Skip to content

Commit 7a7eee9

Browse files
committed
Bump lz4-java to 1.10.2 for CVE-2025-12183 & CVE-2025-66566 fixes.
1 parent d19e242 commit 7a7eee9

File tree

1 file changed

+1
-7
lines changed

1 file changed

+1
-7
lines changed

build.gradle

Lines changed: 1 addition & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -670,13 +670,6 @@ project(':iceberg-delta-lake') {
670670
}
671671
}
672672

673-
configurations.all {
674-
resolutionStrategy.capabilitiesResolution.withCapability("org.lz4:lz4-java") {
675-
select("at.yawk.lz4:lz4-java:0")
676-
because("Resolve lz4-java capability conflict between Spark 3.5 (org.lz4:lz4-java:1.8.0) and Iceberg (at.yawk.lz4:lz4-java:1.10.2)")
677-
}
678-
}
679-
680673
// The newest version of delta-core uses Spark 3.5.*. The integration test should only be built
681674
// if iceberg-spark-3.5 is available
682675
if (sparkVersions.contains("3.5")) {
@@ -1244,6 +1237,7 @@ project(':iceberg-bom') {
12441237
subprojects {
12451238
if (project.name.startsWith('iceberg-spark') ||
12461239
project.name.startsWith('iceberg-flink') ||
1240+
project.name.startsWith('iceberg-delta-lake') ||
12471241
project.name.startsWith('iceberg-kafka-connect')) {
12481242

12491243
configurations.all {

0 commit comments

Comments
 (0)