v1.1.10.4

What's Changed

Security Fix

• CVE-2023-43642 Fixed SnappyInputStream so as not to allocate too large memory when decompressing data with an extremely large chunk size by @tunnelshade (code change)
  • This does not affect users only using Snappy.compress/uncompress methods

🚀 Features

• feature: Upgrade the internal snappy version to 1.1.10 (1.1.8 was wrongly used before) by @xerial in #508
• Support JDK21 (no internal change)

🔗 Dependency Updates

• Update scalafmt-core to 3.7.11 by @xerial-bot in #485
• Update sbt to 1.9.3 by @xerial-bot in #483
• Update scalafmt-core to 3.7.12 by @xerial-bot in #487
• Bump actions/checkout from 3 to 4 by @dependabot in #502
• Update sbt to 1.9.4 by @xerial-bot in #496
• Update scalafmt-core to 3.7.14 by @xerial-bot in #501
• Update sbt to 1.9.6 by @xerial-bot in #505
• Update native libraries by @github-actions in #503

🛠 Internal Updates

• Update airframe-log to 23.7.4 by @xerial-bot in #486
• Update airframe-log to 23.8.0 by @xerial-bot in #488
• Update sbt-scalafmt to 2.5.2 by @xerial-bot in #500
• Update airframe-log to 23.8.6 by @xerial-bot in #497
• Update sbt-scalafmt to 2.5.1 by @xerial-bot in #499
• Update airframe-log to 23.9.1 by @xerial-bot in #504
• Update airframe-log to 23.9.2 by @xerial-bot in #509

Other Changes

• Update NOTICE by @imsudiproy in #492

Full Changelog: v1.1.10.3...v1.1.10.4