Skip to content

fix(deps): vuln github.com/klauspost/compress (minor → v1.20.3) [examples/programmatic-usage/custom-aws-detonator-terratest/go.mod] - #92

Open
gh-worker-campaigns-3e9aa4[bot] wants to merge 1 commit into
mainfrom
engraver-auto-version-upgrade/minorpatch/go/programmatic-usage/1-1792998518
Open

gh-worker-campaigns-3e9aa4[bot] wants to merge 1 commit into
mainfrom
engraver-auto-version-upgrade/minorpatch/go/programmatic-usage/1-1792998518

Conversation

@gh-worker-campaigns-3e9aa4

@gh-worker-campaigns-3e9aa4 gh-worker-campaigns-3e9aa4 Bot commented Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Warning

Shotclock auto-merge countdown

This PR may be automatically approved and merged on or after November 2, 2026 (UTC) if nobody acts and all required Shotclock eligibility checks pass.

To stop Shotclock, comment or review this PR, request changes, push a commit, or close the PR. Converting it to draft pauses automation.

⚠️ One or more lockfile regeneration steps failed. The updates listed below may not all have been applied — verify against the diff before merging. Package counts and totals reflect what was attempted, not what landed. See the engraver logs for details.

Summary: High-severity security update — 1 package upgraded (MINOR changes included)

Manifests changed:

  • examples/programmatic-usage/custom-aws-detonator-terratest/go.mod (go)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.


Updates

Package From To Type Dep Type Vulnerabilities Fixed
github.com/klauspost/compress v1.13.0 v1.20.3 minor Transitive 3 HIGH

Security Details

🚨 Critical & High Severity (3 fixed)
Package CVE Severity Summary Unsafe Version Fixed In Case
github.com/klauspost/compress GHSA-259r-337f-4rfw HIGH Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress v1.13.0 1.18.7 -
github.com/klauspost/compress CVE-2026-63209 HIGH Integer Overflow or Wraparound and Out-of-bounds Write in compress v1.13.0 - -
github.com/klauspost/compress GO-2026-5841 HIGH OOB read in github.com/klauspost/compress/s2 v1.13.0 1.18.7 -
⚠️ Dependencies that have Reached EOL (1)
Dependency Unsafe Version EOL Date New Version Path Case
github.com/klauspost/compress v1.13.0 - v1.20.3 examples/programmatic-usage/custom-aws-detonator-terratest/go.mod -

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI
  • Approve and merge this PR

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

…programmatic-usage/custom-aws-detonator-terratest/go.mod]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants