This is an automated email from the ASF dual-hosted git repository.

pvillard pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/nifi.git


The following commit(s) were added to refs/heads/main by this push:
     new be4186ceaf NIFI-15290 Upgraded LZ4 from 1.8.0 to 1.10.0
be4186ceaf is described below

commit be4186ceaffcadd55302b00a2688f80a58b41fe0
Author: exceptionfactory <[email protected]>
AuthorDate: Wed Dec 3 11:57:06 2025 -0600

    NIFI-15290 Upgraded LZ4 from 1.8.0 to 1.10.0
    
    - Excluded and banned org.lz4:lz4-java
    - Added direct dependency on at.yawk.lz4:lz4-java where needed
    - Removed non-applicable LZ4 references from NOTICE files
    
    Signed-off-by: Pierre Villard <[email protected]>
    
    This closes #10597.
---
 nifi-assembly/NOTICE                                     | 16 ----------------
 .../src/main/resources/META-INF/NOTICE                   |  8 --------
 .../nifi-aws-bundle/nifi-aws-processors/pom.xml          | 12 ++++++++++++
 .../src/main/resources/META-INF/NOTICE                   |  8 --------
 .../nifi-iotdb-bundle/nifi-iotdb-processors/pom.xml      | 11 ++++++++++-
 .../nifi-kafka-bundle/nifi-kafka-service-aws/pom.xml     | 12 ++++++++++++
 .../nifi-kafka-bundle/nifi-kafka-service-shared/pom.xml  | 12 ++++++++++++
 .../nifi-mqtt-nar/src/main/resources/META-INF/NOTICE     |  8 --------
 .../src/main/resources/META-INF/NOTICE                   |  8 --------
 .../src/main/resources/META-INF/NOTICE                   |  8 --------
 .../nifi-registry-aws/nifi-registry-aws-assembly/NOTICE  |  8 --------
 pom.xml                                                  |  2 ++
 12 files changed, 48 insertions(+), 65 deletions(-)

diff --git a/nifi-assembly/NOTICE b/nifi-assembly/NOTICE
index 382a571db5..69e9a9658d 100644
--- a/nifi-assembly/NOTICE
+++ b/nifi-assembly/NOTICE
@@ -1548,14 +1548,6 @@ The following binary components are provided under the 
Apache Software License v
          * HOMEPAGE:
            * https://github.com/ning/compress
 
-       This product optionally depends on 'lz4', a LZ4 Java compression
-       and decompression library written by Adrien Grand. It can be obtained 
at:
-
-         * LICENSE:
-           * license/LICENSE.lz4.txt (Apache License 2.0)
-         * HOMEPAGE:
-           * https://github.com/jpountz/lz4-java
-
        This product optionally depends on 'lzma-java', a LZMA Java compression
        and decompression library, which can be obtained at:
 
@@ -1768,14 +1760,6 @@ The following binary components are provided under the 
Apache Software License v
       * HOMEPAGE:
         * https://github.com/ning/compress
 
-    This product optionally depends on 'lz4', a LZ4 Java compression
-    and decompression library written by Adrien Grand. It can be obtained at:
-
-      * LICENSE:
-        * license/LICENSE.lz4.txt (Apache License 2.0)
-      * HOMEPAGE:
-        * https://github.com/jpountz/lz4-java
-
     This product optionally depends on 'lzma-java', a LZMA Java compression
     and decompression library, which can be obtained at:
 
diff --git 
a/nifi-extension-bundles/nifi-aws-bundle/nifi-aws-kinesis-nar/src/main/resources/META-INF/NOTICE
 
b/nifi-extension-bundles/nifi-aws-bundle/nifi-aws-kinesis-nar/src/main/resources/META-INF/NOTICE
index 504e484ed0..eb10832b16 100644
--- 
a/nifi-extension-bundles/nifi-aws-bundle/nifi-aws-kinesis-nar/src/main/resources/META-INF/NOTICE
+++ 
b/nifi-extension-bundles/nifi-aws-bundle/nifi-aws-kinesis-nar/src/main/resources/META-INF/NOTICE
@@ -197,14 +197,6 @@ The following binary components are provided under the 
Apache Software License v
         * HOMEPAGE:
           * https://github.com/ning/compress
 
-      This product optionally depends on 'lz4', a LZ4 Java compression
-      and decompression library written by Adrien Grand. It can be obtained at:
-
-        * LICENSE:
-          * license/LICENSE.lz4.txt (Apache License 2.0)
-        * HOMEPAGE:
-          * https://github.com/jpountz/lz4-java
-
       This product optionally depends on 'lzma-java', a LZMA Java compression
       and decompression library, which can be obtained at:
 
diff --git a/nifi-extension-bundles/nifi-aws-bundle/nifi-aws-processors/pom.xml 
b/nifi-extension-bundles/nifi-aws-bundle/nifi-aws-processors/pom.xml
index 3807e9ccba..1ed04c84d3 100644
--- a/nifi-extension-bundles/nifi-aws-bundle/nifi-aws-processors/pom.xml
+++ b/nifi-extension-bundles/nifi-aws-bundle/nifi-aws-processors/pom.xml
@@ -305,6 +305,18 @@
             <groupId>org.apache.kafka</groupId>
             <artifactId>kafka-clients</artifactId>
             <version>4.1.1</version>
+            <exclusions>
+                <!-- Excluded and replaced with at.yawk.lz4 version -->
+                <exclusion>
+                    <groupId>org.lz4</groupId>
+                    <artifactId>lz4-java</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>at.yawk.lz4</groupId>
+            <artifactId>lz4-java</artifactId>
+            <version>1.10.0</version>
         </dependency>
     </dependencies>
     <build>
diff --git 
a/nifi-extension-bundles/nifi-graph-bundle/nifi-other-graph-services-nar/src/main/resources/META-INF/NOTICE
 
b/nifi-extension-bundles/nifi-graph-bundle/nifi-other-graph-services-nar/src/main/resources/META-INF/NOTICE
index df05408b23..0190079fc0 100644
--- 
a/nifi-extension-bundles/nifi-graph-bundle/nifi-other-graph-services-nar/src/main/resources/META-INF/NOTICE
+++ 
b/nifi-extension-bundles/nifi-graph-bundle/nifi-other-graph-services-nar/src/main/resources/META-INF/NOTICE
@@ -291,14 +291,6 @@ The following binary components are provided under the 
Apache Software License v
          * HOMEPAGE:
            * https://github.com/ning/compress
 
-       This product optionally depends on 'lz4', a LZ4 Java compression
-       and decompression library written by Adrien Grand. It can be obtained 
at:
-
-         * LICENSE:
-           * license/LICENSE.lz4.txt (Apache License 2.0)
-         * HOMEPAGE:
-           * https://github.com/jpountz/lz4-java
-
        This product optionally depends on 'lzma-java', a LZMA Java compression
        and decompression library, which can be obtained at:
 
