More hashes for the dependency verifier, also request version divergence detection. Bump JSR350 jar version.