diff --git a/app-gradle-plugin/build.gradle.kts b/app-gradle-plugin/build.gradle.kts
index 77ee5f1d5..74f701d52 100644
--- a/app-gradle-plugin/build.gradle.kts
+++ b/app-gradle-plugin/build.gradle.kts
@@ -51,6 +51,9 @@ dependencies {
   implementation(gradleApi())
   api("com.google.cloud.tools:appengine-plugins-core:0.13.5-SNAPSHOT") // {x-version-update:appengine-plugins-core:current}
 
+  implementation("org.apache.commons:commons-lang3:3.18.0")
+  implementation("commons-io:commons-io:2.20.0")
+
   testImplementation("commons-io:commons-io:2.11.0")
   testImplementation("junit:junit:4.13.2")
   testImplementation("org.hamcrest:hamcrest-library:2.2")
diff --git a/appengine-plugins-core/pom.xml b/appengine-plugins-core/pom.xml
index 52f3d7464..669f427b3 100644
--- a/appengine-plugins-core/pom.xml
+++ b/appengine-plugins-core/pom.xml
@@ -110,7 +110,7 @@
     <dependency>
       <groupId>org.apache.commons</groupId>
       <artifactId>commons-compress</artifactId>
-      <version>1.26.1</version>
+      <version>1.28.0</version>
     </dependency>
 
     <!-- test dependencies -->