dependency fixes. also use dep plugin 2.9 for java 8 compat