build(deps): bump the all-go-mod-patch-and-minor group with 7 updates (#4351) Bumps the all-go-mod-patch-and-minor group with 7 updates: | Package | From | To | | --- | --- | --- | | [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) | `1.39.0` | `1.40.0` | | [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.5` | `4.1.6` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.20.1` | `1.20.3` | | [github.com/molecule-man/go-brrr](https://github.com/molecule-man/go-brrr) | `1.2.0` | `1.3.0` | | [github.com/valkey-io/valkey-go](https://github.com/valkey-io/valkey-go) | `1.0.78` | `1.0.79` | | [github.com/valkey-io/valkey-go/valkeyhook](https://github.com/valkey-io/valkey-go) | `1.0.78` | `1.0.79` | | [github.com/valkey-io/valkey-go/valkeyotel](https://github.com/valkey-io/valkey-go) | `1.0.78` | `1.0.79` | Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.39.0 to 1.40.0

Release notes

Sourced from github.com/envoyproxy/go-control-plane/envoy's releases.

envoy/v1.40.0

Full Changelog: envoy/v1.39.0...envoy/v1.40.0

Commits

5c5ac77 Mirrored from envoyproxy/envoy @ 37b04b2316a368523cc1a547a888b8780e388e64
1eb1cb5 Mirrored from envoyproxy/envoy @ 483dce4a81168dd49c4d29d68762576f5f5170a1
0b31c01 Mirrored from envoyproxy/envoy @ 9a24324c9a64bf890f97595dfd9e319b283a1647
7685700 Mirrored from envoyproxy/envoy @ 8c1381c08dd9b9a1ed032dc705126f3ff2a43479
1c27b09 Mirrored from envoyproxy/envoy @ 4f0901b7eb7d5c22d1aa443e54927cece1ef94ae
13eafbb Mirrored from envoyproxy/envoy @ 3c0b0f5a0dea55e3c691084ba5b7b8a016a5c126
c869b7a Mirrored from envoyproxy/envoy @ b0703eaa722aaa0f26cda3e69f1c403047ea537a
94ef575 Mirrored from envoyproxy/envoy @ 7cc513ffcc0ae6fa0ccb5d473c0195d9810e606a
dee69b2 Mirrored from envoyproxy/envoy @ bca939504b7f5cf8993991ca259e27179787ff7c
1bc8af8 Mirrored from envoyproxy/envoy @ 9c3d9aff1a06abe70e6c0bca9ddcdaa3ed8faeba
Additional commits viewable in compare view

Updates `github.com/go-jose/go-jose/v4` from 4.1.5 to 4.1.6

Release notes

Sourced from github.com/go-jose/go-jose/v4's releases.

v4.1.6

Fixed Security Issues

This release contains a fix for https://github.com/go-jose/go-jose/security/advisories/GHSA-mgcc-cww5-fp2q

Breaking Changes

The fix for https://github.com/go-jose/go-jose/security/advisories/GHSA-mgcc-cww5-fp2q involves capping the size of the RSA modulus of keys accepted by JWK parsing. This limit is 4096 bits. If you need this to be higher, set MaxRSAModulusBits before performing any JWK parsing.

Changed

Reject mismatched JWE CEK lengths by @akshithg in go-jose/go-jose#266

Add a tests containerfile and threat model by @mcpherrinm in go-jose/go-jose#300

Fix error message for future issued tokens by @inahga in go-jose/go-jose#303

Full Changelog: https://github.com/go-jose/go-jose/compare/v4.1.5...v4.1.6

Commits

a0111f8 Merge commit from fork
dd39a41 Fix error message for future issued tokens (#303)
13b7118 Add a tests containerfile and threat model (#300)
25b55fe Reject mismatched JWE CEK lengths (#266)
See full diff in compare view

Updates `github.com/klauspost/compress` from 1.20.1 to 1.20.3

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.20.3

What's Changed

zstd: two-pass decode with match-source prefetch on arm64 (largest win decoding SpeedBestCompression-class data) by @lizthegrey in klauspost/compress#1212

zstd: speed up better encoder hashing, primes in registers on arm64 by @lizthegrey in klauspost/compress#1230

zstd: reuse dictionary sequence tables in the encoder by @lizthegrey in klauspost/compress#1233

zstd: close most of the decode gap to libzstd on real corpora by @lizthegrey in klauspost/compress#1232

huff0: align the decode inner loops to 64 bytes by @lizthegrey in klauspost/compress#1236

zstd: keep default-encoder hash primes in registers on arm64 by @lizthegrey in klauspost/compress#1241

zstd: align the sequence decode and execute loops to 64 bytes by @lizthegrey in klauspost/compress#1240

zstd, huff0: cheaper per-block table setup by @lizthegrey in klauspost/compress#1234

zstd, s2, flate: smoke-test Silesia in CI, add real-corpus benchmarks by @lizthegrey in klauspost/compress#1237

zip: reject entries named "." in ReadDir to stop infinite fs.WalkDir by @Raghuvardhan-Reddy78 in klauspost/compress#1249

zstd: decode at full speed into exact-size destinations by @lizthegrey in klauspost/compress#1246

s2: Reject short index chunk in RemoveIndexHeaders by @Raghuvardhan-Reddy78 in klauspost/compress#1254

zstd, huff0: keep the encoder bit writers in registers by @lizthegrey in klauspost/compress#1245

huff0: reuse Scratch across inputs in the fuzzers by @lizthegrey in klauspost/compress#1257

New Contributors

@Raghuvardhan-Reddy78 made their first contribution in klauspost/compress#1235

@SulimanAbdulrazzaq made their first contribution in klauspost/compress#1255

Full Changelog: https://github.com/klauspost/compress/compare/v1.20.1...v1.20.3

v1.20.2

zstd: Fix DecodeAll crash on specially crafted input. GHSA-fpmh-frq8-7rj8.

s2: fix LZ4 block conversion writing past dst by @klauspost in klauspost/compress#1244

dict: Stricter input validation by @klauspost in klauspost/compress#1250

zstd: reject snappy copy shorter than minimum match by @Raghuvardhan-Reddy78 in klauspost/compress#1235

Full Changelog: https://github.com/klauspost/compress/compare/v1.20.1...v1.20.2

Commits

b946d41 Revert #1255 (#1261)
748550b Merge commit from fork
dd54d86 huff0: reuse Scratch across inputs in the fuzzers (#1257)
d189b4c gzhttp: do not compress 206 responses without Content-Range, read Accept-Enco...
6b91995 zstd, huff0: keep the encoder bit writers in registers (#1245)
402c3a5 s2: Reject short index chunk in RemoveIndexHeaders (#1254)
29f5f81 build(deps): bump the github-actions group with 4 updates (#1252)
9b8ba61 dict: Stricter input validation (#1250)
da4df9c zstd: decode at full speed into exact-size destinations (#1246)
1971eec reject zip entries named "." in ReadDir (#1249)
Additional commits viewable in compare view

Updates `github.com/molecule-man/go-brrr` from 1.2.0 to 1.3.0

Release notes

Sourced from github.com/molecule-man/go-brrr's releases.

v1.3.0

Highlights

Breaking: Writer.Reset clears the size hint (#58). Before this release .Reset kept WriterOptions.SizeHint for all later streams. The writer then tuned its match finder for the wrong input size. The output stayed valid but speed and ratio were not optimal. Now .Reset clears the hint and encoder estimates the size from the first .Write. To set a hint for the next stream, use the new .ResetWithSizeHint.

This change affects you only if you set WriterOptions.SizeHint and reuse the writer with Reset. A typical http middleware sets no hint and writes in 32 KB chunks so its behavior does not change.

Faster decompression (#60). Geomean +6.9% on Intel and +4.9% on AMD on our benchmark set. Large inputs decompress 10–17% faster.

Faster compression of large inputs at levels 5 and 6. If the input is 1 MB or larger levels 5 and 6 use new match finders. This needs the default window or larger. The encoder gets the input size from SizeHint or from a first .Write of >1MB.

files over 8 MB: geomean +18.9% for levels 5 and 6 (#59).

