Skip to content

build(deps): bump github.com/andybalholm/brotli from 1.2.0 to 1.2.1#946

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/github.com/andybalholm/brotli-1.2.1
Open

build(deps): bump github.com/andybalholm/brotli from 1.2.0 to 1.2.1#946
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/github.com/andybalholm/brotli-1.2.1

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 6, 2026

Bumps github.com/andybalholm/brotli from 1.2.0 to 1.2.1.

Commits
  • 0675b24 Remove unnecessary nil checks
  • 946c3e4 matchfinder: verify candidate matches against source data
  • 014fb9c Add Bargain3 MatchFinder
  • deb905c Trio: vary hash table sizes
  • b84bddd M4: fix updating chain for long history
  • a7ad412 Bargain1 & Bargain2: check for matches less often
  • 6c6ca8c Add Bargain1 MatchFinder
  • 01c4855 Add Bargain2 MatchFinder
  • b70ce54 Add HTTPCompressorWithLevel
  • f8935d5 Add a flate encoder using the matchfinder package.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/andybalholm/brotli](https://github.com/andybalholm/brotli) from 1.2.0 to 1.2.1.
- [Commits](andybalholm/brotli@v1.2.0...v1.2.1)

---
updated-dependencies:
- dependency-name: github.com/andybalholm/brotli
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 6, 2026
@codeant-ai
Copy link
Copy Markdown

codeant-ai bot commented Apr 6, 2026

Your free trial PR review limit of 100 PRs has been reached. Please upgrade your plan to continue using CodeAnt AI.

@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgolang/​github.com/​andybalholm/​brotli@​v1.2.0 ⏵ v1.2.1100 +1100100100100

View full report

@kilo-code-bot
Copy link
Copy Markdown

kilo-code-bot bot commented Apr 6, 2026

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Overview

Severity Count
CRITICAL 0
WARNING 0
SUGGESTION 0

This is a Dependabot dependency bump PR updating github.com/andybalholm/brotli from v1.2.0 to v1.2.1. The changes are limited to go.mod and go.sum files containing only version metadata updates.

No code changes were introduced that could introduce bugs, security issues, or breaking changes. This is a standard dependency version bump.

Files Reviewed (2 files)
  • go.mod - version bump only
  • go.sum - checksum update only

Reviewed by minimax-m2.5 · 111,305 tokens

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants