v1.18.4

What's Changed

• gzhttp: Add zstandard to server handler wrapper by @klauspost in #1121
• zstd: Add ResetWithOptions to encoder/decoder by @klauspost in #1122
• gzhttp: preserve qvalue when extra parameters follow in Accept-Encoding by @analytically in #1116

New Contributors

• @analytically made their first contribution in #1116
• @ethaizone made their first contribution in #1124
• @zwass made their first contribution in #1125

Full Changelog: v1.18.2...v1.18.4

v1.18.3

Downstream CVE-2025-61728

See golang/go#77102

Full Changelog: v1.18.2...v1.18.3

v1.18.2

What's Changed

• flate: Fix invalid encoding on level 9 with single value input by @klauspost in #1115
• flate: reduce stateless allocations by @RXamzin in #1106
• build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 in the github-actions group by @dependabot[bot] in #1111

v1.18.1 is marked "retracted" due to invalid flate/zip/gzip encoding.

New Contributors

• @RXamzin made their first contribution in #1106

Full Changelog: v1.18.1...v1.18.2

v1.18.1

What's Changed

• zstd: Fix incorrect buffer size in dictionary encodes by @klauspost in #1059
• s2: check for cap, not len of buffer in EncodeBetter/Best by @vdarulis in #1080
• zstd: Add simple zstd EncodeTo/DecodeTo functions by @klauspost in #1079
• zlib: Avoiding extra allocation in zlib.reader.Reset by @travelpolicy in #1086
• gzhttp: remove redundant err check in zstdReader by @ryanfowler in #1090
• Run modernize. Deprecate Go 1.22 by @klauspost in #1095
• flate: Simplify matchlen by @klauspost in #1101
• flate: Add examples by @klauspost in #1102
• flate: Use exact sizes for huffman tables by @klauspost in #1103
• flate: Faster load+store by @klauspost in #1104
• Add notice to S2 about MinLZ by @klauspost in #1065

New Contributors

• @wooffie made their first contribution in #1069
• @vdarulis made their first contribution in #1080
• @travelpolicy made their first contribution in #1086
• @ryanfowler made their first contribution in #1090

Full Changelog: v1.18.0...v1.18.1

v1.18.0

What's Changed

• Deprecate Go 1.21 and add 1.24 by @klauspost in #1055
• Add unsafe little endian loaders by @klauspost in #1036
• fix: check r.err != nil but return a nil value error err by @alingse in #1028
• refactor: use built-in min function by @Juneezee in #1038
• zstd: use slices.Max for max value in slice by @Juneezee in #1041
• flate: Simplify L4-6 loading by @klauspost in #1043
• flate: Simplify matchlen (remove asm) by @klauspost in #1045
• s2: Add block decode fuzzer by @klauspost in #1044
• s2: Improve small block compression speed w/o asm by @klauspost in #1048
• flate: Fix matchlen L5+L6 by @klauspost in #1049
• flate: Cleanup & reduce casts by @klauspost in #1050

New Contributors

• @tcpdumppy made their first contribution in #1021
• @sam9291 made their first contribution in #1022
• @dezza made their first contribution in #1023
• @alingse made their first contribution in #1028
• @hyunsooda made their first contribution in #1031
• @Juneezee made their first contribution in #1038
• @Bbulatov made their first contribution in #1052

Full Changelog: v1.17.11...v1.18.0

v1.17.11

What's Changed

• zstd: Fix extra CRC written with multiple Close calls by @klauspost in #1017
• s2: Don't use stack for index tables by @klauspost in #1014
• gzhttp: No content-type on no body response code by @juliens in #1011
• gzhttp: Do not set the content-type when response has no body by @kevinpollet in #1013

New Contributors

• @juliens made their first contribution in #1011
• @kevinpollet made their first contribution in #1013

Full Changelog: v1.17.10...v1.17.11

v1.17.10

What's Changed

• gzhttp: Add TransportAlwaysDecompress option. by @klauspost in #978
• s2: Add EncodeBuffer buffer recycling callback by @klauspost in #982
• zstd: Improve memory usage on small streaming encodes by @klauspost in #1007
• gzhttp: Add supported decompress request body by @mirecl in #1002
• flate: read data written with partial flush by @vajexal in #996
• ci: Upgrade Go & other by @klauspost in #1008
• docs: Small typofix in comment by @Jille in #976
• build(deps): bump the github-actions group with 2 updates by @dependabot in #979
• docs: Fix URL typo when installing builddict by @Wikidepia in #980
• build(deps): bump the github-actions group with 2 updates by @dependabot in #985
• Fix typos by @deining in #986
• build(deps): bump github/codeql-action from 3.25.15 to 3.26.6 in the github-actions group by @dependabot in #997

New Contributors

• @Wikidepia made their first contribution in #980
• @deining made their first contribution in #986
• @vajexal made their first contribution in #996
• @mirecl made their first contribution in #1002

Full Changelog: v1.17.9...v1.17.10

v1.17.9

What's Changed

• s2: Reduce ReadFrom temporary allocations by @klauspost in #949
• Fix arm64 vet issues by @klauspost in #964
• flate, zstd: Shave some bytes off amd64 matchLen by @greatroar in #963
• Upgrade zip to 1.22.4 upstream by @klauspost in #970
• zstd: BuildDict fails with RLE table by @klauspost in #951
• Upgrade zlib to upstream by @klauspost in #971

Full Changelog: v1.17.8...v1.17.9

v1.17.8

What's Changed

• zstd: Reject blocks where reserved values are not 0 by @klauspost in #885
• zstd: Add RLE detection+encoding by @klauspost in #938

New Contributors

• @ankon made their first contribution in #932
• @kindhuge made their first contribution in #946

Full Changelog: v1.17.7...v1.17.8

v1.17.7

What's Changed

• s2: Add AsyncFlush method: Complete the block without flushing by @Jille in #927
• s2: Fix literal+repeat exceeds dst crash by @klauspost in #930

Full Changelog: v1.17.6...v1.17.7