Skip to content

Chore(deps): Bump the low-importance group across 1 directory with 2 updates - #3439

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/low-importance-d854b24ae1
Open

Chore(deps): Bump the low-importance group across 1 directory with 2 updates#3439
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/low-importance-d854b24ae1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the low-importance group with 2 updates in the / directory: github.com/klauspost/compress and github.com/stretchr/testify.

Updates github.com/klauspost/compress from 1.19.1 to 1.19.2

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.19.2

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.19.1...v1.19.2

Commits
  • c3b3439 zstd: don't clear the registered dictionary when decoding past the window (#1...
  • 9874bc9 fix(zstd): handle zero-literal BuildDict corpus (#1178)
  • 71bb6fd zstd: keep BuildDict recent-offsets positive and loadable (#1184)
  • 3d4dacb zstd: avoid racing MaxDecodedSize write on shared dict litEnc (#1182)
  • 3ceaa81 build(deps): bump the github-actions group with 5 updates (#1185)
  • 72cb4d3 chore: add OpenSSF Scorecard GitHub Action (#1183)
  • 69c9db4 zstd: fix arm64 asm locals overwriting the saved link register (#1176)
  • 117430d zstd: Re-enable unsafe decodeSync memory copies (#1168) (#1171)
  • c73af0c huff0: add arm64 assembly for Decompress4X/1X via avo lowering (#1172)
  • See full diff in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 959dbda Merge pull request #1935 from harryzcy/yaml-update
  • 9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 19, 2026
…updates

Bumps the low-importance group with 2 updates in the / directory: [github.com/klauspost/compress](https://github.com/klauspost/compress) and [github.com/stretchr/testify](https://github.com/stretchr/testify).


Updates `github.com/klauspost/compress` from 1.19.1 to 1.19.2
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.19.1...v1.19.2)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: low-importance
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: low-importance
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/low-importance-d854b24ae1 branch from 4df451d to 2d5a488 Compare August 21, 2026 15:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants