upgrade versions of guava, h2, commons-io deps which are all test or optional