Skip to content

Update dependency org.xerial.snappy:snappy-java to v1.1.10.1#158

Open
dev-mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/org.xerial.snappy-snappy-java-1.x
Open

Update dependency org.xerial.snappy:snappy-java to v1.1.10.1#158
dev-mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/org.xerial.snappy-snappy-java-1.x

Conversation

@dev-mend-for-github-com

Copy link
Copy Markdown

This PR contains the following updates:

Package Type Update Change
org.xerial.snappy:snappy-java compile patch 1.1.21.1.10.1

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score Vulnerability Reachability
Medium Medium 5.9 CVE-2023-34454

Release Notes

xerial/snappy-java (org.xerial.snappy:snappy-java)

v1.1.10.1

Compare Source

What's Changed
🐛 Bug Fixes
🔗 Dependency Updates
🛠 Internal Updates
New Contributors

Full Changelog: xerial/snappy-java@v1.1.10.0...v1.1.10.1

v1.1.10.0

Compare Source

What's Changed

Upgraded the underlying Snappy version to 1.1.10. Since this version, the version number implies (original snappy version).(patch version).

🚀 Features
🔗 Dependency Updates
🛠 Internal Updates
New Contributors

Full Changelog: xerial/snappy-java@v1.1.9.1...v1.1.10.0

v1.1.9.1

Compare Source

What's Changed
  • Removed snappy debug assertion with -DNDEBUG c++ flag @​xerial (#​386) It produces smaller native libraries
🐛 Bug Fixes
🔗 Dependency Updates
🛠 Internal Updates

Full Changelog: xerial/snappy-java@v1.1.9.0...v1.1.10

v1.1.9.0

Compare Source

What's Changed

This version upgrades the native libraries to Snappy 1.1.9. Currently, only a limited number of platforms are supported, including:

  • Win32/64 (Only Intel)
  • Mac64 (Intel, M1, M2). We no longer support Mac32
  • Linux32, 64 (Intel, Arm), arm, armv6, armv7
  • android-arm32
  • ppc64le, ppc64

If you need more platform support, send a PR to build a native library with a docker-based cross compiler (See Makefile and Makefile.common for the reference). If a cross compiler for your platform is not available, create a PR with a native library built with make native command.

🚀 Features
👋 Deprecated
  • Removed pure-java support @​xerial (#​381) because it may cause data corruption.
Bug Fixes
🔗 Dependency Updates
🛠 Internal Updates
📚 Docs

Full Changelog: xerial/snappy-java@1.1.8.4...v1.1.9

v1.1.8.4

Compare Source

This version has been created because of an issue in Maven central synchronization. This version has no change with 1.1.8.3

v1.1.8.3

Compare Source

  • Made pure-java Snappy thread-safe #​271
  • Improved SnappyFramedInput/OutputStream performance by using java.util.zip.CRC32C #​269

v1.1.8.2

Compare Source

  • Support Apple Silicon (M1, Mac-aarch64)
  • Fixed the pure-java Snappy fallback logic when no native library for your platform is found.

v1.1.8.1

Compare Source

  • Fixed an initialization issue when using a recent Mac OS X version #​265

v1.1.8

Compare Source

  • Upgrade to Snappy 1.1.8 with small performance improvements.
  • Big-endian architecture support for pure-java Snappy implementation.
  • linux-aarch64 (arm64) binary embeds libstdc++ for portability (Since 1.1.7.8)

v1.1.7.8

Compare Source

v1.1.7.7

Compare Source

  • Fixed JDK8 compatibility issue #​251 by re-compiling snappy-java with JDK8

v1.1.7.6

Compare Source

https://github.com/xerial/snappy-java/blob/master/Milestone.md#snappy-java-1176-2020-06-26

  • Added an experimental pure-java Snappy support as a fallback if no native library is found to the target platform
  • Changed the minimum JDK version requirement to 1.8

v1.1.7.5

Compare Source

v1.1.7.4

Compare Source

v1.1.7.3

Compare Source

v1.1.7.2

Compare Source

v1.1.7.1

Compare Source

v1.1.7

Compare Source

https://github.com/xerial/snappy-java/blob/master/Milestone.md#snappy-java-117-2017-11-30

v1.1.4

Compare Source

v1.1.2.6

Compare Source

v1.1.2.5

Compare Source

v1.1.2.4

Compare Source

Performance improvement of SnappyInput/OutputStream.

v1.1.2.3

Compare Source

v1.1.2.2

Compare Source

v1.1.2.1

Compare Source


  • If you want to rebase/retry this PR, check this box

@dev-mend-for-github-com dev-mend-for-github-com Bot added the security fix Security fix generated by Mend label Feb 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants