Bump commons-compress (deephaven#5108)

Fixes CVE-2023-42503. Potentially relevant if trying to parse an untrusted tar file.

Author: devinrsmith

buildSrc/src/main/groovy/io.deephaven.java-classpath-conventions.gradle

@@ -6,7 +6,7 @@ plugins {
 // TODO(deephaven-core#1162): Adopt java-platform to manage versions
 ext {
     depAnnotations = 'org.jetbrains:annotations:24.0.0'
-    depCommonsCompress = 'org.apache.commons:commons-compress:1.22'
+    depCommonsCompress = 'org.apache.commons:commons-compress:1.25.0'
     depCommonsLang3 = 'org.apache.commons:commons-lang3:3.12.0'
     depCommonsIo = 'commons-io:commons-io:2.11.0'
     depJdom2 = 'org.jdom:jdom2:2.0.6.1'