diff --git 
a/nifi-extension-bundles/nifi-iotdb-bundle/nifi-iotdb-processors/pom.xml 
b/nifi-extension-bundles/nifi-iotdb-bundle/nifi-iotdb-processors/pom.xml
index 253c8ddff3..d219d8f5d9 100644
--- a/nifi-extension-bundles/nifi-iotdb-bundle/nifi-iotdb-processors/pom.xml
+++ b/nifi-extension-bundles/nifi-iotdb-bundle/nifi-iotdb-processors/pom.xml
@@ -38,9 +38,18 @@
                     <groupId>ch.qos.logback</groupId>
                     <artifactId>logback-classic</artifactId>
                 </exclusion>
+                <!-- Excluded and replaced with at.yawk.lz4 version -->
+                <exclusion>
+                    <groupId>org.lz4</groupId>
+                    <artifactId>lz4-java</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
-
+        <dependency>
+            <groupId>at.yawk.lz4</groupId>
+            <artifactId>lz4-java</artifactId>
+            <version>1.10.0</version>
+        </dependency>
         <dependency>
             <groupId>org.apache.nifi</groupId>
             <artifactId>nifi-record-serialization-service-api</artifactId>
diff --git 
a/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-service-aws/pom.xml 
b/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-service-aws/pom.xml
index f4585c257d..bd401160f8 100644
--- a/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-service-aws/pom.xml
+++ b/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-service-aws/pom.xml
@@ -55,6 +55,18 @@
             <groupId>org.apache.kafka</groupId>
             <artifactId>kafka-clients</artifactId>
             <version>${kafka-clients.version}</version>
+            <exclusions>
+                <!-- Excluded and replaced with at.yawk.lz4 version -->
+                <exclusion>
+                    <groupId>org.lz4</groupId>
+                    <artifactId>lz4-java</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>at.yawk.lz4</groupId>
+            <artifactId>lz4-java</artifactId>
+            <version>1.10.0</version>
         </dependency>
         <dependency>
             <groupId>software.amazon.msk</groupId>
diff --git 
a/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-service-shared/pom.xml 
b/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-service-shared/pom.xml
index fc2e531649..01610dd4cc 100644
--- a/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-service-shared/pom.xml
+++ b/nifi-extension-bundles/nifi-kafka-bundle/nifi-kafka-service-shared/pom.xml
@@ -66,6 +66,18 @@
             <groupId>org.apache.kafka</groupId>
             <artifactId>kafka-clients</artifactId>
             <version>${kafka-clients.version}</version>
+            <exclusions>
+                <!-- Excluded and replaced with at.yawk.lz4 version -->
+                <exclusion>
+                    <groupId>org.lz4</groupId>
+                    <artifactId>lz4-java</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>at.yawk.lz4</groupId>
+            <artifactId>lz4-java</artifactId>
+            <version>1.10.0</version>
         </dependency>
         <dependency>
             <groupId>org.apache.nifi</groupId>
diff --git 
a/nifi-extension-bundles/nifi-mqtt-bundle/nifi-mqtt-nar/src/main/resources/META-INF/NOTICE
 
b/nifi-extension-bundles/nifi-mqtt-bundle/nifi-mqtt-nar/src/main/resources/META-INF/NOTICE
index 74d84a8b98..40e3aff3c9 100644
--- 
a/nifi-extension-bundles/nifi-mqtt-bundle/nifi-mqtt-nar/src/main/resources/META-INF/NOTICE
+++ 
b/nifi-extension-bundles/nifi-mqtt-bundle/nifi-mqtt-nar/src/main/resources/META-INF/NOTICE
@@ -186,14 +186,6 @@ The following binary components are provided under the 
Apache Software License v
       * HOMEPAGE:
         * https://github.com/ning/compress
 
-    This product optionally depends on 'lz4', a LZ4 Java compression
-    and decompression library written by Adrien Grand. It can be obtained at:
-
-      * LICENSE:
-        * license/LICENSE.lz4.txt (Apache License 2.0)
-      * HOMEPAGE:
-        * https://github.com/jpountz/lz4-java
-
     This product optionally depends on 'lzma-java', a LZMA Java compression
     and decompression library, which can be obtained at:
 
diff --git 
a/nifi-extension-bundles/nifi-opentelemetry-bundle/nifi-opentelemetry-nar/src/main/resources/META-INF/NOTICE
 
b/nifi-extension-bundles/nifi-opentelemetry-bundle/nifi-opentelemetry-nar/src/main/resources/META-INF/NOTICE
index 8c45ddb690..26defa24a2 100644
--- 
a/nifi-extension-bundles/nifi-opentelemetry-bundle/nifi-opentelemetry-nar/src/main/resources/META-INF/NOTICE
+++ 
b/nifi-extension-bundles/nifi-opentelemetry-bundle/nifi-opentelemetry-nar/src/main/resources/META-INF/NOTICE
@@ -162,14 +162,6 @@ The following binary components are provided under the 
Apache Software License v
         * HOMEPAGE:
           * https://github.com/ning/compress
 
