Update lz4-java dependency version to 1.10.2 (#32868)

jtjeferreira · web-flow · commit 24168622fb39 · 2026-01-05T13:22:53.000+01:00
Version 1.10.1 contains a fix to CVE-2025-66566!, but 1.10.2 is the latest one
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
@@ -84,7 +84,7 @@ object Dependencies {
     val jacksonScala = "com.fasterxml.jackson.module" %% "jackson-module-scala" % jacksonCoreVersion // ApacheV2
     val jacksonParameterNames = "com.fasterxml.jackson.module" % "jackson-module-parameter-names" % jacksonCoreVersion // ApacheV2
     val jacksonCbor = "com.fasterxml.jackson.dataformat" % "jackson-dataformat-cbor" % jacksonCoreVersion // ApacheV2
-    val lz4Java = "at.yawk.lz4" % "lz4-java" % "1.10.0" // ApacheV2
+    val lz4Java = "at.yawk.lz4" % "lz4-java" % "1.10.2" // ApacheV2
 
     val logback = "ch.qos.logback" % "logback-classic" % logbackVersion // EPL 1.0
   }

Original file line number	Diff line number	Diff line change
`@@ -84,7 +84,7 @@ object Dependencies {`
`84`	`84`	`val jacksonScala = "com.fasterxml.jackson.module" %% "jackson-module-scala" % jacksonCoreVersion // ApacheV2`
`85`	`85`	`val jacksonParameterNames = "com.fasterxml.jackson.module" % "jackson-module-parameter-names" % jacksonCoreVersion // ApacheV2`
`86`	`86`	`val jacksonCbor = "com.fasterxml.jackson.dataformat" % "jackson-dataformat-cbor" % jacksonCoreVersion // ApacheV2`
`87`		`- val lz4Java = "at.yawk.lz4" % "lz4-java" % "1.10.0" // ApacheV2`
	`87`	`+ val lz4Java = "at.yawk.lz4" % "lz4-java" % "1.10.2" // ApacheV2`
`88`	`88`
`89`	`89`	`val logback = "ch.qos.logback" % "logback-classic" % logbackVersion // EPL 1.0`
`90`	`90`	`}`