Lock down source and javadoc plugins versions for build reproductibility