2.1.17

• Exclude Apache Commons Compress from exported dependencies. Grafter doesn't use this itself, but it is a transitive dep of me.raynes/fs. Commons Compress has some CVEs which might cause false positives to be flagged by vulnerability scans in downstream consumers.