update maven-dependency-plugin version to 2.9 to avoid mixing SNAPSHOTs ...

...with timestamped versions