Dependencies upgrade

[lalmeras]

Identify and plan owsi-core's dependencies upgrade:

• bugfix and backward compatibility upgrades on 0.12 version
• document major upgrades for next owsi-core's release

When merged:

• document Apache POI new behavior (swapped BORDER_HAIR and BORDER_DOTTED)

Major upgrades:

• lucene: 6.3.0; driven by hibernate-search
• hibernate-orm: 5.2.4 (so 5.1.x to 5.2.x)
• wicket: 8.0 at M2 stage
• truezip: maintenance mode as of 7.7.x; trueVFS is the new projet; low activity
• spring: 4.1.0.RELEASE (current) → 4.2.0.RELEASE: from 4.1.1.RELEASE, spring-framework 4.3.1.RELEASE is needed
• jackson: 2.7.8 (current) → 2.8.4
• hikariCP: 2.5.0+ only for java 8
• guava: 19.0 (current) → 20.0
• flyingsaucer: 9.0.9 → 9.1.0; a bit difficult to appreciate differences, may need some work for non-regression checking · https://github.com/flyingsaucerproject/flyingsaucer/commits/9.1.0

Other components:

• org.passay:passay (password policy enforcement) 1.2.0 requires java 8 (current version 1.1.0)

Resources:

• spring security
  • 4.1.1: https://github.com/spring-projects/spring-security/issues?utf8=%E2%9C%93&q=is%3Aclosed%20milestone%3A4.1.1
  • 4.1.2: https://github.com/spring-projects/spring-security/issues?utf8=%E2%9C%93&q=is%3Aclosed%20milestone%3A4.1.2
  • 4.1.3: https://github.com/spring-projects/spring-security/issues?utf8=%E2%9C%93&q=is%3Aclosed%20milestone%3A4.1.3