HADOOP-19700. hadoop-thirdparty build to update maven plugin dependencies (#46)
* upgrade to dependency analyzer 12.1.5
* exclude all transitive dependencies from avro
* allow for nvd api key to be passed in (and document this)
* disable sonatype OSS provider as it now needs user + password
The dependency analyzer now requires java11+, so the dependency_check action
specifies this. If you do a release in the same configuration, it will be java11+ only too,
so take care.
Also updated the http://apache.org links to https:// in the edited files
* and in XSD resource location
Contributed by Steve Loughran.
6 files changed
