From 727d40bbe9e4873d432e59159a1646a14a4c2320 Mon Sep 17 00:00:00 2001
From: PJ Fanning <pjfanning@users.noreply.github.com>
Date: Sun, 8 Mar 2026 23:47:03 +0100
Subject: [PATCH] [MINOR] Update dependencies for Paimon due to CVEs

---
 contrib/format-paimon/pom.xml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/contrib/format-paimon/pom.xml b/contrib/format-paimon/pom.xml
index 0bc02a9da0a..c711d8ced86 100644
--- a/contrib/format-paimon/pom.xml
+++ b/contrib/format-paimon/pom.xml
@@ -85,12 +85,12 @@
     <dependency>
       <groupId>io.airlift</groupId>
       <artifactId>aircompressor</artifactId>
-      <version>0.27</version>
+      <version>2.0.3</version>
     </dependency>
     <dependency>
-      <groupId>org.lz4</groupId>
+      <groupId>at.yawk.lz4</groupId>
       <artifactId>lz4-java</artifactId>
-      <version>1.8.0</version>
+      <version>1.10.4</version>
     </dependency>
     <dependency>
       <groupId>com.github.luben</groupId>
@@ -100,7 +100,7 @@
     <dependency>
       <groupId>org.xerial.snappy</groupId>
       <artifactId>snappy-java</artifactId>
-      <version>1.1.8.4</version>
+      <version>1.1.10.8</version>
     </dependency>
 
     <!-- Test dependency -->