update sources plugin version
update jackson versions yet again

(there was a release today/ yesterday -- too bad my fix was like
the next commit after)
add dependency management and include slf4j-api