This is an automated email from the ASF dual-hosted git repository.

cwylie pushed a commit to branch 35.0.1
in repository https://gitbox.apache.org/repos/asf/druid.git

commit c2fa7a9d4e46fd923644d0979552f55ea75c78b9
Author: Clint Wylie <[email protected]>
AuthorDate: Thu Dec 4 13:37:49 2025 -0800

    update lz4-java to 1.8.1 (#18804)
---
 licenses.yaml             |  7 ++++---
 multi-stage-query/pom.xml |  2 +-
 pom.xml                   | 13 ++++++++++++-
 processing/pom.xml        |  2 +-
 server/pom.xml            |  2 +-
 5 files changed, 19 insertions(+), 7 deletions(-)

diff --git a/licenses.yaml b/licenses.yaml
index 4e5d201edb7..80813400e8b 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -1455,7 +1455,7 @@ notice: |
     * LICENSE:
       * license/LICENSE.lz4.txt (Apache License 2.0)
     * HOMEPAGE:
-      * https://github.com/jpountz/lz4-java
+      * https://github.com/yawkat/lz4-java
 
   This product optionally depends on 'lzma-java', a LZMA Java compression
   and decompression library, which can be obtained at:
@@ -2464,8 +2464,9 @@ name: LZ4 Java
 license_category: binary
 module: java-core
 license_name: Apache License version 2.0
-version: 1.8.0
+version: 1.8.1
 libraries:
+  - at.yawk.lz4: lz4-java
   - org.lz4: lz4-java
 
 ---
@@ -4584,7 +4585,7 @@ notice: |
     * LICENSE:
       * license/LICENSE.lz4.txt (Apache License 2.0)
     * HOMEPAGE:
-      * https://github.com/jpountz/lz4-java
+      * https://github.com/yawkat/lz4-java
 
   This product optionally depends on 'lzma-java', a LZMA Java compression
   and decompression library, which can be obtained at:
diff --git a/multi-stage-query/pom.xml b/multi-stage-query/pom.xml
index 13530f91c63..fcc7e00956c 100644
--- a/multi-stage-query/pom.xml
+++ b/multi-stage-query/pom.xml
@@ -164,7 +164,7 @@
             <scope>provided</scope>
         </dependency>
         <dependency>
-            <groupId>org.lz4</groupId>
+            <groupId>at.yawk.lz4</groupId>
             <artifactId>lz4-java</artifactId>
             <scope>provided</scope>
         </dependency>
diff --git a/pom.xml b/pom.xml
index d7a246fab47..ecac03cd145 100644
--- a/pom.xml
+++ b/pom.xml
@@ -892,10 +892,21 @@
                 <artifactId>commons-dbcp2</artifactId>
                 <version>2.0.1</version>
             </dependency>
+            <!-- this is relocated to at.yawk.lz4, but license checker script 
(the one that uses licenses.yaml)
+             complains about stuff (our dependencies) using org.lz4 package, 
so put this here even though our own
+              packaging doesn't use it directly anymore
+             -->
             <dependency>
                 <groupId>org.lz4</groupId>
                 <artifactId>lz4-java</artifactId>
-                <version>1.8.0</version>
+                <version>1.8.1</version>
+            </dependency>
+            <!-- dependency:analyze complains if we don't declare this like 
this in our own packaging, since this is
+             what org.lz4 is relocated as -->
+            <dependency>
+                <groupId>at.yawk.lz4</groupId>
+                <artifactId>lz4-java</artifactId>
+                <version>1.8.1</version>
             </dependency>
             <dependency>
                 <groupId>org.xerial.snappy</groupId>
diff --git a/processing/pom.xml b/processing/pom.xml
index d91bc7acf96..cba95760ca4 100644
--- a/processing/pom.xml
+++ b/processing/pom.xml
@@ -248,7 +248,7 @@
       <artifactId>compress-lzf</artifactId>
     </dependency>
     <dependency>
-      <groupId>org.lz4</groupId>
+      <groupId>at.yawk.lz4</groupId>
       <artifactId>lz4-java</artifactId>
     </dependency>
     <dependency>
diff --git a/server/pom.xml b/server/pom.xml
index 8ff1215cc1d..765723e460b 100644
--- a/server/pom.xml
+++ b/server/pom.xml
@@ -156,7 +156,7 @@
             <artifactId>elasticache-java-cluster-client</artifactId>
         </dependency>
         <dependency>
-            <groupId>org.lz4</groupId>
+            <groupId>at.yawk.lz4</groupId>
             <artifactId>lz4-java</artifactId>
         </dependency>
         <dependency>


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to