lock down the maven-resources-plugin version