Bump org.apache.commons:commons-compress (#292)

Bumps org.apache.commons:commons-compress from 1.21 to 1.26.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

tools/maven-bundle-plugin/src/it/embed-multiple-artifacts/pom.xml

@@ -33,7 +33,7 @@ under the License.
     <dependency>
     <groupId>org.apache.commons</groupId>
     <artifactId>commons-compress</artifactId>
-    <version>1.21</version>
+    <version>1.26.0</version>
 </dependency>
   </dependencies>
   <build>