Bump commons-codec to version 1.14

[oscerd]

No description provided.

[oscerd]

@gsmet

[gastaldi]

LGTM, want to add it to dependabot?

[oscerd]

Yeah, I noticed this because It was updated on Apache Camel too.

[gsmet]

@gastaldi please don't add the 1.5.0.Final version and add the backport tag. Otherwise this won't be backported to 1.5 and we will miss it.

Thanks.

[gastaldi]

Ah, so PRs that should be backported don't get a version now? That's news to me.

Thanks for the heads up.

[gsmet]

That's not new. You can set a version but it should be the one of master so currently 1.6.0 (see my email on quarkus-dev).

But it should never be the branched release as, once merged, the PR is not magically there, I need to backport it thus the label.

So feel free to add 1.6.0, I change the milestone when backporting and so when the commits are really in the branch.

[gastaldi]

For some reason I assumed 1.5.0 to be master. Can we have some kind of marker in the milestone version to indicate that it is master?