diff --git a/runtime/protocol/http-client-engines/test-suite/build.gradle.kts b/runtime/protocol/http-client-engines/test-suite/build.gradle.kts
index ece9d6e102..cca6835103 100644
--- a/runtime/protocol/http-client-engines/test-suite/build.gradle.kts
+++ b/runtime/protocol/http-client-engines/test-suite/build.gradle.kts
@@ -48,7 +48,7 @@ kotlin {
                 // FIXME docker-java has a ton of dependencies with vulnerabilities, and they don't seem motivated to fix them.
                 // So we must override their dependencies with the latest patched versions. https://github.com/docker-java/docker-java/issues/1974
                 implementation("com.fasterxml.jackson.core:jackson-databind:2.12.7.1") // https://github.com/docker-java/docker-java/issues/2177
-                implementation("org.apache.commons:commons-compress:1.26.0") // https://github.com/docker-java/docker-java/pull/2256
+                implementation("org.apache.commons:commons-compress:1.28.0") // https://github.com/docker-java/docker-java/pull/2256
                 implementation("org.bouncycastle:bcpkix-jdk18on:1.78") // https://github.com/docker-java/docker-java/pull/2326
 
                 implementation(libs.docker.transport.zerodep)