From ad5997804b8a4060b0c82ba34a777677d01834f2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 11 Mar 2024 05:33:22 +0000
Subject: [PATCH 1/2] Bump org.apache.commons:commons-compress from 1.25.0 to
 1.26.1

Bumps org.apache.commons:commons-compress from 1.25.0 to 1.26.1.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index a124db45..2bf639da 100644
--- a/pom.xml
+++ b/pom.xml
@@ -390,7 +390,7 @@ under the License.
               <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-compress</artifactId>
-                <version>1.25.0</version>
+                <version>1.26.1</version>
               </dependency>
               <dependency>
                 <groupId>com.github.luben</groupId>

From 73d03b058dabda6003d853f7926b2db311862fcd Mon Sep 17 00:00:00 2001
From: Slawomir Jaranowski <s.jaranowski@gmail.com>
Date: Thu, 14 Mar 2024 23:11:47 +0100
Subject: [PATCH 2/2] Add commons-io to invoker dependency

---
 pom.xml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pom.xml b/pom.xml
index 2bf639da..05cffdcf 100644
--- a/pom.xml
+++ b/pom.xml
@@ -392,6 +392,12 @@ under the License.
                 <artifactId>commons-compress</artifactId>
                 <version>1.26.1</version>
               </dependency>
+              <dependency>
+                <!-- newer version needed by commons-compress -->
+                <groupId>commons-io</groupId>
+                <artifactId>commons-io</artifactId>
+                <version>2.15.1</version>
+              </dependency>
               <dependency>
                 <groupId>com.github.luben</groupId>
                 <artifactId>zstd-jni</artifactId>