Merge pull request #206 from bimberlabinternal/25.11_fb_mixcr

Bump lz4-java version

Author: bbimber

tcrdb/build.gradle

@@ -5,6 +5,13 @@ repositories {
    mavenCentral()
 }
 
+configurations.all {
+    resolutionStrategy {
+        // Related to: https://nvd.nist.gov/vuln/detail/CVE-2025-12183
+        force "at.yawk.lz4:lz4-java:${lz4Version}"
+    }
+}
+
 dependencies {
    BuildUtils.addLabKeyDependency(project: project, config: "implementation", depProjectPath: ":server:modules:DiscvrLabKeyModules:singlecell", depProjectConfig: "apiJarFile")
    BuildUtils.addLabKeyDependency(project: project, config: "implementation", depProjectPath: ":server:modules:DiscvrLabKeyModules:SequenceAnalysis", depProjectConfig: "apiJarFile")

tcrdb/gradle.properties

@@ -1 +1,3 @@
-repseqVersion=1.7.0
+repseqVersion=1.7.0
+# Related to: https://nvd.nist.gov/vuln/detail/CVE-2025-12183
+lz4Version=1.9.0