[kernel-internal]

Vulnerability Remediation

This PR was generated by the Socket-centric vulnerability remediation workflow. Review the planned dependency changes and confirmation evidence before merging.

Fixed

CVE/GHSA	Package	Ecosystem	Old Version	New Version	Manifest	Confirmation
GHSA-259r-337f-4rfw	github.com/google/go-containerregistry, github.com/klauspost/compress	None	v0.20.7	1.20.2		confirmed

Not Included

• Deferred by batch limit: 5 advisories. They will be considered by future runs.
• Other deferred scanner findings: 0.
• Unconfirmed attempted fixes: 0.

---

Note

Low Risk
Scope is limited to an indirect dependency version bump with no application code changes.

Overview
Bumps the indirect github.com/klauspost/compress dependency from v1.18.1 to v1.18.7 in go.mod and updates the matching entries in go.sum.

This is a security remediation change (GHSA-259r-337f-4rfw); the module is not imported directly in this repo and is pulled in via the existing container/registry dependency tree.

^{Reviewed by Cursor Bugbot for commit db9cf7b. Bugbot is set up for automated code reviews on this repo. Configure here.}