spring boot starter parent version without vulnerabilities