Release-1.6.311

[Fix #13] Bump Apache Commons Compress to address CVEs (#14)

- Bump Apache Commons Compress to address CVEs
- Bump `org.tukaani/xz` dep to match version referenced by bumped
  version of Apache Commons Compress.

Closes #13