[dependabot]

Bumps the go-dependencies group with 1 update in the / directory: github.com/klauspost/compress.

Updates github.com/klauspost/compress from 1.20.1 to 1.20.3

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.20.3

What's Changed

• zstd: two-pass decode with match-source prefetch on arm64 (largest win decoding SpeedBestCompression-class data) by @​lizthegrey in klauspost/compress#1212
• zstd: speed up better encoder hashing, primes in registers on arm64 by @​lizthegrey in klauspost/compress#1230
• zstd: reuse dictionary sequence tables in the encoder by @​lizthegrey in klauspost/compress#1233
• zstd: close most of the decode gap to libzstd on real corpora by @​lizthegrey in klauspost/compress#1232
• huff0: align the decode inner loops to 64 bytes by @​lizthegrey in klauspost/compress#1236
• zstd: keep default-encoder hash primes in registers on arm64 by @​lizthegrey in klauspost/compress#1241
• zstd: align the sequence decode and execute loops to 64 bytes by @​lizthegrey in klauspost/compress#1240
• zstd, huff0: cheaper per-block table setup by @​lizthegrey in klauspost/compress#1234
• zstd, s2, flate: smoke-test Silesia in CI, add real-corpus benchmarks by @​lizthegrey in klauspost/compress#1237
• zip: reject entries named "." in ReadDir to stop infinite fs.WalkDir by @​Raghuvardhan-Reddy78 in klauspost/compress#1249
• zstd: decode at full speed into exact-size destinations by @​lizthegrey in klauspost/compress#1246
• s2: Reject short index chunk in RemoveIndexHeaders by @​Raghuvardhan-Reddy78 in klauspost/compress#1254
• zstd, huff0: keep the encoder bit writers in registers by @​lizthegrey in klauspost/compress#1245
• huff0: reuse Scratch across inputs in the fuzzers by @​lizthegrey in klauspost/compress#1257

New Contributors

• @​Raghuvardhan-Reddy78 made their first contribution in klauspost/compress#1235
• @​SulimanAbdulrazzaq made their first contribution in klauspost/compress#1255

Full Changelog: klauspost/compress@v1.20.1...v1.20.3

v1.20.2

• zstd: Fix DecodeAll crash on specially crafted input. GHSA-fpmh-frq8-7rj8.
• s2: fix LZ4 block conversion writing past dst by @​klauspost in klauspost/compress#1244
• dict: Stricter input validation by @​klauspost in klauspost/compress#1250
• zstd: reject snappy copy shorter than minimum match by @​Raghuvardhan-Reddy78 in klauspost/compress#1235

Full Changelog: klauspost/compress@v1.20.1...v1.20.2

Commits

• b946d41 Revert #1255 (#1261)
• 748550b Merge commit from fork
• dd54d86 huff0: reuse Scratch across inputs in the fuzzers (#1257)
• d189b4c gzhttp: do not compress 206 responses without Content-Range, read Accept-Enco...
• 6b91995 zstd, huff0: keep the encoder bit writers in registers (#1245)
• 402c3a5 s2: Reject short index chunk in RemoveIndexHeaders (#1254)
• 29f5f81 build(deps): bump the github-actions group with 4 updates (#1252)
• 9b8ba61 dict: Stricter input validation (#1250)
• da4df9c zstd: decode at full speed into exact-size destinations (#1246)
• 1971eec reject zip entries named "." in ReadDir (#1249)
• Additional commits viewable in compare view

[Copilot]

🔵 Needs a closer look

No defects were identified, but dependency integrity and runtime compatibility remain unverified in the available environment.

0 open findings

What changed in this PR

Updates Thruster’s compression dependency to include upstream security fixes and performance improvements.

Changes:

• Bumps github.com/klauspost/compress from v1.20.1 to v1.20.3.
• Updates the corresponding module checksums.

[!TIP]
If you aren't ready for review, convert to a draft PR.
Click "Convert to draft" or run gh pr ready --undo.
Click "Ready for review" or run gh pr ready to reengage.

File	Description
go.sum	Updates checksums for v1.20.3.
go.mod	Selects compression dependency v1.20.3.

🧠 Review effort: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[dependabot]

Looks like github.com/klauspost/compress is updatable in another way, so this is no longer needed.