Update dependencies to avoid several CVEs.

[AntoniusWeinzierl]

• Fixes #362
• Make dependency on commons-compress explicit to pull-in newer version.
• Make dependency on Guava explicit as it no longer is transitively included.