KAFKA-21174: Update lz4 to 1.11.4

[harmadasg]

Bump lz4-java from 1.11.2 to 1.11.4 to fix GHSA-gm45-99xc-r7wv,
GHSA-343h-94h5-c4wr and GHSA-mcr4-qmvw-px4g.
https://github.com/yawkat/lz4-java/releases/tag/v1.11.4

Compression level constants are unchanged, so CompressionType needs no
update. 1.12.0 tightens input validation and can be evaluated
separately.

Reviewers: Chia-Ping Tsai chia7712@gmail.com, Ken Huang
s7133700@gmail.com

[harmadasg]

Hi @chia7712 @m1a2st, regarding my comment in the description

Note that there is also a 1.12.0 release but but based on the description it might contain breaking changes without additional security patches. Needs further investigation maybe in a separate ticket and the current Jira can handle the immediate CVE fix

If you prefer I can also do the update straight to 1.12.0 in this ticket but needs some additional time to verify the changes

[chia7712]

We can update it to 1.11.4 in this PR to keep things simple :)

[m1a2st]

Thanks, LGTM

[chia7712]

LGTM. @harmadasg It would be great if you could file a ticket to track the update to 1.12.0.

[harmadasg]

Hi @chia7712 @m1a2st thank you for the review. I have created KAFKA-21185 to cover the update to 1.12.0. The update looks safe based on my analysis in #23637