fix(deps): update dependency at.yawk.lz4:lz4-java to v1.10.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
at.yawk.lz4:lz4-java	dependencies	minor	1.8.1 -> 1.10.0

---

Release Notes

yawkat/lz4-java (at.yawk.lz4:lz4-java)

v1.10.0: lz4-java v1.10.0

This release does not contain security-relevant changes. It was made for #​3, so that users of LZ4BlockInputStream can migrate to safeDecompressor() to mitigate the performance impact of the CVE‐2025‐12183 patch. Note that this still requires a change in user code.

What's Changed

• Replace old repository links & improve README by @​Marcono1234 in #​2
• Remove unused POM template files by @​Marcono1234 in #​1
• Hide util package from Javadoc by @​Marcono1234 in #​4
• Allow to create LZ4BlockInputStream with LZ4SafeDecompressor by @​meshcow in #​3
• Fix remaining ArrayIndexOutOfBoundsExceptions in LZ4DecompressorTest by @​Marcono1234 and @​yawkat in #​6

New Contributors

• @​Marcono1234 made their first contribution in #​2
• @​meshcow made their first contribution in #​3
• @​yawkat made their first contribution in #​6

Full Changelog: yawkat/lz4-java@v1.9.0...v1.10.0

v1.9.0: lz4-java v1.9.0

• Replace ant-based build with maven (@​yawkat)
• Use multi-platform GitHub actions for native library build (@​yawkat)
• Update lz4 to v1.10.0 (@​yawkat)
• Improve Java implementation bounds checking and tests (@​yawkat and @​Marcono1234)

Unsafe implementations should be secure now, but are not yet enabled by default.

Full Changelog: yawkat/lz4-java@v1.8.1...v1.9.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[we-release]

🎉 This PR is included in version 2.0.1 🎉

The release is available on:

• v2.0.1
• GitHub release

Your semantic-release bot 📦🚀