Bump Scala version
Use a PGP-signed version of the findbugs-jsr305 dependency