-      This product optionally depends on 'lz4', a LZ4 Java compression
-      and decompression library written by Adrien Grand. It can be obtained at:
-
-        * LICENSE:
-          * license/LICENSE.lz4.txt (Apache License 2.0)
-        * HOMEPAGE:
-          * https://github.com/jpountz/lz4-java
-
       This product optionally depends on 'lzma-java', a LZMA Java compression
       and decompression library, which can be obtained at:
 
diff --git 
a/nifi-extension-bundles/nifi-standard-shared-bundle/nifi-standard-shared-nar/src/main/resources/META-INF/NOTICE
 
b/nifi-extension-bundles/nifi-standard-shared-bundle/nifi-standard-shared-nar/src/main/resources/META-INF/NOTICE
index ab2cbb4126..7881e56837 100644
--- 
a/nifi-extension-bundles/nifi-standard-shared-bundle/nifi-standard-shared-nar/src/main/resources/META-INF/NOTICE
+++ 
b/nifi-extension-bundles/nifi-standard-shared-bundle/nifi-standard-shared-nar/src/main/resources/META-INF/NOTICE
@@ -250,14 +250,6 @@ The following binary components are provided under the 
Apache Software License v
         * HOMEPAGE:
           * https://github.com/ning/compress
 
-      This product optionally depends on 'lz4', a LZ4 Java compression
-      and decompression library written by Adrien Grand. It can be obtained at:
-
-        * LICENSE:
-          * license/LICENSE.lz4.txt (Apache License 2.0)
-        * HOMEPAGE:
-          * https://github.com/jpountz/lz4-java
-
       This product optionally depends on 'lzma-java', a LZMA Java compression
       and decompression library, which can be obtained at:
 
diff --git 
a/nifi-registry/nifi-registry-extensions/nifi-registry-aws/nifi-registry-aws-assembly/NOTICE
 
b/nifi-registry/nifi-registry-extensions/nifi-registry-aws/nifi-registry-aws-assembly/NOTICE
index d2cb102b58..739c150532 100644
--- 
a/nifi-registry/nifi-registry-extensions/nifi-registry-aws/nifi-registry-aws-assembly/NOTICE
+++ 
b/nifi-registry/nifi-registry-extensions/nifi-registry-aws/nifi-registry-aws-assembly/NOTICE
@@ -141,14 +141,6 @@ The following binary components are provided under the 
Apache Software License v
           * HOMEPAGE:
             * https://github.com/ning/compress
 
-        This product optionally depends on 'lz4', a LZ4 Java compression
-        and decompression library written by Adrien Grand. It can be obtained 
at:
-
-          * LICENSE:
-            * license/LICENSE.lz4.txt (Apache License 2.0)
-          * HOMEPAGE:
-            * https://github.com/jpountz/lz4-java
-
         This product optionally depends on 'lzma-java', a LZMA Java compression
         and decompression library, which can be obtained at:
 
diff --git a/pom.xml b/pom.xml
index cd077100fb..81c99e36c1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -939,6 +939,8 @@
                                         
<exclude>org.apache.groovy:groovy-test</exclude>
                                         <!-- Hamcrest should not be used for 
testing -->
                                         
<exclude>org.hamcrest:hamcrest</exclude>
+                                        <!-- org.lz4:lz4-java is no longer 
maintained -->
+                                        <exclude>org.lz4:lz4-java</exclude>
                                     </excludes>
                                 </bannedDependencies>
                             </rules>

Reply via email to