Silesia, level 5: +6.5% on Intel and AMD (#66).

Silesia, level 6: +2–4% (#64), then +4–6% (#68). The purego build gains +9%.

Faster levels 0 and 1. Silesia at level 0: +7.3% on Intel and +9.4% on AMD (#61). Silesia at level 1: +13.8% on AMD (#62). These gains do not depend on the size hint.

Fixes

Levels 10 and 11: dictionary match encoding (#57). Some long matches against the built-in static dictionary were encoded wrong at levels 10 and 11. Levels 0–9 use a different code path and are not affected. A new nightly fuzz test covers this case.

Levels 5–9: byte parity with the C reference (#51). When the ring buffer wraps levels 5–9 now pick the same matches as the C reference and produce the same bytes. The output was valid before, but byte parity on all levels makes the life significantly easier when it comes to testing. Thanks to @the-hotmann.

What's Changed

Fix corruption from dict match length codes (levels 10+) by @molecule-man in molecule-man/go-brrr#57

feat(writer)!: add ResetWithSizeHint, and make Reset clear the size hint by @molecule-man in molecule-man/go-brrr#58

perf(q5 q6): switch hashers to new tagged scans when useful by @molecule-man in molecule-man/go-brrr#59

perf(decode): improve Silesia throughput on amd cpus by @molecule-man in molecule-man/go-brrr#60

perf(q0): speed up literal and command writes by @molecule-man in molecule-man/go-brrr#61

perf(q1): write literals with the 4-per-store literal writer by @molecule-man in molecule-man/go-brrr#62

fix(encoder): restore the ring-buffer end checks so q5–q9 match C on a wrapped ring by @the-hotmann in molecule-man/go-brrr#51

perf(encoder): reduce ring checks in match scans by @molecule-man in molecule-man/go-brrr#63

perf(q6): prefetch the next h6b5 bucket during the SSE2 tag scan by @molecule-man in molecule-man/go-brrr#64

perf(q5): prefetch next h6 bucket by @molecule-man in molecule-man/go-brrr#65

perf(q5): silesia-related optimizations by @molecule-man in molecule-man/go-brrr#66

ci: add big-endian to nightly matrix by @molecule-man in molecule-man/go-brrr#67

perf(q6): scan h6b5 and h6b5u buckets in amd64 assembly by @molecule-man in molecule-man/go-brrr#68

perf(q2): reuse the hash word for the match check in the wrapped h2 path by @molecule-man in molecule-man/go-brrr#69

Full Changelog: https://github.com/molecule-man/go-brrr/compare/v1.2.0...v1.3.0

Commits

d4075a9 docs: rerun benchmarks before release
a28292e docs: rerung benchmarks and redraw plots before release
7af14ad docs(plots): switch to svg
8eaba8b test: introduce possibility to roll over custom globs in benchmarks
f363ac6 Merge pull request #69 from molecule-man/perf/q2-amd
327d75a perf(q2): drop the early loads in the wrapped h2 path
9854dcf perf(q2): warm the next bucket and candidate in the wrapped h2 path
9623689 Merge pull request #68 from molecule-man/perf/q6-asm
ebb8a81 perf(q6): warm the next bucket in the generic h6b5 and h6b5u scans
270e9bb perf(q6): scan the h6b5u bucket in amd64 asm as the last call
Additional commits viewable in compare view

Updates `github.com/valkey-io/valkey-go` from 1.0.78 to 1.0.79

Release notes

Sourced from github.com/valkey-io/valkey-go's releases.

1.0.79

Changes

Features

Reuse connections after cancelled blocking commands: a blocking command built with .UnblockOnCancel() sends CLIENT UNBLOCKredis/rueidis#1030

MUnlink helper: unlinks many keys at once, grouping them by slot in cluster mode (#197)

ClusterScanner helper: iterates CLUSTERSCAN results with Iter(). Adds ClusterScanEntry and AsClusterScanEntry() (#172)

valkeylimiter: new opt-in GCRA algorithm (AlgorithmGCRA), plus AllowAtMost, Reset and WithBurst. Fixed Window stays the default (#176)

valkeycompatrate: new module that is a drop-in replacement for go-redis/redis_rate/v10 (#176)

valkeycompat: added MSetEX (#164), Latency and LatencyReset (#169), and ACLUsers, ACLWhoAmI and ACLGenPass (#187)

valkeyotel: DoCache and DoMultiCache spans now carry db.cache.hit and db.cache.miss counts (#189)

Bug Fixes

NewClient no longer returns a non-nil Client that wraps a nil pointer when construction fails (#192)

valkeyaside: fixed a deadlock during FLUSHDB/FLUSHALL (#185)

A failed sync-path command no longer starts the background reader, which could mistake a late reply for a protocol error (#203)

DoMulti on a cluster client no longer reserves a 256 KiB stack frame on every call (#204)

On a DedicatedClientredis/rueidis#1030

valkeycompat: fixed ACLDryRun and ACLLog with no count. ClientInfo parsing now accepts unknown flags (#187)

Docs

Added the stream methods to the valkeyhook example (#195)

Fixed the Receive cleanup and parse-error examples (#182)

Contributors

We'd like to thank all the contributors who worked on this release!

@BeyondCreative, @KartikYZ, @NotAFlightRisk, @frozenbonito, @magiclin99, @nelzblooket, @rueian, @sonalijhala-23 and @weihong-xu-hpe

Commits

1b6ea86 feat: bump v1.0.79
a6f5a25 feat: CLIENT UNBLOCK cancelled blocking commands to reuse the connection (#1030)
48112fa Feat/structured acl api (#187)
a4e5fe3 valkeylimiter: add GCRA rate limiting strategy and valkeycompatrate package (...
29a282a fix: do not start the reader when the sync path fails (#203)
80de089 fix: avoid copying wslots onto the stack in _pickMulti (#204)
1d5dcf6 feat: add MUnlink helper (#197)
b552b5c docs: add the stream methods to the valkeyhook example (#195)
894a46a fix: NewClient must not return a typed-nil Client on construction errors (#192)
b7c8e2e emit trace attributes for cache hits (#189)
Additional commits viewable in compare view

Updates `github.com/valkey-io/valkey-go/valkeyhook` from 1.0.78 to 1.0.79

Release notes

Sourced from github.com/valkey-io/valkey-go/valkeyhook's releases.

1.0.79

Changes

Features

Reuse connections after cancelled blocking commands: a blocking command built with .UnblockOnCancel() sends CLIENT UNBLOCKredis/rueidis#1030

MUnlink helper: unlinks many keys at once, grouping them by slot in cluster mode (#197)

ClusterScanner helper: iterates CLUSTERSCAN results with Iter(). Adds ClusterScanEntry and AsClusterScanEntry() (#172)

valkeylimiter: new opt-in GCRA algorithm (AlgorithmGCRA), plus AllowAtMost, Reset and WithBurst. Fixed Window stays the default (#176)

valkeycompatrate: new module that is a drop-in replacement for go-redis/redis_rate/v10 (#176)

valkeycompat: added MSetEX (#164), Latency and LatencyReset (#169), and ACLUsers, ACLWhoAmI and ACLGenPass (#187)

valkeyotel: DoCache and DoMultiCache spans now carry db.cache.hit and db.cache.miss counts (#189)

Bug Fixes

NewClient no longer returns a non-nil Client that wraps a nil pointer when construction fails (#192)

valkeyaside: fixed a deadlock during FLUSHDB/FLUSHALL (#185)

A failed sync-path command no longer starts the background reader, which could mistake a late reply for a protocol error (#203)

DoMulti on a cluster client no longer reserves a 256 KiB stack frame on every call (#204)

On a DedicatedClientredis/rueidis#1030

valkeycompat: fixed ACLDryRun and ACLLog with no count. ClientInfo parsing now accepts unknown flags (#187)

Docs

Added the stream methods to the valkeyhook example (#195)

Fixed the Receive cleanup and parse-error examples (#182)

Contributors

We'd like to thank all the contributors who worked on this release!

@BeyondCreative, @KartikYZ, @NotAFlightRisk, @frozenbonito, @magiclin99, @nelzblooket, @rueian, @sonalijhala-23 and @weihong-xu-hpe

Commits

1b6ea86 feat: bump v1.0.79
a6f5a25 feat: CLIENT UNBLOCK cancelled blocking commands to reuse the connection (#1030)
48112fa Feat/structured acl api (#187)
a4e5fe3 valkeylimiter: add GCRA rate limiting strategy and valkeycompatrate package (...
29a282a fix: do not start the reader when the sync path fails (#203)
80de089 fix: avoid copying wslots onto the stack in _pickMulti (#204)
1d5dcf6 feat: add MUnlink helper (#197)
b552b5c docs: add the stream methods to the valkeyhook example (#195)
894a46a fix: NewClient must not return a typed-nil Client on construction errors (#192)
b7c8e2e emit trace attributes for cache hits (#189)
Additional commits viewable in compare view

Updates `github.com/valkey-io/valkey-go/valkeyotel` from 1.0.78 to 1.0.79

Release notes

Sourced from github.com/valkey-io/valkey-go/valkeyotel's releases.

1.0.79

Changes

Features

Reuse connections after cancelled blocking commands: a blocking command built with .UnblockOnCancel() sends CLIENT UNBLOCKredis/rueidis#1030

MUnlink helper: unlinks many keys at once, grouping them by slot in cluster mode (#197)

ClusterScanner helper: iterates CLUSTERSCAN results with Iter(). Adds ClusterScanEntry and AsClusterScanEntry() (#172)

valkeylimiter: new opt-in GCRA algorithm (AlgorithmGCRA), plus AllowAtMost, Reset and WithBurst. Fixed Window stays the default (#176)

valkeycompatrate: new module that is a drop-in replacement for go-redis/redis_rate/v10 (#176)

valkeycompat: added MSetEX (#164), Latency and LatencyReset (#169), and ACLUsers, ACLWhoAmI and ACLGenPass (#187)

valkeyotel: DoCache and DoMultiCache spans now carry db.cache.hit and db.cache.miss counts (#189)

Bug Fixes

NewClient no longer returns a non-nil Client that wraps a nil pointer when construction fails (#192)

valkeyaside: fixed a deadlock during FLUSHDB/FLUSHALL (#185)

A failed sync-path command no longer starts the background reader, which could mistake a late reply for a protocol error (#203)

DoMulti on a cluster client no longer reserves a 256 KiB stack frame on every call (#204)

On a DedicatedClientredis/rueidis#1030

valkeycompat: fixed ACLDryRun and ACLLog with no count. ClientInfo parsing now accepts unknown flags (#187)

Docs

Added the stream methods to the valkeyhook example (#195)

Fixed the Receive cleanup and parse-error examples (#182)

Contributors

We'd like to thank all the contributors who worked on this release!

@BeyondCreative, @KartikYZ, @NotAFlightRisk, @frozenbonito, @magiclin99, @nelzblooket, @rueian, @sonalijhala-23 and @weihong-xu-hpe

Commits

1b6ea86 feat: bump v1.0.79
a6f5a25 feat: CLIENT UNBLOCK cancelled blocking commands to reuse the connection (#1030)
48112fa Feat/structured acl api (#187)
a4e5fe3 valkeylimiter: add GCRA rate limiting strategy and valkeycompatrate package (...
29a282a fix: do not start the reader when the sync path fails (#203)
80de089 fix: avoid copying wslots onto the stack in _pickMulti (#204)
1d5dcf6 feat: add MUnlink helper (#197)
b552b5c docs: add the stream methods to the valkeyhook example (#195)
894a46a fix: NewClient must not return a typed-nil Client on construction errors (#192)
b7c8e2e emit trace attributes for cache hits (#189)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Sunbelt Computer Software

PL/B Language Development and Support