pom: nail some plugin versions