diff --git a/agent/agent-tooling/gradle.lockfile b/agent/agent-tooling/gradle.lockfile
index 5c969961a3f..9e21a3aa012 100644
--- a/agent/agent-tooling/gradle.lockfile
+++ b/agent/agent-tooling/gradle.lockfile
@@ -24,7 +24,7 @@ com.github.oshi:oshi-core:6.9.1=runtimeClasspath
 com.google.errorprone:error_prone_annotations:2.43.0=runtimeClasspath
 com.microsoft.azure:msal4j-persistence-extension:1.3.0=runtimeClasspath
 com.microsoft.azure:msal4j:1.23.1=runtimeClasspath
-commons-codec:commons-codec:1.19.0=runtimeClasspath
+commons-codec:commons-codec:1.20.0=runtimeClasspath
 io.netty:netty-bom:4.2.7.Final=runtimeClasspath
 io.netty:netty-buffer:4.2.7.Final=runtimeClasspath
 io.netty:netty-codec-base:4.2.7.Final=runtimeClasspath
diff --git a/dependencyManagement/build.gradle.kts b/dependencyManagement/build.gradle.kts
index 4961652e696..9a4582a810c 100644
--- a/dependencyManagement/build.gradle.kts
+++ b/dependencyManagement/build.gradle.kts
@@ -61,7 +61,7 @@ val CORE_DEPENDENCIES = listOf(
 val DEPENDENCIES = listOf(
   "ch.qos.logback:logback-classic:1.3.16", // logback 1.4+ requires Java 11+
   "ch.qos.logback.contrib:logback-json-classic:0.1.5",
-  "commons-codec:commons-codec:1.19.0",
+  "commons-codec:commons-codec:1.20.0",
   "org.apache.commons:commons-text:1.14.0",
   "com.google.code.gson:gson:2.13.2",
   "com.azure:azure-core-test:1.26.2", // this is not included in azure-sdk-bom
diff --git a/licenses/commons-codec-1.19.0.jar/META-INF/LICENSE.txt b/licenses/commons-codec-1.20.0.jar/META-INF/LICENSE.txt
similarity index 100%
rename from licenses/commons-codec-1.19.0.jar/META-INF/LICENSE.txt
rename to licenses/commons-codec-1.20.0.jar/META-INF/LICENSE.txt
diff --git a/licenses/commons-codec-1.19.0.jar/META-INF/NOTICE.txt b/licenses/commons-codec-1.20.0.jar/META-INF/NOTICE.txt
similarity index 100%
rename from licenses/commons-codec-1.19.0.jar/META-INF/NOTICE.txt
rename to licenses/commons-codec-1.20.0.jar/META-INF/NOTICE.txt
diff --git a/licenses/more-licenses.md b/licenses/more-licenses.md
index 39451aaf52e..633200d0353 100644
--- a/licenses/more-licenses.md
+++ b/licenses/more-licenses.md
@@ -1,7 +1,7 @@
 
 # agent
 ## Dependency License Report
-_2025-10-30 03:08:27 UTC_
+_2025-11-07 03:09:45 UTC_
 ## Apache License, Version 2.0
 
 **1** **Group:** `com.fasterxml.jackson.core` **Name:** `jackson-annotations` **Version:** `2.20`
@@ -37,12 +37,12 @@ _2025-10-30 03:08:27 UTC_
 > - **Manifest License**: Apache License, Version 2.0 (Not Packaged)
 > - **POM License**: Apache License, Version 2.0 - [http://www.apache.org/licenses/LICENSE-2.0](http://www.apache.org/licenses/LICENSE-2.0)
 
-**6** **Group:** `commons-codec` **Name:** `commons-codec` **Version:** `1.19.0`
+**6** **Group:** `commons-codec` **Name:** `commons-codec` **Version:** `1.20.0`
 > - **Project URL**: [https://commons.apache.org/proper/commons-codec/](https://commons.apache.org/proper/commons-codec/)
 > - **Manifest License**: Apache License, Version 2.0 (Not Packaged)
 > - **POM License**: Apache License, Version 2.0 - [http://www.apache.org/licenses/LICENSE-2.0](http://www.apache.org/licenses/LICENSE-2.0)
-> - **Embedded license files**: [commons-codec-1.19.0.jar/META-INF/LICENSE.txt](commons-codec-1.19.0.jar/META-INF/LICENSE.txt)
-    - [commons-codec-1.19.0.jar/META-INF/NOTICE.txt](commons-codec-1.19.0.jar/META-INF/NOTICE.txt)
+> - **Embedded license files**: [commons-codec-1.20.0.jar/META-INF/LICENSE.txt](commons-codec-1.20.0.jar/META-INF/LICENSE.txt)
+    - [commons-codec-1.20.0.jar/META-INF/NOTICE.txt](commons-codec-1.20.0.jar/META-INF/NOTICE.txt)
 
 **7** **Group:** `io.netty` **Name:** `netty-buffer` **Version:** `4.2.7.Final`
 > - **Manifest Project URL**: [https://netty.io/](https://netty.io/)