diff --git a/.github/workflows/build-common.yml b/.github/workflows/build-common.yml
index ba445dc208e..8f16c7973c9 100644
--- a/.github/workflows/build-common.yml
+++ b/.github/workflows/build-common.yml
@@ -57,7 +57,9 @@ jobs:
         uses: gradle/actions/setup-gradle@v4
 
       - name: Generate license report
-        run: ./gradlew generateLicenseReport ${{ inputs.no-build-cache && '--no-build-cache' || '' }}
+        run: |
+          # generateLicenseReport build caching appears to be broken so need to ignore build cache always
+          ./gradlew generateLicenseReport --no-build-cache
 
       - name: Check licenses
         run: |
diff --git a/agent/agent-tooling/gradle.lockfile b/agent/agent-tooling/gradle.lockfile
index 6d65001b84f..59932867685 100644
--- a/agent/agent-tooling/gradle.lockfile
+++ b/agent/agent-tooling/gradle.lockfile
@@ -29,7 +29,7 @@ com.nimbusds:content-type:2.3=runtimeClasspath
 com.nimbusds:lang-tag:1.7=runtimeClasspath
 com.nimbusds:nimbus-jose-jwt:9.40=runtimeClasspath
 com.nimbusds:oauth2-oidc-sdk:11.18=runtimeClasspath
-commons-codec:commons-codec:1.17.2=runtimeClasspath
+commons-codec:commons-codec:1.18.0=runtimeClasspath
 io.netty:netty-bom:4.1.117.Final=runtimeClasspath
 io.netty:netty-buffer:4.1.117.Final=runtimeClasspath
 io.netty:netty-codec-dns:4.1.117.Final=runtimeClasspath
diff --git a/dependencyManagement/build.gradle.kts b/dependencyManagement/build.gradle.kts
index 1934eeaadb8..b6d05b3e8ad 100644
--- a/dependencyManagement/build.gradle.kts
+++ b/dependencyManagement/build.gradle.kts
@@ -65,7 +65,7 @@ val DEPENDENCIES = listOf(
   "ch.qos.logback:logback-classic:1.3.15", // logback 1.4+ requires Java 11+
   "ch.qos.logback.contrib:logback-json-classic:0.1.5",
   "com.uber.nullaway:nullaway:0.12.3",
-  "commons-codec:commons-codec:1.17.2",
+  "commons-codec:commons-codec:1.18.0",
   "org.apache.commons:commons-text:1.13.0",
   "com.google.code.gson:gson:2.11.0",
   "com.azure:azure-core-test:1.26.2", // this is not included in azure-sdk-bom
diff --git a/licenses/commons-codec-1.17.2.jar/META-INF/LICENSE.txt b/licenses/commons-codec-1.18.0.jar/META-INF/LICENSE.txt
similarity index 100%
rename from licenses/commons-codec-1.17.2.jar/META-INF/LICENSE.txt
rename to licenses/commons-codec-1.18.0.jar/META-INF/LICENSE.txt
diff --git a/licenses/commons-codec-1.17.2.jar/META-INF/NOTICE.txt b/licenses/commons-codec-1.18.0.jar/META-INF/NOTICE.txt
similarity index 70%
rename from licenses/commons-codec-1.17.2.jar/META-INF/NOTICE.txt
rename to licenses/commons-codec-1.18.0.jar/META-INF/NOTICE.txt
index e6d6ef34a3e..d3b64e9e300 100644
--- a/licenses/commons-codec-1.17.2.jar/META-INF/NOTICE.txt
+++ b/licenses/commons-codec-1.18.0.jar/META-INF/NOTICE.txt
@@ -1,5 +1,5 @@
 Apache Commons Codec
-Copyright 2002-2024 The Apache Software Foundation
+Copyright 2002-2025 The Apache Software Foundation
 
 This product includes software developed at
 The Apache Software Foundation (https://www.apache.org/).
diff --git a/licenses/more-licenses.md b/licenses/more-licenses.md
index a12813c86df..218287261a5 100644
--- a/licenses/more-licenses.md
+++ b/licenses/more-licenses.md
@@ -1,7 +1,7 @@
 
 # agent
 ## Dependency License Report
-_2025-01-27 04:00:22 UTC_
+_2025-01-28 20:25:50 UTC_
 ## Apache License, Version 2.0
 
 **1** **Group:** `com.fasterxml.jackson.core` **Name:** `jackson-annotations` **Version:** `2.18.2` 
@@ -64,12 +64,12 @@ _2025-01-27 04:00:22 UTC_
 > - **Manifest License**: Apache License, Version 2.0 (Not Packaged)
 > - **POM License**: Apache License, Version 2.0 - [https://www.apache.org/licenses/LICENSE-2.0](https://www.apache.org/licenses/LICENSE-2.0)
 
-**11** **Group:** `commons-codec` **Name:** `commons-codec` **Version:** `1.17.2` 
+**11** **Group:** `commons-codec` **Name:** `commons-codec` **Version:** `1.18.0` 
 > - **Project URL**: [https://commons.apache.org/proper/commons-codec/](https://commons.apache.org/proper/commons-codec/)
 > - **Manifest License**: Apache License, Version 2.0 (Not Packaged)
 > - **POM License**: Apache License, Version 2.0 - [http://www.apache.org/licenses/LICENSE-2.0](http://www.apache.org/licenses/LICENSE-2.0)
-> - **Embedded license files**: [commons-codec-1.17.2.jar/META-INF/LICENSE.txt](commons-codec-1.17.2.jar/META-INF/LICENSE.txt) 
-    - [commons-codec-1.17.2.jar/META-INF/NOTICE.txt](commons-codec-1.17.2.jar/META-INF/NOTICE.txt)
+> - **Embedded license files**: [commons-codec-1.18.0.jar/META-INF/LICENSE.txt](commons-codec-1.18.0.jar/META-INF/LICENSE.txt) 
+    - [commons-codec-1.18.0.jar/META-INF/NOTICE.txt](commons-codec-1.18.0.jar/META-INF/NOTICE.txt)
 
 **12** **Group:** `io.netty` **Name:** `netty-buffer` **Version:** `4.1.117.Final` 
 > - **Manifest Project URL**: [https://netty.io/](https://netty.io/)