lz4-java v1.12.1

Security release for GHSA-48mj-8f7c-7qfm.

What's Changed

• Update dependency me.qoomon:maven-git-versioning-extension to v9.12.3 by @renovate[bot] in #152
• Update dependency maven to v3.10.0 by @renovate[bot] in #153
• Update github/codeql-action action to v4.38.3 by @renovate[bot] in #156
• Update dependency org.sonatype.central:central-publishing-maven-plugin to v0.12.0 by @renovate[bot] in #159
• Update ossf/scorecard-action action to v2.5.0 by @renovate[bot] in #158
• Update astral-sh/setup-uv action to v10.3.0 by @renovate[bot] in #157
• Update actions/upload-artifact digest to cf430e0 by @renovate[bot] in #155
• Update actions/setup-java action to v6 by @renovate[bot] in #87
• Update actions/download-artifact digest to 9000827 by @renovate[bot] in #154
• Throw LZ4Exception for input shorter than the length prefix by @yawkat in #160
• Bound the compressed length of oversized LZ4 blocks by @yawkat in #162
• Update github/codeql-action action to v4.39.0 by @renovate[bot] in #163
• Use the buffer limit for the safe decompress(ByteBuffer, int, ByteBuffer, int) by @yawkat in #161
• Allocate stream block buffers only as block data arrives by @yawkat in #167
• Update astral-sh/setup-uv action to v10.3.1 by @renovate[bot] in #166
• Update github/codeql-action action to v4.39.1 by @renovate[bot] in #165
• Update dependency org.mvel:mvel2 to v2.6.0.Final by @renovate[bot] in #164

Full Changelog: v1.12.0...v1.12.1