chore(deps): Bump the gomod group across 1 directory with 8 updates

[dependabot]

Bumps the gomod group with 6 updates in the / directory:

Package	From	To
golang.org/x/sys	0.46.0	0.47.0
github.com/bodgit/sevenzip	1.6.4	1.6.5
github.com/mattn/go-isatty	0.0.22	0.0.23
github.com/minio/minlz	1.1.1	1.2.0
github.com/wasilibs/go-re2	1.11.0	1.12.0
golang.org/x/crypto	0.53.0	0.54.0

Updates golang.org/x/sys from 0.46.0 to 0.47.0

Commits

• 9e7e939 cpu: handle vendor suffixes in parseRelease
• f6fb8a1 unix: use epoll_pwait rather than epoll_wait
• f3eeabf windows: avoid length overflow in NewNTString
• 3cb6647 unix: update glibc to 2.43
• c507910 windows: document safe usage of TrusteeValue
• See full diff in compare view

Updates github.com/bodgit/sevenzip from 1.6.4 to 1.6.5

Release notes

Sourced from github.com/bodgit/sevenzip's releases.

v1.6.5

1.6.5 (2026-07-10)

Bug Fixes

• deps: update module github.com/andybalholm/brotli to v1.2.2 (#473) (0ba424c)
• deps: update module github.com/klauspost/compress to v1.19.0 (#474) (9dddc71)
• deps: update module github.com/pierrec/lz4/v4 to v4.1.27 (#462) (f4764c5)
• deps: update module github.com/stangelandcl/ppmd to v0.1.1 (#459) (9ab6e10)
• deps: update module golang.org/x/sync to v0.22.0 (#466) (d9d7777)
• deps: update module golang.org/x/text to v0.40.0 (#467) (4271f9b)
• return EOF when buffer is empty (#476) (b9f4edb)

Changelog

Sourced from github.com/bodgit/sevenzip's changelog.

1.6.5 (2026-07-10)

Bug Fixes

• deps: update module github.com/andybalholm/brotli to v1.2.2 (#473) (0ba424c)
• deps: update module github.com/klauspost/compress to v1.19.0 (#474) (9dddc71)
• deps: update module github.com/pierrec/lz4/v4 to v4.1.27 (#462) (f4764c5)
• deps: update module github.com/stangelandcl/ppmd to v0.1.1 (#459) (9ab6e10)
• deps: update module golang.org/x/sync to v0.22.0 (#466) (d9d7777)
• deps: update module golang.org/x/text to v0.40.0 (#467) (4271f9b)
• return EOF when buffer is empty (#476) (b9f4edb)

Commits

• dcfc72a chore(main): release 1.6.5 (#460)
• 9dddc71 fix(deps): update module github.com/klauspost/compress to v1.19.0 (#474)
• 0ba424c fix(deps): update module github.com/andybalholm/brotli to v1.2.2 (#473)
• 4271f9b fix(deps): update module golang.org/x/text to v0.40.0 (#467)
• d9d7777 fix(deps): update module golang.org/x/sync to v0.22.0 (#466)
• 7f22666 chore(deps): update actions/checkout action to v7 (#468)
• b137c31 chore(deps): update marocchino/sticky-pull-request-comment action to v3.0.5 (...
• db3d12f chore(deps): update pre-commit hook commitizen-tools/commitizen to v4.16.4 (#...
• d2efd1c chore(deps): update github/codeql-action action to v4.37.0 (#465)
• b9f4edb fix: return EOF when buffer is empty (#476)
• Additional commits viewable in compare view

Updates github.com/mattn/go-isatty from 0.0.22 to 0.0.23

Commits

• 4bc9b75 Lower go directive to 1.20 for Windows 7 users (#94)
• 4e061da add stub for haiku os (#93)
• See full diff in compare view

Updates github.com/minio/minlz from 1.1.1 to 1.2.0

Release notes

Sourced from github.com/minio/minlz's releases.

v1.2.0

feat: Search compressed data without decompression

Compression saves space, but it usually makes your data opaque: to find anything you first have to decompress the whole thing. MinLZ changes that. A MinLZ stream can carry a small per-block search index that lets mz search find a byte sequence while skipping every block that provably can't contain it — those blocks are never decompressed, and (with a sidecar) never even read from disk.

The result: you keep your data compressed and searchable.

One number to set the scene: finding a specific string in a 10 GB CockroachDB log (compressed to 578 MB) takes 0.14 s with mz search, reading about 133 MB. Decompressing that log and piping it to grep — the usual way to search compressed data — takes ~5 s and reads the whole file. zstd -dc | grep takes ~5 s, lz4 -dc | grep ~10 s. Scanning the raw 10 GB with rg takes ~8 s.

