add version to gpg and surefire plugins to avoid mvn warning