Request for new release

[doppelrittberger]

Hi,

would you please consider to merge #1054 and release a new version? The latest release uses net.jpountz.lz4 which is conflicting with org.lz4 used by Apache kafka library. Also upgraded other dependencies, including Eclipse Collections.

Thanks

[jankotek]

Hi, I will look at it this week.

[doppelrittberger]

Hi and happy new year 😀
Any news or something I can help you with? Appreciate the effort.
Thanks

[thomasredlin]

lz4 is now at.yawk.lz4:lz4-java with a patch for CVE‐2025‐12183 (8.8/10)

See:
https://nvd.nist.gov/vuln/detail/CVE-2025-12183
https://ossindex.sonatype.org/vulnerability/CVE-2025-12183
https://github.com/yawkat/lz4-java

[mjschwaiger]

Created #1064 for switch from org.lz4:lz4-java to at.yawk.lz4:lz4-java due to CVE-2025-12183 & CVE-2025-66566.

@jankotek - Hope you're doing well! I was wondering if it’s possible to create a version based on the at.yawk.lz4:lz4-java library? It would be super helpful for all projects using Apache Kafka library, and I think others might benefit from it too.