upgrade saxon version and set dependency scope as provided