Review dependency versions

[timrobertson100]

The dependencies in this project are particularly outdated and a review would be worthwhile in my opinion.

This is arising because I am trying to wrap the GBIF crawler code to include BioCASe support, but the guava and http-client versions are outdated and conflict.

mvn versions:display-dependency-updates shows what can (not necessarily should !) be updated.

Of the main offenders I'd suggest a discussion on project-wide policies on guava, http-client, stax and removal of anything exposing log4j and adopt a stricter policy on using e.g. only slf-4j-api allowing the final binary to dictate which logging library to use. Bumping to Java 8 would also be something to consider, or specifying the POMs which Java version is required.

This is an epic task, and need some careful consideration as it has impact across many projects.

[timrobertson100]

...and jackson

[djtfmartin]

i think we can safely close this with the work on the 2.x branch