | |                                 |
    | |_________________________________this job
    |                                   default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:466:3
    |
466 | /   cli-format:
467 | |     name: CLI Format
468 | |     runs-on: ubuntu-latest
469 | |     container:
...   |
482 | |             exit 1
483 | |           fi
    | |            ^
    | |            |
    | |____________this job
    |              default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
   --> ./.github/workflows/ci.yml:485:3
    |
485 | /   cli-lint:
486 | |     name: CLI Lint
487 | |     runs-on: ubuntu-latest
488 | |     container:
...   |
494 | |       - name: Run CLI linter
495 | |         run: make cli-lint
    | |                           ^
    | |                           |
    | |___________________________this job
    |                             default permissions used due to no permissions: block
    |
    = note: audit confidence → Medium
    = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions