Dependency updates to eliminate vulnerabilities discovered by dependency-check

Eliminated all CRITICAL and HIGH except for CVE-2016-1000027 (which more or less forbids the use of Spring since 2016 -- it's moderately controversial.

@road

.gitlab-ci.yml

@@ -42,11 +42,7 @@ build_jar:
   artifacts:
     paths:
       - .m2/
-      - target/
-      - uw-spring-security-config/target/dependency-check-report.html
-      - uw-spring-security-core/target/dependency-check-report.html
-      - uw-spring-security-sample-war/target/dependency-check-report.html
-      - uw-spring-security-web/target/dependency-check-report.html
+      - "*/target"
     expire_in: 1 week
 
 secret_detection: