various dependency updates

Please review; this will be applied once findbugs 2.0.3 actually hits maven central (it hasn't yet).