You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@orc.apache.org by cs...@apache.org on 2026/09/21 08:38:43 UTC
(orc) branch main updated: ORC-2221: Upgrade `lz4-java` to 1.11.2
This is an automated email from the ASF dual-hosted git repository.
cxzl25 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/orc.git
The following commit(s) were added to refs/heads/main by this push:
new 2bf1b65ff ORC-2221: Upgrade `lz4-java` to 1.11.2
2bf1b65ff is described below
commit 2bf1b65ffbc5353c88b73489c8a046eba0172869
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Sep 21 16:38:32 2026 +0800
ORC-2221: Upgrade `lz4-java` to 1.11.2
Bumps [at.yawk.lz4:lz4-java](https://github.com/yawkat/lz4-java) from 1.11.1 to 1.11.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/yawkat/lz4-java/releases">at.yawk.lz4:lz4-java's releases</a>.</em></p>
<blockquote>
<h2>lz4-java v1.11.2</h2>
<p><strong>Security release for <a href="https://github.com/yawkat/lz4-java/security/advisories/GHSA-6cx8-rjf8-pr8g">GHSA-6cx8-rjf8-pr8g</a> and <a href="https://github.com/yawkat/lz4-java/security/advisories/GHSA-4v53-57pg-c464">GHSA-4v53-57pg-c464</a>.</strong></p>
<h2>What's Changed</h2>
<ul>
<li>Update bnd.maven.plugin.version to v7.3.0 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/59">yawkat/lz4-java#59</a></li>
<li>Update dependency me.qoomon:maven-git-versioning-extension to v9.12.1 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/62">yawkat/lz4-java#62</a></li>
<li>Update dependency com.carrotsearch.randomizedtesting:randomizedtesting-runner to v2.9.1 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/60">yawkat/lz4-java#60</a></li>
<li>Update dependency maven to v3.9.16 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/57">yawkat/lz4-java#57</a></li>
<li>Update dependency com.code-intelligence:jazzer-junit to v0.30.0 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/61">yawkat/lz4-java#61</a></li>
<li>Pin dependencies by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/56">yawkat/lz4-java#56</a></li>
<li>Update dependency org.codehaus.mojo:build-helper-maven-plugin to v3.6.1 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/64">yawkat/lz4-java#64</a></li>
<li>Update dependency maven-wrapper to v3.3.4 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/63">yawkat/lz4-java#63</a></li>
<li>Update dependency org.apache.maven.plugins:maven-source-plugin to v3.4.0 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/69">yawkat/lz4-java#69</a></li>
<li>Update actions/checkout action to v7 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/74">yawkat/lz4-java#74</a></li>
<li>Update junit-framework monorepo by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/72">yawkat/lz4-java#72</a></li>
<li>Update dependency org.apache.maven.plugins:maven-antrun-plugin to v3.2.0 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/65">yawkat/lz4-java#65</a></li>
<li>Update dependency org.sonatype.central:central-publishing-maven-plugin to v0.11.0 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/71">yawkat/lz4-java#71</a></li>
<li>Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.15.0 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/66">yawkat/lz4-java#66</a></li>
<li>Update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.1 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/67">yawkat/lz4-java#67</a></li>
<li>Update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.6 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/70">yawkat/lz4-java#70</a></li>
<li>Update dependency org.apache.maven.plugins:maven-gpg-plugin to v3 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/77">yawkat/lz4-java#77</a></li>
<li>Update GitHub Artifact Actions (major) by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/78">yawkat/lz4-java#78</a></li>
<li>Update junit-framework monorepo to v6 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/79">yawkat/lz4-java#79</a></li>
<li>Update cloudflare/wrangler-action action to v4 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/76">yawkat/lz4-java#76</a></li>
<li>Update astral-sh/setup-uv action to v9 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/75">yawkat/lz4-java#75</a></li>
<li>Update 8BitJonny/gh-get-current-pr action to v4 by <a href="https://github.com/renovate"><code>renovate</code></a>[bot] in <a href="https://redirect.github.com/yawkat/lz4-java/pull/73">yawkat/lz4-java#73</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/renovate"><code>renovate</code></a>[bot] made their first contribution in <a href="https://redirect.github.com/yawkat/lz4-java/pull/59">yawkat/lz4-java#59</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/yawkat/lz4-java/compare/v1.11.1...v1.11.2">https://github.com/yawkat/lz4-java/compare/v1.11.1...v1.11.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/yawkat/lz4-java/commit/0569f2e80433ac67f89616364a8f584ec3b20c45"><code>0569f2e</code></a> Update 8BitJonny/gh-get-current-pr action to v4 (<a href="https://redirect.github.com/yawkat/lz4-java/issues/73">#73</a>)</li>
<li><a href="https://github.com/yawkat/lz4-java/commit/591ce42d003c63116eea082dd6754081e7f4ac97"><code>591ce42</code></a> Update astral-sh/setup-uv action to v9 (<a href="https://redirect.github.com/yawkat/lz4-java/issues/75">#75</a>)</li>
<li><a href="https://github.com/yawkat/lz4-java/commit/38e96f35ae89f3ac799fb6dcfbbfccb961bc8a16"><code>38e96f3</code></a> Update cloudflare/wrangler-action action to v4 (<a href="https://redirect.github.com/yawkat/lz4-java/issues/76">#76</a>)</li>
<li><a href="https://github.com/yawkat/lz4-java/commit/7fd361089e1449a067ba5694717f7fc8439f280e"><code>7fd3610</code></a> Update junit-framework monorepo to v6 (<a href="https://redirect.github.com/yawkat/lz4-java/issues/79">#79</a>)</li>
<li><a href="https://github.com/yawkat/lz4-java/commit/1a9d94470f7701223999eea42c1486b0fe4e4a3c"><code>1a9d944</code></a> Update GitHub Artifact Actions (<a href="https://redirect.github.com/yawkat/lz4-java/issues/78">#78</a>)</li>
<li><a href="https://github.com/yawkat/lz4-java/commit/0a8a91df5f386caff742489590b5099202cb2c2c"><code>0a8a91d</code></a> Update dependency org.apache.maven.plugins:maven-gpg-plugin to v3 (<a href="https://redirect.github.com/yawkat/lz4-java/issues/77">#77</a>)</li>
<li><a href="https://github.com/yawkat/lz4-java/commit/a2381f3301c75fafcdf28a696aa64615da1907ea"><code>a2381f3</code></a> Update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.6 (<a href="https://redirect.github.com/yawkat/lz4-java/issues/70">#70</a>)</li>
<li><a href="https://github.com/yawkat/lz4-java/commit/8bb81007ab983089fce01f472d370da7ca7313ee"><code>8bb8100</code></a> Update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.1 (<a href="https://redirect.github.com/yawkat/lz4-java/issues/67">#67</a>)</li>
<li><a href="https://github.com/yawkat/lz4-java/commit/8e4f5cc017e40e2e38388d0084ba7b7794c43b46"><code>8e4f5cc</code></a> Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.15.0 (...</li>
<li><a href="https://github.com/yawkat/lz4-java/commit/86752f66f3fb29d007f093b87c8fe248b1f2fd11"><code>86752f6</code></a> Update dependency org.sonatype.central:central-publishing-maven-plugin to v0....</li>
<li>Additional commits viewable in <a href="https://github.com/yawkat/lz4-java/compare/v1.11.1...v1.11.2">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting `dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `dependabot rebase` will rebase this PR
- `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
> **Note**
> Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
Closes #2705 from dependabot[bot]/dependabot/maven/java/at.yawk.lz4-lz4-java-1.11.2.
Authored-by: dependabot[bot] <49...@users.noreply.github.com>
Signed-off-by: Shaoyun Chen <cs...@apache.org>
---
java/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/java/pom.xml b/java/pom.xml
index dfcccf46a..5519b887b 100644
--- a/java/pom.xml
+++ b/java/pom.xml
@@ -176,7 +176,7 @@
<dependency>
<groupId>at.yawk.lz4</groupId>
<artifactId>lz4-java</artifactId>
- <version>1.11.1</version>
+ <version>1.11.2</version>
</dependency>
<dependency>
<groupId>com.github.luben</groupId>