Closed harpocrates closed 1 year ago
Please consider this PR. org.lz4:lz4-java
is now at 1.8.0. I've only recently discovered that newer versions of Apache Kafka actively seek out this old version of lz4, and won't decompress properly, even if newer lz4 libraries are on the classpath.
... 3 common frames omitted
Caused by: org.apache.kafka.common.KafkaException: java.lang.RuntimeException: Kafka has detected detected a buggy
lz4-java library (< 1.4.x) on the classpath. If you are using Kafka client libraries, make sure your application does not
accidentally override the version provided by Kafka or include multiple versions of the library on the classpath. The lz4-java
version on the classpath should match the version the Kafka client libraries depend on. Adding -verbose:class to your JVM
arguments may help understand which lz4-java version is getting loaded.
Ok, will integrate and release over weekend
FYI, since this was opened, lz4-java 1.8.0 has been released (on 2021-06-08).
I will probably make it optional dependency.
@jankotek any blockers (other than time) for merging this PR?
This was merged to master, but master isn't incorporated into releases?
The former appears to have migrated to the latter, as per the advisory notice on https://mvnrepository.com/artifact/net.jpountz.lz4/lz4. Another hint:
net.jpountz.lz4
hasn't been updated since 2014 whileorg.lz4
is still seeing recent updates.