More dependabot-reported vuln upgrades

Author: cowtowncoder

pom.xml

@@ -37,18 +37,18 @@ JNI-backed ones.
       <!-- may locally build 1.2.5-SNAPSHOT but otherwise -->
       <version.japex>1.2.4</version.japex>
 
-      <version.aircompressor>0.18</version.aircompressor>
+      <version.aircompressor>0.27</version.aircompressor>
       <version.brotli.jvm>0.2.0</version.brotli.jvm>
       <version.commons-compress>1.26.2</version.commons-compress>
       <version.lz4>1.7.1</version.lz4>
-      <version.lzf>1.1</version.lzf>
+      <version.lzf>1.1.2</version.lzf>
       <version.snappy-jni>1.1.8.4</version.snappy-jni>
       <version.std-jni>1.4.9-5</version.std-jni>
       <version.xz-tukaani>1.9</version.xz-tukaani>
 
       <!--  deprecated codecs -->
       <version.lzo-java-old>1.0.6</version.lzo-java-old>
-      <version.snappy-iq80>0.4</version.snappy-iq80>
+      <version.snappy-iq80>0.5</version.snappy-iq80>
     </properties>
 
     <dependencies>