Bump commons version.

Reviewed at https://reviews.apache.org/r/27894/