diff --git a/hapi-fhir-docs/src/main/resources/ca/uhn/hapi/fhir/changelog/7_2_0/changes.yaml b/hapi-fhir-docs/src/main/resources/ca/uhn/hapi/fhir/changelog/7_2_0/changes.yaml
new file mode 100644
index 00000000000..3beacfe9359
--- /dev/null
+++ b/hapi-fhir-docs/src/main/resources/ca/uhn/hapi/fhir/changelog/7_2_0/changes.yaml
@@ -0,0 +1,8 @@
+---
+- item:
+    type: "add"
+    title: "The version of a few dependencies have been bumped to the latest versions
+    (dependent HAPI modules listed in brackets):
+    <ul>
+        <li>Apache Commons Compress (Base): 1.21 -&gt; 1.26.0</li>
+    </ul>"
diff --git a/pom.xml b/pom.xml
index a7def108081..2cca1308216 100644
--- a/pom.xml
+++ b/pom.xml
@@ -927,7 +927,7 @@
 		<checkstyle_version>10.6.0</checkstyle_version>
 		<maven_changes_version>2.12.1</maven_changes_version>
 		<commons_codec_version>1.15</commons_codec_version>
-		<commons_compress_version>1.21</commons_compress_version>
+		<commons_compress_version>1.26.0</commons_compress_version>
 		<!--
 		Note if you bump the version here - The commons-dbcp2 2.11.0 version
 		explicitly depends on commons-pool2 2.12.0, so we explicitly specify that