Upgrade various dependencies

Upgrade various dependencies:

• Apache HttpComponents 4.5.6 -> 4.5.11
• Apache HttpCore 4.4.10 -> 4.4.13
• ASM 7.0 -> 7.3.1
• AWS SDK 1.11.516 -> 1.11.710
• Axiom 1.2.20 -> 1.2.22
• Batik 1.10 -> 1.12
• BouncyCastle 1.60 -> 1.64
• bsh 2.0b1 -> 2.0b4
• Commons Codec 1.11 -> 1.14
• Commons Collections4 4.1 -> 4.4
• Commons CSV 1.5 -> 1.7
• Commons Fileupload 1.3.3 -> 1.4
• Commons Lang3 3.8 -> 3.9
• Commons Pool2 2.6.0 -> 2.8.0
• Commons Text 1.4 -> 1.8
• Commons VFS2 2.2 -> 2.6.0
• CORS Filter 2.6 -> 2.8
• Derby 10.14.2.0 -> 10.15.1.3
• ESAPI 2.1.0.1 -> 2.2.0.0
• fast-classpath-scanner 2.0.4 -> ClassGraph 4.8.60
• Gatling 3.3.0 -> 3.3.1
• Guava 26.0 -> 28.2
• ICU4J 62.1 -> 65.1
• ISOParser 1.9.27 -> 1.9.41
• Jackrabbit 2.17.5 -> 2.20.0
• Jackson 2.10.0 -> 2.10.2
• JAI 1.1.2_01 -> 1.1.3
• Java JWT 3.4.0 -> 3.9.0
• javax.json 1.1.2 -> 1.1.4
• javax.mail:mail 1.4.5 -> 1.4.7
• JClouds 2.1.1 -> 2.2.0
• Jettison 1.3.7 -> 1.4.0
• JGiven 0.17.1 -> 0.18.2
• JMock 2.8.4 -> 2.12.0
• joda-time 2.9.2 ->2.10.5
• Jolokia 1.3.3 -> 1.6.2
• json-simple 1.1 -> 1.1.1
• JSONAssert 1.2.3 -> 1.5.0
• Kafka 2.3.0 -> 2.3.1
• Log4j 2.11.1 -> 2.13.0
• maven-dependency-analyzer 1.11.0 -> 1.11.1
• Metrics 4.0.3 -> 4.1.2
• MongDB Java Driver 3.8.1 -> 3.12.1
• MVEL 2.4.2.Final -> 2.4.5.Final
• mysql-connector-java 8.0.13 -> 8.0.19
• OpenPDF 1.2.1 -> 1.3.12
• PostgreSQL Java Driver 42.2.5 -> 42.2.9
• Restlet 2.4.1 -> 2.4.2
• SLF4J 1.7.21 -> 1.7.30
• snakeyaml 1.21 -> 1.25
• stax-ex 1.7.8 -> 1.8.2
• Surefire 2.22.1 -> 2.22.2
• Wink Client 1.3.0 -> 1.4
• XBean Naming 3.18 -> 4.15
• XOM 1.3.0 -> 1.3.2
• XStream 1.4.11 -> 1.4.11.1

Removed:

• HSQLDB
• JAI

Nontrivial upgrades not done in this ticket:

• Apache DS 1.5.1 -> 1.5.7 (impacts Nuxeo LDAP Directory, APIs have changed).
• Apache DS Shared 0.9.7 -> 0.9.19 (same)
• Chronicle BOM 2.17.465 -> 2.17.546 (test failures)
• Chronicle Threads 2.17.2 -> 2.17.26 (linked)
• XMLUnit 1.3 -> 1.6 (impacts Nuxeo Diff, as the diff results show more differences)