Currently the license plugin has no version defined and so is just pulling the latest. We should define a property for the license plugin version and set it explicitly. There are also several updates to other maven plugins that we could pull in without any breaking changes.

Description

ossrh.sonatype.org is going to be deprecated soon and is directly leveraged by aissemble. The migration approach from Sonatype notes that snapshot dependencies will no longer be supported once we migrate to their new central.sonatype.org repository.

At the same time, the stability of ossrh.sonatype.org has become a challenge.

Updating to use ghcr.io for Maven snapshot aligns us with where we need to go soon and hopefully improves the stability of our build due to frequent ossrh.sonatype.org outages.

Perform the following plugin upgrades:

• maven-clean-plugin ................................. 3.3.2 -> 3.4.0
• maven-enforcer-plugin .............................. 3.4.1 -> 3.5.0
• maven-jar-plugin ................................... 3.4.1 -> 3.4.2
• maven-javadoc-plugin ............................... 3.6.3 -> 3.8.0
• maven-release-plugin ............................... 3.0.1 -> 3.1.1
• maven-site-plugin .......................... 4.0.0-M13 -> 4.0.0-M16
• maven-surefire-plugin .............................. 3.2.5 -> 3.3.1
• org.sonatype.plugins:nexus-staging-maven-plugin ... 1.6.13 -> 1.7.0

We removed the maven-dependency-plugin (3.6.1 -> 3.7.1) for now due to some downstream breakage it creates. We need to circle back and look into them more.