build(deps): bump the go-dependencies group with 6 updates by dependabot[bot] · Pull Request #1929 · fastly/cli

dependabot · 2026-10-07T13:39:53Z

Bumps the go-dependencies group with 6 updates:

Package	From	To
github.com/minio/minlz	`1.2.0`	`1.2.1`
github.com/andybalholm/brotli	`1.2.4`	`1.2.6`
github.com/klauspost/compress	`1.20.0`	`1.20.1`
github.com/klauspost/pgzip	`1.2.6`	`1.2.7`
github.com/pierrec/lz4/v4	`4.1.30`	`4.1.31`
github.com/fastly/go-fastly/v17	`17.7.0`	`17.8.0`

Updates github.com/minio/minlz from 1.2.0 to 1.2.1

Release notes

Sourced from github.com/minio/minlz's releases.

v1.2.1

What's Changed

arm64: assembly block encoders, and replace the hand-written decoder, both lowered from the amd64 avo program by @lizthegrey in minio/minlz#60

Clamp the Go LevelBalanced skip to match the assembly by @lizthegrey in minio/minlz#61

Fix early bail exit on Go versions by @klauspost in minio/minlz#65

New Contributors

@lizthegrey made their first contribution in minio/minlz#61

Full Changelog: minio/minlz@v1.2.0...v1.2.1

Commits

14f15af _generate: bump the avo arm64 lowering and use its PCALIGN (#72)
b4b05f3 Make BenchmarkDecodeBlock inputs independent of the build (#66)
37a366b Use fixed fuzz time (#71)
c26c66e Test Go 1.25-1.27 and bump dependencies (#70)
2046f50 Test every level in TestEncodeHuge (#67)
e9f66c0 arm64: assembly block encoders, and replace the hand-written decoder, both lo...
5c0b748 Fix early bail exit on Go versions (#65)
971de02 Clamp the Go LevelBalanced skip to match the assembly (#61)
6dba188 Bump the github-actions group with 3 updates (#62)
9157183 Bump the github-actions group with 5 updates (#58)
Additional commits viewable in compare view

Updates github.com/andybalholm/brotli from 1.2.4 to 1.2.6

Commits

451b9eb Improve Accept-Encoding negotiation
3ecb1ba M4: Prevent spurious matches at distance 0.
112bc8b FastEncoder: explicitly reject matches less than 4 bytes
3995d4a Reader: clear input buffer on reset.
078bdb0 ZM, Trio: update history even for very short blocks
9140f7e flate: make the two copies of match splitting look alike
f88900b Remove test of implementation details.
9933015 flate: split long matches in the statistics and token loops
2e61b23 flate: split matches longer than 258 bytes
See full diff in compare view

Updates github.com/klauspost/compress from 1.20.0 to 1.20.1

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.20.1

What's Changed

zstd: apply reset options to reused frame decoders by @pellared in klauspost/compress#1226

flate: Report unexpected EOF for truncated Huffman extra bits by @rupayon123 in klauspost/compress#1229

flate: avoid FMA in EstimatedBits for portable rounding by @malt3 in klauspost/compress#1224

gzhttp: preserve caller request headers in Transport by @jakezwang in klauspost/compress#1225

gzhttp: only decompress a request when gzip is the outermost coding by @youdie006 in klauspost/compress#1223

zstd/huff0: Optimizations by @lizthegrey in klauspost/compress#1203 klauspost/compress#1205 klauspost/compress#1207 klauspost/compress#1204 klauspost/compress#1208 klauspost/compress#1211 klauspost/compress#1209 klauspost/compress#1210

flate: Speed improvements by @alex in klauspost/compress#1220 klauspost/compress#1218 klauspost/compress#1216 klauspost/compress#1215 klauspost/compress#1214 klauspost/compress#1217

New Contributors

@xingyaner made their first contribution in klauspost/compress#1222

@jakezwang made their first contribution in klauspost/compress#1225

@youdie006 made their first contribution in klauspost/compress#1223

@pellared made their first contribution in klauspost/compress#1226

@malt3 made their first contribution in klauspost/compress#1224

@rupayon123 made their first contribution in klauspost/compress#1229

Full Changelog: klauspost/compress@v1.20.0...v1.20.1

Commits

5d880f2 tests: Pre-release cleanups (#1231)
5ed8a01 Report unexpected EOF for truncated Huffman extra bits (#1229)
0bed724 flate: avoid FMA in EstimatedBits for portable rounding (#1224)
147b531 zstd: apply reset options to reused frame decoders (#1226)
58dac78 gzhttp: only decompress a request when gzip is the outermost coding (#1223)
9b00a55 gzhttp: preserve caller request headers in Transport (#1225)
de8f55d ossfuzz: include zstd seqdec path tests (#1222)
a1c49c6 flate: precompute literal costs for findMatch (#1217)
ebd8190 flate: avoid the hand-rolled sorts when generating Huffman codes (#1214)
4dc0d32 flate: use separate tables in histogramSplit (#1215)
Additional commits viewable in compare view

Updates github.com/klauspost/pgzip from 1.2.6 to 1.2.7

Release notes

Sourced from github.com/klauspost/pgzip's releases.

v1.2.7

What's Changed

Use Go modules by @klauspost in klauspost/pgzip#65

Handle multistream with readahead by @klauspost in klauspost/pgzip#68

fix: return currentBuffer and prevTail to dstPool in init to stop leak by @SAY-5 in klauspost/pgzip#69

fix: avoid deadlock on Read after WriteTo drain by @Solaris-star in klauspost/pgzip#71

New Contributors

@SAY-5 made their first contribution in klauspost/pgzip#69

@Solaris-star made their first contribution in klauspost/pgzip#71

Full Changelog: klauspost/pgzip@v1.2.6...v1.2.7

Commits

740cd9e Update dependency. Run 'go fix' (#73)
7249ebc fix: avoid deadlock on Read after WriteTo drain (#71)
89611d0 fix: return currentBuffer and prevTail to dstPool in init to stop leak (#69)
e0ddb06 Handle multistream with readahead (#68)
6108bbd Fix build status badge in README (#66)
8775b78 Use Go modules (#65)
c45f9e7 Fix Go 1.24 test and clean up (#63)
See full diff in compare view

Updates github.com/pierrec/lz4/v4 from 4.1.30 to 4.1.31

Commits

6cb8f5c Merge pull request #265 from honeycombio/lizf.decode-long-copies
d4bc9de Merge branch 'v4' into lizf.decode-long-copies
fe609fc Merge pull request #258 from Rohilalala/fix/writeto-multiframe-blocksize
a7852b5 Merge pull request #264 from honeycombio/lizf.bench-compress
abe58f0 Merge pull request #263 from honeycombio/lizf.compress-fast
1bde97b Merge pull request #262 from honeycombio/lizf.compress-faster
67ec82c Merge pull request #260 from honeycombio/lizf.robustness-tests
40e59ae Merge pull request #259 from honeycombio/lizf.hc-compress-speed-v2
4df3e1f xxh32: add amd64 assembly with pinned loop alignment
d9989a4 go.mod: require Go 1.22 for PCALIGN on amd64
Additional commits viewable in compare view

Updates github.com/fastly/go-fastly/v17 from 17.7.0 to 17.8.0

Release notes

Sourced from github.com/fastly/go-fastly/v17's releases.

v17.8.0 - 2026-10-07

v17.8.0 (2026-10-07)

Enhancements:

feat(logging_gcs): add support for the public_key attribute (#881)

Changelog

Sourced from github.com/fastly/go-fastly/v17's changelog.

v17.8.0 (2026-10-07)

Enhancements:

feat(logging_gcs): add support for the public_key attribute (#881)

Commits

051a432 Release 17.8.0 (#884)
ec1f543 [CDTOOL-1716] Add support for the 'public_key' attribute for GCS Logging (#881)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [github.com/minio/minlz](https://github.com/minio/minlz) | `1.2.0` | `1.2.1` | | [github.com/andybalholm/brotli](https://github.com/andybalholm/brotli) | `1.2.4` | `1.2.6` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.20.0` | `1.20.1` | | [github.com/klauspost/pgzip](https://github.com/klauspost/pgzip) | `1.2.6` | `1.2.7` | | [github.com/pierrec/lz4/v4](https://github.com/pierrec/lz4) | `4.1.30` | `4.1.31` | | [github.com/fastly/go-fastly/v17](https://github.com/fastly/go-fastly) | `17.7.0` | `17.8.0` | Updates `github.com/minio/minlz` from 1.2.0 to 1.2.1 - [Release notes](https://github.com/minio/minlz/releases) - [Commits](minio/minlz@v1.2.0...v1.2.1) Updates `github.com/andybalholm/brotli` from 1.2.4 to 1.2.6 - [Commits](andybalholm/brotli@v1.2.4...v1.2.6) Updates `github.com/klauspost/compress` from 1.20.0 to 1.20.1 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.20.0...v1.20.1) Updates `github.com/klauspost/pgzip` from 1.2.6 to 1.2.7 - [Release notes](https://github.com/klauspost/pgzip/releases) - [Commits](klauspost/pgzip@v1.2.6...v1.2.7) Updates `github.com/pierrec/lz4/v4` from 4.1.30 to 4.1.31 - [Release notes](https://github.com/pierrec/lz4/releases) - [Commits](pierrec/lz4@v4.1.30...v4.1.31) Updates `github.com/fastly/go-fastly/v17` from 17.7.0 to 17.8.0 - [Release notes](https://github.com/fastly/go-fastly/releases) - [Changelog](https://github.com/fastly/go-fastly/blob/main/CHANGELOG.md) - [Commits](fastly/go-fastly@v17.7.0...v17.8.0) --- updated-dependencies: - dependency-name: github.com/minio/minlz dependency-version: 1.2.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/andybalholm/brotli dependency-version: 1.2.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/klauspost/compress dependency-version: 1.20.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/klauspost/pgzip dependency-version: 1.2.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/pierrec/lz4/v4 dependency-version: 4.1.31 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/fastly/go-fastly/v17 dependency-version: 17.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 7, 2026

dependabot Bot requested a review from a team as a code owner October 7, 2026 13:39

dependabot Bot requested a review from rcaril October 7, 2026 13:39

docs(CHANGELOG.md): add dependency bump from Dependabot

a97ec0e

rcaril approved these changes Oct 7, 2026

View reviewed changes

rcaril enabled auto-merge (squash) October 7, 2026 13:42

rcaril disabled auto-merge October 7, 2026 13:52

rcaril merged commit 6ae7057 into main Oct 7, 2026
13 checks passed

rcaril deleted the dependabot/go_modules/go-dependencies-6c66b84355 branch October 7, 2026 13:52

BrewTestBot mentioned this pull request Oct 15, 2026

fastly 16.2.0 Homebrew/homebrew-core#318774

Merged

Navigation Menu

Repository navigation

build(deps): bump the go-dependencies group with 6 updates - #1929

build(deps): bump the go-dependencies group with 6 updates#1929
rcaril merged 2 commits into
mainfrom
dependabot/go_modules/go-dependencies-6c66b84355

dependabot Bot commented on behalf of github Oct 7, 2026 •

edited by atlassian Bot

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 7, 2026 • edited by atlassian Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.2.1

What's Changed

New Contributors

v1.20.1

What's Changed

New Contributors

v1.2.7

What's Changed

New Contributors

v17.8.0 - 2026-10-07

v17.8.0 (2026-10-07)

Enhancements:

v17.8.0 (2026-10-07)

Enhancements:

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 7, 2026 •

edited by atlassian Bot

Loading