switch to at.yawk.lz4:lz4-java due to CVE‐2025‐12183

Author: pjfanning

project/Dependencies.scala

@@ -104,7 +104,7 @@ object Dependencies {
       .excludeAll(ExclusionRule(organization = "org.scala-lang"))
     val jacksonCbor3 = "tools.jackson.dataformat" % "jackson-dataformat-cbor" % jacksonVersion3
 
-    val lz4Java = "org.lz4" % "lz4-java" % "1.8.0"
+    val lz4Java = "at.yawk.lz4" % "lz4-java" % "1.9.0"
 
     val logback = "ch.qos.logback" % "logback-classic" % logbackVersion