Skip to content

Bump klauspost/compress v1.18.7 for v1.30.8 - #12502

Merged
rkannan82 merged 1 commit into
release/v1.30.xfrom
cve-fix-v1.30.8
Oct 9, 2026
Merged

rkannan82 merged 1 commit into
release/v1.30.xfrom
cve-fix-v1.30.8

Conversation

@rkannan82

Copy link
Copy Markdown
Contributor

Bump klauspost/compress v1.18.0 → v1.18.7 (GO-2026-5841). x/crypto CVEs (GO-2026-6354, GO-2026-6355) and Go stdlib CVEs skipped — fixes require Go 1.26+, v1.30.x is on Go 1.25.14.

@rkannan82
rkannan82 requested review from a team as code owners October 9, 2026 23:55
@rkannan82
rkannan82 merged commit 2710cd3 into release/v1.30.x Oct 9, 2026
15 of 16 checks passed
@rkannan82
rkannan82 deleted the cve-fix-v1.30.8 branch October 9, 2026 23:55
@github-actions

github-actions Bot commented Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

Claude finished @rkannan82's task in 22s —— View job


Reviewed 2 files, 0 findings.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant