diff --git a/gradle.lockfile b/gradle.lockfile
index 603d0910..7b62cd37 100644
--- a/gradle.lockfile
+++ b/gradle.lockfile
@@ -6,7 +6,7 @@ com.fasterxml.jackson.core:jackson-core:2.16.2=compileClasspath,runtimeClasspath
 com.fasterxml.jackson.core:jackson-databind:2.16.2=compileClasspath,runtimeClasspath
 com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.16.2=compileClasspath,runtimeClasspath
 com.fasterxml.jackson:jackson-bom:2.16.2=compileClasspath,runtimeClasspath
-commons-codec:commons-codec:1.17.0=compileClasspath,runtimeClasspath
+commons-codec:commons-codec:1.17.1=compileClasspath,runtimeClasspath
 commons-io:commons-io:2.16.1=compileClasspath,runtimeClasspath
 javax.validation:validation-api:2.0.1.Final=compileClasspath,runtimeClasspath
 org.apache.commons:commons-compress:1.26.2=compileClasspath,runtimeClasspath
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 417d3556..8c1b06e6 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -16,7 +16,7 @@ jackson = "2.16.2"
 embulk-util-file = "0.2.0"
 
 commons-compress = "1.26.2"
-commons-codec = "1.17.0"
+commons-codec = "1.17.1"
 commons-io = "2.16.1"
 commons-lang3 = "3.14.0"