Bump org.apache.commons:commons-compress

Bumps org.apache.commons:commons-compress from 1.18 to 1.26.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

onebusaway-alerts-persistence/pom.xml

@@ -75,7 +75,7 @@
 		<dependency>
 			<groupId>org.apache.commons</groupId>
 			<artifactId>commons-compress</artifactId>
-			<version>1.18</version>
+			<version>1.26.0</version>
 		</dependency>
 		<dependency>
 			<groupId>commons-lang</groupId>