You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@kafka.apache.org by ch...@apache.org on 2026/09/29 03:10:29 UTC
(kafka) branch trunk updated: KAFKA-21174 Update lz4 to 1.11.4 (#23609)
This is an automated email from the ASF dual-hosted git repository.
chia7712 pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/kafka.git
The following commit(s) were added to refs/heads/trunk by this push:
new 73a58fe501a KAFKA-21174 Update lz4 to 1.11.4 (#23609)
73a58fe501a is described below
commit 73a58fe501afcfefbe14a2a7d91668472919a156
Author: Gergely Harmadas <54...@users.noreply.github.com>
AuthorDate: Tue Sep 29 05:10:21 2026 +0200
KAFKA-21174 Update lz4 to 1.11.4 (#23609)
Bump lz4-java from 1.11.2 to 1.11.4 to fix GHSA-gm45-99xc-r7wv,
GHSA-343h-94h5-c4wr and GHSA-mcr4-qmvw-px4g.
https://github.com/yawkat/lz4-java/releases/tag/v1.11.4
Compression level constants are unchanged, so CompressionType needs no
update. 1.12.0 tightens input validation and can be evaluated
separately.
Reviewers: Chia-Ping Tsai <ch...@gmail.com>, Ken Huang
<s7...@gmail.com>
---
LICENSE-binary | 2 +-
gradle/dependencies.gradle | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/LICENSE-binary b/LICENSE-binary
index c26701f0f4c..51d53685b74 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -242,7 +242,7 @@ License Version 2.0:
- log4j-core-2.25.5
- log4j-slf4j-impl-2.25.5
- log4j-1.2-api-2.25.5
-- lz4-java-1.11.2
+- lz4-java-1.11.4
- maven-artifact-3.9.16
- metrics-core-2.2.0
- opentelemetry-proto-1.3.2-alpha
diff --git a/gradle/dependencies.gradle b/gradle/dependencies.gradle
index abc1987abee..11952432ed3 100644
--- a/gradle/dependencies.gradle
+++ b/gradle/dependencies.gradle
@@ -112,7 +112,7 @@ versions += [
// When updating lz4 make sure the compression levels in org.apache.kafka.common.record.internal.CompressionType are still valid
// https://github.com/apache/kafka/blob/trunk/clients/src/main/java/org/apache/kafka/common/record/internal/CompressionType.java#L73-L74
// https://github.com/yawkat/lz4-java/blob/main/src/java/net/jpountz/lz4/LZ4Constants.java#L23-L24
- lz4: "1.11.2",
+ lz4: "1.11.4",
mavenArtifact: "3.9.16",
metrics: "2.2.0",
mockito: "5.23.0",