30292044720
70%

Ran 27 Jul 2026 06:12PM UTC

Jobs 1

Files 841

Run time 2min

Badge

Embed ▾

Committed 27 Jul 2026 06:03PM UTC coverage: 69.609% (+0.008%) from 69.601%

Build # 30292044720

Build Type

push

github

Committed by

web-flow

Commit Message

Bump klauspost/compress to v1.18.7 (#6041)

GO-2026-5841 (GHSA-259r-337f-4rfw), an out-of-bounds read in
github.com/klauspost/compress/s2, is fixed in v1.18.7. We were on
v1.18.6, so govulncheck fails on main and on every open PR.

The advisory is newly published rather than newly introduced: the same
Go Vulnerability Check passed on PR #6031 at 17:08 and failed at 17:52
on a test-only delta. govulncheck queries the advisory database at run
time, so nothing in the tree changed -- the database did.

Bumped rather than added to the workflow's IGNORED_VULNS. That list is
reserved for advisories with no available fix (GO-2026-5932, openpgp
deprecated-by-design) or an unavoidable toolchain lag (GO-2026-5037/38/39,
pending a setup-go manifest refresh), each with a written justification.
This one has a fixed version, so excluding it would misuse that
mechanism.

The dependency stays indirect: it reaches us via prometheus/client_golang
-> klauspost/compress/zstd. Only zstd is used, not the affected s2
package, so exposure was low -- but the fix is one line, so reachability
does not need arguing.

Coverage Stats

80600 of 115789 relevant lines covered (69.61%)

86.25 hits per line

Coverage Regressions

Lines	Coverage	∆	File
3	80.56	-0.7%	pkg/transport/proxy/httpsse/http_proxy.go
2	88.24	-5.88%	pkg/vmcp/backendregistry/registry.go

Jobs

ID	Job ID	Ran	Files	Coverage
1	30292044720.1	27 Jul 2026 06:12PM UTC	841	69.61	GitHub Action Run

stacklok / toolhive / 30292044720
70%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 30292044720

stacklok / toolhive / 30292044720 70%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 30292044720

stacklok / toolhive / 30292044720
70%

README BADGES
x