This is an automated email from the ASF dual-hosted git repository.
fanrui pushed a commit to branch release-1.20
in repository https://gitbox.apache.org/repos/asf/flink.git
The following commit(s) were added to refs/heads/release-1.20 by this push:
new d11d8d86b20 [FLINK-39139] Update lz4-java to 1.10.3 (#27647)
d11d8d86b20 is described below
commit d11d8d86b20712950991718ca1a03f993f577d88
Author: Cameron <[email protected]>
AuthorDate: Wed Feb 25 13:16:23 2026 +0000
[FLINK-39139] Update lz4-java to 1.10.3 (#27647)
---
flink-dist/src/main/resources/META-INF/NOTICE | 2 +-
flink-formats/flink-avro-confluent-registry/pom.xml | 4 ++++
flink-runtime/pom.xml | 2 +-
pom.xml | 4 ++--
4 files changed, 8 insertions(+), 4 deletions(-)
diff --git a/flink-dist/src/main/resources/META-INF/NOTICE
b/flink-dist/src/main/resources/META-INF/NOTICE
index 9e249c17f6f..926b09dd367 100644
--- a/flink-dist/src/main/resources/META-INF/NOTICE
+++ b/flink-dist/src/main/resources/META-INF/NOTICE
@@ -17,7 +17,7 @@ This project bundles the following dependencies under the
Apache Software Licens
- org.apache.commons:commons-math3:3.6.1
- org.apache.commons:commons-text:1.10.0
- org.javassist:javassist:3.24.0-GA
-- org.lz4:lz4-java:1.8.0
+- at.yawk.lz4:lz4-java:1.10.3
- org.objenesis:objenesis:2.1
- org.xerial.snappy:snappy-java:1.1.10.4
- tools.profiler:async-profiler:2.9
diff --git a/flink-formats/flink-avro-confluent-registry/pom.xml
b/flink-formats/flink-avro-confluent-registry/pom.xml
index dbd8e159339..83cfe352d75 100644
--- a/flink-formats/flink-avro-confluent-registry/pom.xml
+++ b/flink-formats/flink-avro-confluent-registry/pom.xml
@@ -60,6 +60,10 @@ under the License.
<groupId>org.lz4</groupId>
<artifactId>lz4-java</artifactId>
</exclusion>
+ <exclusion>
+ <groupId>at.yawk.lz4</groupId>
+ <artifactId>lz4-java</artifactId>
+ </exclusion>
<exclusion>
<groupId>io.swagger</groupId>
<artifactId>swagger-core</artifactId>
diff --git a/flink-runtime/pom.xml b/flink-runtime/pom.xml
index fd1820fd6e8..e26133d249a 100644
--- a/flink-runtime/pom.xml
+++ b/flink-runtime/pom.xml
@@ -224,7 +224,7 @@ under the License.
<!-- Lz4 compression library -->
<dependency>
- <groupId>org.lz4</groupId>
+ <groupId>at.yawk.lz4</groupId>
<artifactId>lz4-java</artifactId>
</dependency>
diff --git a/pom.xml b/pom.xml
index 62f0a5868e3..c298062cc85 100644
--- a/pom.xml
+++ b/pom.xml
@@ -163,7 +163,7 @@ under the License.
<protoc.version>3.21.7</protoc.version>
<okhttp.version>3.14.9</okhttp.version>
<testcontainers.version>1.21.4</testcontainers.version>
- <lz4.version>1.8.0</lz4.version>
+ <lz4.version>1.10.3</lz4.version>
<commons.io.version>2.15.1</commons.io.version>
<japicmp.skip>false</japicmp.skip>
<flink.convergence.phase>validate</flink.convergence.phase>
@@ -561,7 +561,7 @@ under the License.
</dependency>
<dependency>
- <groupId>org.lz4</groupId>
+ <groupId>at.yawk.lz4</groupId>
<artifactId>lz4-java</artifactId>
<version>${lz4.version}</version>
</dependency>
