What version are you using? Are there any exclusions in your pom? You could always explicitly add the dependency on Apache commons-io but it's obviously better to figure out why that dependency isn't being resolved already.
I took a look at the dependency tree for a somewhat out of date project and it is listing commons-io.