moved dependency versions to parent POM