HBASE-30382: Update zstd-jni to 1.5.7-20

[arvindKandpal-ksolves]

What changes were proposed in this pull request?

Bumps zstd-jni from 1.5.7-2 to 1.5.7-20 in the root pom.xml.

Why are the changes needed?

zstd-jni versions prior to 1.5.7-14 contain vulnerable code addressed by:

• CVE-2026-87795
• CVE-2026-87823
• CVE-2026-87825

Does this PR introduce any user-facing change?

No.

How was this patch tested?

Ran the full zstd-jni compression test suite before and after the bump:
TestWALCompressionZstd, TestZstdCodec, TestHFileCompressionZstd,
TestZstdDictionary, TestZstdDictionarySplitMerge, TestZstdByteBuffDecompressor.

Baseline (1.5.7-2): 15 tests run, 0 failures, 0 errors
After bump (1.5.7-15): 15 tests run, 0 failures, 0 errors

Also verified via mvn dependency:tree that the resolved artifact is
com.github.luben:zstd-jni:jar:1.5.7-15.

[arvindKandpal-ksolves]

I guess this is Flakes test fail ? Can anyone help me here ?
same issue with the other branches patches.

[PDavid]

I guess this is Flakes test fail ? Can anyone help me here ? same issue with the other branches patches.

Hi @arvindKandpal-ksolves,

Good question. Unfortunately sometimes there are flakey tests.

If you open the failing check and click on the Summary tab then you can see which tests failed.
Can you please check if those tests pass for you locally on this branch?

[arvindKandpal-ksolves]

Hi @PDavid, thanks for looking into this.

I ran all 35 failing tests locally on this branch (JDK17, matching CI) and they all pass — confirms these are pre-existing flaky tests, unrelated to the zstd-jni bump.

see here :

arvindksi274@KLP2757:~/Opensource-works/hbase$ mvn -pl hbase-client -am test -Dtest=TestRegistryEndpointsRefresher#testDurationBetweenRefreshes -DfailIfNoTests=false 2>&1 | grep -E "Tests run|FAIL|ERROR|BUILD"
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 12.06 s -- in org.apache.hadoop.hbase.client.TestRegistryEndpointsRefresher
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0
[INFO] BUILD SUCCESS

arvindksi274@KLP2757:~/Opensource-works/hbase$ mvn -pl hbase-endpoint -am test -Dtest=TestCoprocessorEndpointTracing#traceSyncTableEndpointCall -DfailIfNoTests=false 2>&1 | grep -E "Tests run|FAIL|ERROR|BUILD"
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 21.65 s -- in org.apache.hadoop.hbase.coprocessor.TestCoprocessorEndpointTracing
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0
[INFO] BUILD SUCCESS

arvindksi274@KLP2757:~/Opensource-works/hbase$ mvn -pl hbase-server -am test -Dtest=TestNettyTLSIPCFileWatcher#testReplaceClientAndServerKeystore -DfailIfNoTests=false 2>&1 | grep -E "Tests run|FAIL|ERROR|BUILD"
[INFO] Tests run: 8, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 19.23 s -- in org.apache.hadoop.hbase.security.TestNettyTLSIPCFileWatcher
[INFO] Tests run: 8, Failures: 0, Errors: 0, Skipped: 0
[INFO] BUILD SUCCESS

arvindksi274@KLP2757:~/Opensource-works/hbase$ mvn -pl hbase-server -am test -Dtest=TestHBaseWalOnEC#testReadWrite,TestEditsBehindDroppedTableTiming#testEditsBehindDroppedTableTiming -DfailIfNoTests=false 2>&1 | grep -E "Tests run|FAIL|ERROR|BUILD"
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 22.03 s -- in org.apache.hadoop.hbase.regionserver.wal.TestHBaseWalOnEC
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 116.4 s -- in org.apache.hadoop.hbase.replication.TestEditsBehindDroppedTableTiming
[INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0
[INFO] BUILD SUCCESS

arvindksi274@KLP2757:~/Opensource-works/hbase$ mvn -pl hbase-server -am test -Dtest=TestHRegion#testBatchMutateWithZeroRowLockWait+testCheckAndDelete_ThatDeleteWasWritten+testCheckAndIncrement+testCheckAndMutateTimestampsAreMonotonic+testCheckAndMutateWithFiltersAndTimeRange+testCheckAndMutate_WithWrongValue+testCloseAbort+testCompactionAffectedByScanners+testDeleteColumns_PostInsert+testDeleteRowWithBloomFilter+testFlushedFileWithNoTags+testGet_Basic+testGet_Empty+testGet_FamilyChecker+testInterruptProtection+testMemstoreSizeAccountingWithFailedPostBatchMutate+testMutateRow+testMutateRowInParallel+testOpenRegionWrittenToWAL+testParallelIncrementWithMemStoreFlush+testPutWithMemStoreFlush+testRegionOnConfigurationChangeLoadsReadOnlyCoprocessorsAfterRepeatedToggle+testRegionReplicaSecondaryIsReadOnly+testScanner_DeleteOneFamilyNotAnother+testScanner_ExplicitColumns_FromFilesOnly_EnforceVersions+testScanner_ExplicitColumns_FromMemStoreAndFiles_EnforceVersions+testScanner_ExplicitColumns_FromMemStore_EnforceVersions+testScanner_JoinedScanners+testScanner_Wildcard_FromFilesOnly_EnforceVersions+testToShowNPEOnRegionScannerReseek -DfailIfNoTests=false 2>&1 | grep -E "Tests run|FAIL|ERROR|BUILD"
[INFO] Tests run: 30, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 111.5 s -- in org.apache.hadoop.hbase.regionserver.TestHRegion
[INFO] Tests run: 30, Failures: 0, Errors: 0, Skipped: 0
[INFO] BUILD SUCCESS

[PDavid]

Many thanks, looks good to me. 👍

[arvindKandpal-ksolves]

ping @liuxiaocs7 , can you review it , and the failed piplines in the other branches PR ( what I see that the failed test are not related to this change) .

[petersomogyi]

I'll merge this once the PR test jobs are completed.

[arvindKandpal-ksolves]

these failures are not related to this changes.

arvindksi274@KLP2757:~/Opensource-works/hbase$ mvn -pl hbase-balancer test -Dtest=TestStochasticLoadBalancerBalanceCluster#testBalanceCluster -DfailIfNoTests=false 2>&1 | grep -E "Tests run|FAIL|ERROR|BUILD|==>"
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 106.6 s -- in org.apache.hadoop.hbase.master.balancer.TestStochasticLoadBalancerBalanceCluster
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0
[INFO] BUILD SUCCESS


arvindksi274@KLP2757:~/Opensource-works/hbase$ mvn -pl hbase-server test -Dtest='TestSnapshotProcedureRSCrashes#testRegionServerCrashWhileVerifyingSnapshot,TestSaslTlsIPC' -DfailIfNoTests=false 2>&1 | grep -E "Tests run|FAIL|ERROR|BUILD|==>"
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 94.40 s -- in org.apache.hadoop.hbase.master.procedure.TestSnapshotProcedureRSCrashes
[INFO] Tests run: 240, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 153.1 s -- in org.apache.hadoop.hbase.security.TestSaslTlsIPC
[INFO] Tests run: 241, Failures: 0, Errors: 0, Skipped: 0
[INFO] BUILD SUCCESS

[liuxiaocs7]

Sorry for the late reply, thanks @arvindKandpal-ksolves!