move dependency versions to the parent pom