remove jar signatures from dependencies