fix issue-2081:switch to at.yawk.lz4:lz4-java due to CVE-2025-12183

Signed-off-by: peiyu <[email protected]>

Author: sd4324530

fluss-client/src/main/resources/META-INF/NOTICE

@@ -10,7 +10,7 @@ This project bundles the following dependencies under the Apache Software Licens
 - com.ververica:frocksdbjni:6.20.3-ververica-2.0
 - org.apache.commons:commons-lang3:3.18.0
 - org.apache.commons:commons-math3:3.6.1
-- at.yawk.lz4:lz4-java:1.10.1
+- at.yawk.lz4:lz4-java:1.10.2
 
 This project bundles the following dependencies under the MIT (https://opensource.org/licenses/MIT)
 See bundled license files for details.

fluss-common/pom.xml

@@ -66,7 +66,7 @@
         <dependency>
             <groupId>at.yawk.lz4</groupId>
             <artifactId>lz4-java</artifactId>
-            <version>1.10.1</version>
+            <version>1.10.2</version>
         </dependency>
 
         <dependency>

fluss-server/src/main/resources/META-INF/NOTICE

@@ -13,7 +13,7 @@ This project bundles the following dependencies under the Apache Software Licens
 - commons-cli:commons-cli:1.5.0
 - org.apache.commons:commons-lang3:3.18.0
 - org.apache.commons:commons-math3:3.6.1
-- at.yawk.lz4:lz4-java:1.10.1
+- at.yawk.lz4:lz4-java:1.10.2
 - org.xerial.snappy:snappy-java:1.1.10.4
 
 This project bundles the following dependencies under the MIT (https://opensource.org/licenses/MIT)