From 83c8d682d715114df2da2d883c29c8079560250f Mon Sep 17 00:00:00 2001
From: Jan Werner <jwerner@confluent.io>
Date: Thu, 29 Feb 2024 08:02:18 -0500
Subject: [PATCH 1/6] update common-compress

---
 licenses.yaml | 2 +-
 pom.xml       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/licenses.yaml b/licenses.yaml
index 329862d95425..c1a55c273076 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -632,7 +632,7 @@ name: Apache Commons Compress
 license_category: binary
 module: java-core
 license_name: Apache License version 2.0
-version: 1.24.0
+version: 1.26.0
 libraries:
   - org.apache.commons: commons-compress
 notices:
diff --git a/pom.xml b/pom.xml
index acccb23703c3..21b2019c0e2e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -572,7 +572,7 @@
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-compress</artifactId>
-                <version>1.24.0</version>
+                <version>1.26.0</version>
             </dependency>
             <dependency>
                 <groupId>org.tukaani</groupId>

From 99f10e50c56277d0ec77f08704964174a3553102 Mon Sep 17 00:00:00 2001
From: Jan Werner <jwerner@confluent.io>
Date: Thu, 29 Feb 2024 08:51:38 -0500
Subject: [PATCH 2/6] update commons-codec, add commons-codec to processing

---
 licenses.yaml      | 2 +-
 pom.xml            | 2 +-
 processing/pom.xml | 4 ++++
 3 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/licenses.yaml b/licenses.yaml
index c1a55c273076..11dc3d1eccd1 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -507,7 +507,7 @@ name: Apache Commons Codec
 license_category: binary
 module: java-core
 license_name: Apache License version 2.0
-version: 1.16.0
+version: 1.16.1
 libraries:
   - commons-codec: commons-codec
 notices:
diff --git a/pom.xml b/pom.xml
index 21b2019c0e2e..beae642db40a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -286,7 +286,7 @@
             <dependency>
                 <groupId>commons-codec</groupId>
                 <artifactId>commons-codec</artifactId>
-                <version>1.16.0</version>
+                <version>1.16.1</version>
             </dependency>
             <dependency>
                 <groupId>commons-io</groupId>
diff --git a/processing/pom.xml b/processing/pom.xml
index bc1365a6f138..4447f4873c50 100644
--- a/processing/pom.xml
+++ b/processing/pom.xml
@@ -81,6 +81,10 @@
       <groupId>org.apache.commons</groupId>
       <artifactId>commons-compress</artifactId>
     </dependency>
+    <dependency>
+      <groupId>org.apache.commons</groupId>
+      <artifactId>commons-codec</artifactId>
+    </dependency>
     <dependency>
       <groupId>org.apache.commons</groupId>
       <artifactId>commons-math3</artifactId>

From 55a5813372db9942426fbf42dd9c4cb308fd33e4 Mon Sep 17 00:00:00 2001
From: Jan Werner <jwerner@confluent.io>
Date: Thu, 29 Feb 2024 09:15:42 -0500
Subject: [PATCH 3/6] rename group

---
 processing/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/processing/pom.xml b/processing/pom.xml
index 4447f4873c50..5898ad83721e 100644
--- a/processing/pom.xml
+++ b/processing/pom.xml
@@ -82,7 +82,7 @@
       <artifactId>commons-compress</artifactId>
     </dependency>
     <dependency>
-      <groupId>org.apache.commons</groupId>
+      <groupId>commons-codec</groupId>
       <artifactId>commons-codec</artifactId>
     </dependency>
     <dependency>

From 2152f2cc58822af7441007e0c5c6c090f63078d7 Mon Sep 17 00:00:00 2001
From: Jan Werner <jwerner@confluent.io>
Date: Thu, 29 Feb 2024 09:39:06 -0500
Subject: [PATCH 4/6] change scope of commons-codec to satisfy the dependency
 check trying this before supressing it in plugin-configuration

---
 processing/pom.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/processing/pom.xml b/processing/pom.xml
index 5898ad83721e..a30cc9e07b98 100644
--- a/processing/pom.xml
+++ b/processing/pom.xml
@@ -84,6 +84,7 @@
     <dependency>
       <groupId>commons-codec</groupId>
       <artifactId>commons-codec</artifactId>
+      <scope>runtime</scope>
     </dependency>
     <dependency>
       <groupId>org.apache.commons</groupId>

From ce398741c2f7e74608d16dfcd0fb7054850e54fe Mon Sep 17 00:00:00 2001
From: Jan Werner <jwerner@confluent.io>
Date: Thu, 29 Feb 2024 14:06:13 -0500
Subject: [PATCH 5/6] added reasoning for commons-codec

---
 processing/pom.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/processing/pom.xml b/processing/pom.xml
index a30cc9e07b98..c81f3518dd64 100644
--- a/processing/pom.xml
+++ b/processing/pom.xml
@@ -81,6 +81,7 @@
       <groupId>org.apache.commons</groupId>
       <artifactId>commons-compress</artifactId>
     </dependency>
+    <!-- commons-codec is runtime dependency of commons-compress starting with 1.26.0 -->
     <dependency>
       <groupId>commons-codec</groupId>
       <artifactId>commons-codec</artifactId>

From 35283ff56c7cc8ad11021e5ef19ec40f63b09ab3 Mon Sep 17 00:00:00 2001
From: Jan Werner <105367074+janjwerner-confluent@users.noreply.github.com>
Date: Thu, 29 Feb 2024 14:46:16 -0500
Subject: [PATCH 6/6] Update processing/pom.xml
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Xavier Léauté <xl+github@xvrl.net>
---
 processing/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/processing/pom.xml b/processing/pom.xml
index c81f3518dd64..1fdb16ac00ff 100644
--- a/processing/pom.xml
+++ b/processing/pom.xml
@@ -81,7 +81,7 @@
       <groupId>org.apache.commons</groupId>
       <artifactId>commons-compress</artifactId>
     </dependency>
-    <!-- commons-codec is runtime dependency of commons-compress starting with 1.26.0 -->
+    <!-- commons-codec is an optional dependency of commons-compress starting with 1.26.0 which we require at runtime -->
     <dependency>
       <groupId>commons-codec</groupId>
       <artifactId>commons-codec</artifactId>