fix issue-2081:switch to at.yawk.lz4:lz4-java due to CVE-2025-12183

Signed-off-by: peiyu <[email protected]>

Author: sd4324530

fluss-client/src/main/resources/META-INF/NOTICE

@@ -10,7 +10,7 @@ This project bundles the following dependencies under the Apache Software Licens
 - com.ververica:frocksdbjni:6.20.3-ververica-2.0
 - org.apache.commons:commons-lang3:3.18.0
 - org.apache.commons:commons-math3:3.6.1
-- org.lz4:lz4-java:1.8.0
+- at.yawk.lz4:lz4-java:1.10.1
 
 This project bundles the following dependencies under the MIT (https://opensource.org/licenses/MIT)
 See bundled license files for details.
@@ -20,4 +20,4 @@ See bundled license files for details.
 This project bundles the following dependencies under BSD License (https://opensource.org/licenses/bsd-license.php).
 See bundled license files for details.
 
-- com.github.luben:zstd-jni:1.5.7-1
+- com.github.luben:zstd-jni:1.5.7-6

fluss-common/pom.xml

@@ -64,15 +64,15 @@
 
         <!-- TODO: these two dependencies need to be shaded. -->
         <dependency>
-            <groupId>org.lz4</groupId>
+            <groupId>at.yawk.lz4</groupId>
             <artifactId>lz4-java</artifactId>
-            <version>1.8.0</version>
+            <version>1.10.1</version>
         </dependency>
 
         <dependency>
             <groupId>com.github.luben</groupId>
             <artifactId>zstd-jni</artifactId>
-            <version>1.5.7-1</version>
+            <version>1.5.7-6</version>
         </dependency>
 
         <!-- RocksDB dependencies -->

fluss-lake/fluss-lake-iceberg/src/main/resources/META-INF/NOTICE

@@ -51,5 +51,5 @@ See bundled license files for details.
 This project bundles the following dependencies under BSD License (https://opensource.org/licenses/bsd-license.php).
 See bundled license files for details.
 
-- com.github.luben:zstd-jni:1.5.7-1
+- com.github.luben:zstd-jni:1.5.7-6
 - org.threeten:threeten-extra:1.7.1

fluss-server/src/main/resources/META-INF/NOTICE

@@ -13,7 +13,7 @@ This project bundles the following dependencies under the Apache Software Licens
 - commons-cli:commons-cli:1.5.0
 - org.apache.commons:commons-lang3:3.18.0
 - org.apache.commons:commons-math3:3.6.1
-- org.lz4:lz4-java:1.8.0
+- at.yawk.lz4:lz4-java:1.10.1
 - org.xerial.snappy:snappy-java:1.1.10.4
 
 This project bundles the following dependencies under the MIT (https://opensource.org/licenses/MIT)
@@ -25,6 +25,6 @@ See bundled license files for details.
 This project bundles the following dependencies under BSD License (https://opensource.org/licenses/bsd-license.php).
 See bundled license files for details.
 
-- com.github.luben:zstd-jni:1.5.7-1
+- com.github.luben:zstd-jni:1.5.7-6