dependency-plugin version is managed by spring