[spring] bump dependencies versions