aligned dependencies to IP-BOM and fixed security parent