* chore(TUP-29381): CVE on commons-codec * add more exclusions * code changes * add exclusion and add dependency for assmbly plugin * code change * change version to match new * try revert to previous version * try to fix build failed * try add dependency * change version * change for apache.common