diff --git a/agent/agent-tooling/gradle.lockfile b/agent/agent-tooling/gradle.lockfile
index 9bef4464ba..3b2f41faba 100644
--- a/agent/agent-tooling/gradle.lockfile
+++ b/agent/agent-tooling/gradle.lockfile
@@ -24,7 +24,7 @@ com.github.oshi:oshi-core:6.11.0=runtimeClasspath
 com.google.errorprone:error_prone_annotations:2.48.0=runtimeClasspath
 com.microsoft.azure:msal4j-persistence-extension:1.3.0=runtimeClasspath
 com.microsoft.azure:msal4j:1.23.1=runtimeClasspath
-commons-codec:commons-codec:1.21.0=runtimeClasspath
+commons-codec:commons-codec:1.22.0=runtimeClasspath
 io.netty:netty-bom:4.2.12.Final=runtimeClasspath
 io.netty:netty-buffer:4.2.12.Final=runtimeClasspath
 io.netty:netty-codec-base:4.2.12.Final=runtimeClasspath
diff --git a/dependencyManagement/build.gradle.kts b/dependencyManagement/build.gradle.kts
index 82e88d82a9..20748b60a9 100644
--- a/dependencyManagement/build.gradle.kts
+++ b/dependencyManagement/build.gradle.kts
@@ -61,7 +61,7 @@ val CORE_DEPENDENCIES = listOf(
 val DEPENDENCIES = listOf(
   "ch.qos.logback:logback-classic:1.3.16", // logback 1.4+ requires Java 11+
   "ch.qos.logback.contrib:logback-json-classic:0.1.5",
-  "commons-codec:commons-codec:1.21.0",
+  "commons-codec:commons-codec:1.22.0",
   "org.apache.commons:commons-text:1.15.0",
   "com.google.code.gson:gson:2.13.2",
   "com.azure:azure-core-test:1.26.2", // this is not included in azure-sdk-bom
diff --git a/licenses/commons-codec-1.21.0.jar/META-INF/LICENSE.txt b/licenses/commons-codec-1.22.0.jar/META-INF/LICENSE.txt
similarity index 100%
rename from licenses/commons-codec-1.21.0.jar/META-INF/LICENSE.txt
rename to licenses/commons-codec-1.22.0.jar/META-INF/LICENSE.txt
diff --git a/licenses/commons-codec-1.21.0.jar/META-INF/NOTICE.txt b/licenses/commons-codec-1.22.0.jar/META-INF/NOTICE.txt
similarity index 100%
rename from licenses/commons-codec-1.21.0.jar/META-INF/NOTICE.txt
rename to licenses/commons-codec-1.22.0.jar/META-INF/NOTICE.txt
diff --git a/licenses/more-licenses.md b/licenses/more-licenses.md
index eadd2d5a40..e323bf97f8 100644
--- a/licenses/more-licenses.md
+++ b/licenses/more-licenses.md
@@ -1,7 +1,7 @@
 
 # agent
 ## Dependency License Report
-_2026-04-09 03:15:24 UTC_
+_2026-04-27 03:19:50 UTC_
 ## Apache License, Version 2.0
 
 **1** **Group:** `com.fasterxml.jackson.core` **Name:** `jackson-annotations` **Version:** `2.21`
@@ -37,12 +37,12 @@ _2026-04-09 03:15:24 UTC_
 > - **Manifest License**: Apache License, Version 2.0 (Not Packaged)
 > - **POM License**: Apache License, Version 2.0 - [http://www.apache.org/licenses/LICENSE-2.0](http://www.apache.org/licenses/LICENSE-2.0)
 
-**6** **Group:** `commons-codec` **Name:** `commons-codec` **Version:** `1.21.0`
+**6** **Group:** `commons-codec` **Name:** `commons-codec` **Version:** `1.22.0`
 > - **Project URL**: [https://commons.apache.org/proper/commons-codec/](https://commons.apache.org/proper/commons-codec/)
 > - **Manifest License**: Apache License, Version 2.0 (Not Packaged)
 > - **POM License**: Apache License, Version 2.0 - [http://www.apache.org/licenses/LICENSE-2.0](http://www.apache.org/licenses/LICENSE-2.0)
-> - **Embedded license files**: [commons-codec-1.21.0.jar/META-INF/LICENSE.txt](commons-codec-1.21.0.jar/META-INF/LICENSE.txt)
-    - [commons-codec-1.21.0.jar/META-INF/NOTICE.txt](commons-codec-1.21.0.jar/META-INF/NOTICE.txt)
+> - **Embedded license files**: [commons-codec-1.22.0.jar/META-INF/LICENSE.txt](commons-codec-1.22.0.jar/META-INF/LICENSE.txt)
+    - [commons-codec-1.22.0.jar/META-INF/NOTICE.txt](commons-codec-1.22.0.jar/META-INF/NOTICE.txt)
 
 **7** **Group:** `io.netty` **Name:** `netty-buffer` **Version:** `4.2.12.Final`
 > - **Manifest Project URL**: [https://netty.io/](https://netty.io/)