upgrade to latest snapshot of BOM to get newer vabr version. Fix some potential NPEs in the timeout manager. Stop caching generated settings.xml files in dotMaven because they will contain a particular IP address, and the requests may come from multiple IP addresses or even localhost, depending on the system.