bump commons-compress to 1.19 for CVE-2019-12402

I noticed an automated Github security warning for https://nvd.nist.gov/vuln/detail/CVE-2019-12402
spotify · Oct 15, 2019 · 1e29f53 · 1e29f53
1 parent a3f08b4
commit 1e29f53
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/plugin/pom.xml b/plugin/pom.xml
@@ -28,7 +28,7 @@
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-compress</artifactId>
-        <version>1.18</version>
+        <version>1.19</version>
       </dependency>
       <dependency>
         <groupId>org.codehaus.plexus</groupId>