The search index is stored as skippable chunks: older MinLZ readers ignore them and the compressed payload is byte-for-byte unchanged, so adding search is always backward-compatible.

Search indexes can be built while compressing or after the fact as sidecar streams, allowing them to be used separately from the compressed data.

---

How it works (in 30 seconds)

Every block gets a tiny bloom-filter table: the byte-windows in the block are hashed and their bits set. To search, mz search hashes the same-length windows of your pattern and checks each block's table:

• any window bit missing → the pattern is definitely not in that block → skip it (no decode);
• all bits present → the block might match → decode and scan it.

Longer/rarer patterns produce more independent window checks, so blocks that don't contain them are rejected with near-certainty. Tables can live inline in the .mz, or in a sidecar .mzs file you build afterwards — handy for data you can't or don't want to re-compress.

This is why it matches with compression. Compressible data is very likely to produce search indexes that are also useful, meaning there is a reasonable reduction in the search table compared to the raw data.

For full details: SEARCH.md (usage & tuning) and SPEC_SEARCH.md (wire format).

---

When to use it — and when not

... (truncated)

Commits

• 6613957 Upgrade compression dependency (#56)
• 6af501e docs: Fix outdated docs and errors. (#55)
• 0051ca9 Minor amd64 decoder tweaks (#54)
• c9c2bdf l3: Do re-matching on borders (#53)
• 05790d8 Add github.com/KarpelesLab/minlz-rs to ports (#52)
• df67e49 search: Fix miscounting (#50)
• 8ac7c53 Don't skip uncompressed indexing when having a prefix (#51)
• cfcc325 Add prefix only test (#49)
• eadfacd Bump the github-actions group with 6 updates (#48)
• c8038d8 Align assembly encoders with Go (#47)
• Additional commits viewable in compare view

Updates github.com/wasilibs/go-re2 from 1.11.0 to 1.12.0

Release notes

Sourced from github.com/wasilibs/go-re2's releases.

v1.12.0

This is a big release - the default backend has been switched from wazero to wasm2go, which has been available for preview since 1.11.0. Thanks to help from @​ncruces, wasm2go has gotten even faster and now we see it beat wazero in almost all benchmark cases (just 1 exception in compiling a pathological expression where it's a little slower). It is also using less memory and should have improved concurrency, and with less reliance on Go internals, it should have less issues on new Go version releases than we have seen in the past. re2_wazero build tag is preserved for now if you need to fallback - and please file an issue if you do! In a future version it will be retired.

This release also retires support for TinyGo via build tags - if you still use this with TinyGo, it is recommended to pin to an older version.

Full Changelog: wasilibs/go-re2@v1.11.0...v1.12.0

Commits

• 35b35ec Remove remaining tinygo references (#252)
• edc64fc Switch default backend to wasm2go (#251)
• 4482bc1 Update module github.com/curioswitch/go-build to v0.8.1 (#250)
• 6cb9ea4 Update curioswitch/go-build action to v0.8.1 (#249)
• 86b24c9 Reduce stack size for wasm2go (#248)
• a986698 Disable race detector for exhaustive test like Go (#247)
• 5a1b67d Raise test timeout
• ec9272b Update module github.com/curioswitch/go-build to v0.7.4 (#244)
• a42ba24 Update to latest wasm2go (#246)
• a435f6d Update cross-platform-actions/action action to v1.3.0 (#245)
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.53.0 to 0.54.0

Commits

• cdce021 go.mod: update golang.org/x dependencies
• d9474cc openpgp: make the deprecation message more explicit
• 7626c50 ssh: verify declared key type matches decoded key in authorized_keys
• 0471e79 ssh/agent: enforce strict limits on DSA key parameters
• 6435c37 ssh: sanitize client disconnect messages
• 7d695da ssh/agent: drain channel stderr in agent forwarders
• 5b7f841 acme/autocert: fix data race in Manager.createCert
• 0b316e7 argon2: update RFC 9106 parameter recommendations
• 55aec0a x509roots/fallback: update bundle
• 5f2de1a internal: remove wycheproof tests
• See full diff in compare view

Updates golang.org/x/sync from 0.21.0 to 0.22.0

Commits

• 1eb64d4 semaphore: panic on negative weights
• See full diff in compare view

Updates golang.org/x/text from 0.38.0 to 0.40.0

Commits

• 724af9c go.mod: update golang.org/x dependencies
• bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
• b326f3d go.mod: update golang.org/x dependencies
• 5ae8e57 unicode/norm: avoid infinite loop on invalid input
• 0dc94a2 all: fix some comments
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions