Update Jackson, fix version of jackson-databind in core; update guava (#1390)

* ossindex shows security issues with dependencies

* Update pom.xml

* Move guava.version to parent pom

Co-authored-by: Marvin Froeder <velo@users.noreply.github.com>
Co-authored-by: Marvin Froeder <marvin.froeder@dovetailstudios.com>

apt-test-generator/pom.xml

@@ -54,7 +54,7 @@
     <dependency>
       <groupId>com.google.guava</groupId>
       <artifactId>guava</artifactId>
-      <version>28.0-jre</version>
+      <version>${guava.version}</version>
     </dependency>
     <dependency>
       <groupId>com.google.auto.service</groupId>

hystrix/pom.xml

@@ -48,7 +48,7 @@
       <dependency>
         <groupId>com.google.guava</groupId>
         <artifactId>guava</artifactId>
-        <version>24.1.1-jre</version>
+        <version>${guava.version}</version>
       </dependency>
     </dependencies>
   </dependencyManagement>

pom.xml

@@ -73,7 +73,8 @@
     <main.basedir>${project.basedir}</main.basedir>
 
     <okhttp3.version>4.6.0</okhttp3.version>
-    <googlehttpclient.version>1.31.0</googlehttpclient.version>
+    <guava.version>30.1.1-jre</guava.version>
+    <googlehttpclient.version>1.39.2</googlehttpclient.version>
     <gson.version>2.8.6</gson.version>
     <slf4j.version>1.7.30</slf4j.version>
     <bouncy.version>1.60</bouncy.version>

ribbon/pom.xml

@@ -37,7 +37,7 @@
       <dependency>
         <groupId>com.google.guava</groupId>
         <artifactId>guava</artifactId>
-        <version>24.1.1-jre</version>
+        <version>${guava.version}</version>
       </dependency>
     </dependencies>
   </dependencyManagement>