pinned dependency plugin version to 2.8 (in backend)