dependabot[bot] opened a new pull request, #1386: URL: https://github.com/apache/arrow-go/pull/1386
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.20.1 to 1.20.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/klauspost/compress/releases";>github.com/klauspost/compress's releases</a>.</em></p> <blockquote> <h2>v1.20.3</h2> <h2>What's Changed</h2> <ul> <li>zstd: two-pass decode with match-source prefetch on arm64 (largest win decoding SpeedBestCompression-class data) by <a href="https://github.com/lizthegrey";><code>@lizthegrey</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/1212";>klauspost/compress#1212</a></li> <li>zstd: speed up better encoder hashing, primes in registers on arm64 by <a href="https://github.com/lizthegrey";><code>@lizthegrey</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/1230";>klauspost/compress#1230</a></li> <li>zstd: reuse dictionary sequence tables in the encoder by <a href="https://github.com/lizthegrey";><code>@lizthegrey</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/1233";>klauspost/compress#1233</a></li> <li>zstd: close most of the decode gap to libzstd on real corpora by <a href="https://github.com/lizthegrey";><code>@lizthegrey</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/1232";>klauspost/compress#1232</a></li> <li>huff0: align the decode inner loops to 64 bytes by <a href="https://github.com/lizthegrey";><code>@lizthegrey</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/1236";>klauspost/compress#1236</a></li> <li>zstd: keep default-encoder hash primes in registers on arm64 by <a href="https://github.com/lizthegrey";><code>@lizthegrey</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/1241";>klauspost/compress#1241</a></li> <li>zstd: align the sequence decode and execute loops to 64 bytes by <a href="https://github.com/lizthegrey";><code>@lizthegrey</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/1240";>klauspost/compress#1240</a></li> <li>zstd, huff0: cheaper per-block table setup by <a href="https://github.com/lizthegrey";><code>@lizthegrey</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/1234";>klauspost/compress#1234</a></li> <li>zstd, s2, flate: smoke-test Silesia in CI, add real-corpus benchmarks by <a href="https://github.com/lizthegrey";><code>@lizthegrey</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/1237";>klauspost/compress#1237</a></li> <li>zip: reject entries named "." in ReadDir to stop infinite fs.WalkDir by <a href="https://github.com/Raghuvardhan-Reddy78";><code>@Raghuvardhan-Reddy78</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/1249";>klauspost/compress#1249</a></li> <li>zstd: decode at full speed into exact-size destinations by <a href="https://github.com/lizthegrey";><code>@lizthegrey</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/1246";>klauspost/compress#1246</a></li> <li>s2: Reject short index chunk in RemoveIndexHeaders by <a href="https://github.com/Raghuvardhan-Reddy78";><code>@Raghuvardhan-Reddy78</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/1254";>klauspost/compress#1254</a></li> <li>zstd, huff0: keep the encoder bit writers in registers by <a href="https://github.com/lizthegrey";><code>@lizthegrey</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/1245";>klauspost/compress#1245</a></li> <li>huff0: reuse Scratch across inputs in the fuzzers by <a href="https://github.com/lizthegrey";><code>@lizthegrey</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/1257";>klauspost/compress#1257</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Raghuvardhan-Reddy78";><code>@Raghuvardhan-Reddy78</code></a> made their first contribution in <a href="https://redirect.github.com/klauspost/compress/pull/1235";>klauspost/compress#1235</a></li> <li><a href="https://github.com/SulimanAbdulrazzaq";><code>@SulimanAbdulrazzaq</code></a> made their first contribution in <a href="https://redirect.github.com/klauspost/compress/pull/1255";>klauspost/compress#1255</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/klauspost/compress/compare/v1.20.1...v1.20.3";>https://github.com/klauspost/compress/compare/v1.20.1...v1.20.3</a></p> <h2>v1.20.2</h2> <ul> <li>zstd: Fix DecodeAll crash on specially crafted input. <a href="https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8";>GHSA-fpmh-frq8-7rj8</a>.</li> <li>s2: fix LZ4 block conversion writing past dst by <a href="https://github.com/klauspost";><code>@klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/1244";>klauspost/compress#1244</a></li> <li>dict: Stricter input validation by <a href="https://github.com/klauspost";><code>@klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/1250";>klauspost/compress#1250</a></li> <li>zstd: reject snappy copy shorter than minimum match by <a href="https://github.com/Raghuvardhan-Reddy78";><code>@Raghuvardhan-Reddy78</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/1235";>klauspost/compress#1235</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/klauspost/compress/compare/v1.20.1...v1.20.2";>https://github.com/klauspost/compress/compare/v1.20.1...v1.20.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/klauspost/compress/commit/b946d41b75cee10ea255ced85179e5224748a023";><code>b946d41</code></a> Revert <a href="https://redirect.github.com/klauspost/compress/issues/1255";>#1255</a> (<a href="https://redirect.github.com/klauspost/compress/issues/1261";>#1261</a>)</li> <li><a href="https://github.com/klauspost/compress/commit/748550b77336a1720b51f574d344ab98422c5e2a";><code>748550b</code></a> Merge commit from fork</li> <li><a href="https://github.com/klauspost/compress/commit/dd54d8695696369d9504c9661f3e476a8a69a84a";><code>dd54d86</code></a> huff0: reuse Scratch across inputs in the fuzzers (<a href="https://redirect.github.com/klauspost/compress/issues/1257";>#1257</a>)</li> <li><a href="https://github.com/klauspost/compress/commit/d189b4c2eb01cb5bd3d7c4a4b7e8ac9b02e88281";><code>d189b4c</code></a> gzhttp: do not compress 206 responses without Content-Range, read Accept-Enco...</li> <li><a href="https://github.com/klauspost/compress/commit/6b9199594fc567d83deacdcea4d0130df249109a";><code>6b91995</code></a> zstd, huff0: keep the encoder bit writers in registers (<a href="https://redirect.github.com/klauspost/compress/issues/1245";>#1245</a>)</li> <li><a href="https://github.com/klauspost/compress/commit/402c3a567166a64c1af49735f7f5f40178e48ebd";><code>402c3a5</code></a> s2: Reject short index chunk in RemoveIndexHeaders (<a href="https://redirect.github.com/klauspost/compress/issues/1254";>#1254</a>)</li> <li><a href="https://github.com/klauspost/compress/commit/29f5f81f681bb2af88ca81956346288d677a648e";><code>29f5f81</code></a> build(deps): bump the github-actions group with 4 updates (<a href="https://redirect.github.com/klauspost/compress/issues/1252";>#1252</a>)</li> <li><a href="https://github.com/klauspost/compress/commit/9b8ba6149408b157131b52e424ef97470ced32f7";><code>9b8ba61</code></a> dict: Stricter input validation (<a href="https://redirect.github.com/klauspost/compress/issues/1250";>#1250</a>)</li> <li><a href="https://github.com/klauspost/compress/commit/da4df9cb2b3ca4fe6b813acd710711fd7b5c0dbc";><code>da4df9c</code></a> zstd: decode at full speed into exact-size destinations (<a href="https://redirect.github.com/klauspost/compress/issues/1246";>#1246</a>)</li> <li><a href="https://github.com/klauspost/compress/commit/1971eecb678dfb1ff77c4e5b55787dbc57e9edda";><code>1971eec</code></a> reject zip entries named "." in ReadDir (<a href="https://redirect.github.com/klauspost/compress/issues/1249";>#1249</a>)</li> <li>Additional commits viewable in <a href="https://github.com/klauspost/compress/compare/v1.20.1...v1.20.3";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
