From 689d57d8ce3080d152231fb28c559132d0dff1b0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Johannes=20Fred=C3=A9n?=
 <109296772+jfreden@users.noreply.github.com>
Date: Tue, 2 Dec 2025 09:06:47 +0100
Subject: [PATCH] Bump lz4 dependency (#138806)

* Bump lz4 dependency

* fixup! Dependency

* Update docs/changelog/138806.yaml
---
 docs/changelog/138806.yaml       |  5 +++++
 gradle/verification-metadata.xml | 10 +++++-----
 libs/lz4/build.gradle            |  2 +-
 3 files changed, 11 insertions(+), 6 deletions(-)
 create mode 100644 docs/changelog/138806.yaml

diff --git a/docs/changelog/138806.yaml b/docs/changelog/138806.yaml
new file mode 100644
index 0000000000000..9f6158257c178
--- /dev/null
+++ b/docs/changelog/138806.yaml
@@ -0,0 +1,5 @@
+pr: 138806
+summary: Bump lz4 dependency
+area: Infra/Core
+type: upgrade
+issues: []
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index c31bbbd08eab1..80a530b19e8e6 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -62,6 +62,11 @@
             <sha256 value="333ff5369043975b7e031b8b27206937441854738e038c1f47f98d072a20437a" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="at.yawk.lz4" name="lz4-java" version="1.8.1">
+         <artifact name="lz4-java-1.8.1.jar">
+            <sha256 value="1de8ff91b90fba9d4896b8617ed3594c2e4390d321d5a92c34f80e62e406c1b0" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="cglib" name="cglib-nodep" version="3.3.0">
          <artifact name="cglib-nodep-3.3.0.jar">
             <sha256 value="3366d2c88fb576e486d830f521184e8f1839f8c15dcd2151a3f6e1f62b0b37a0" origin="Generated by Gradle"/>
@@ -4271,11 +4276,6 @@
             <sha256 value="9adccb1d87f7e0be70567b952c65552607e2dcbde32a1579a8a639bdcfa1a3c8" origin="Generated by Gradle"/>
          </artifact>
       </component>
-      <component group="org.lz4" name="lz4-java" version="1.8.0">
-         <artifact name="lz4-java-1.8.0.jar">
-            <sha256 value="d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef" origin="Generated by Gradle"/>
-         </artifact>
-      </component>
       <component group="org.mockito" name="mockito-core" version="1.9.5">
          <artifact name="mockito-core-1.9.5.jar">
             <sha256 value="f97483ba0944b9fa133aa29638764ddbeadb51ec3dbc02074c58fa2caecd07fa" origin="Generated by Gradle"/>
diff --git a/libs/lz4/build.gradle b/libs/lz4/build.gradle
index 72e1bb50187a7..13d8236139b48 100644
--- a/libs/lz4/build.gradle
+++ b/libs/lz4/build.gradle
@@ -9,7 +9,7 @@
 apply plugin: 'elasticsearch.publish'
 
 dependencies {
-  api 'org.lz4:lz4-java:1.8.0'
+  api 'at.yawk.lz4:lz4-java:1.8.1'
   api project(':libs:core')
 
   testImplementation(project(":test:framework")) {