docker-java-core should depend on commons-compress without security vulnerabilities #1691

Defines and pulls in the transitive dependency org.apache.commons:commons-compress:1.20 which has 4 known security vulnerabilities.

• CVE-2021-36090
• CVE-2021-35517
• CVE-2021-35516
• CVE-2021-35515

The replacement is version 1.21.