[STORM-3911] fetch net.minidev:json-smart:2.3 artifact from maven repo before conjars.org repo is referenced (#3536)

* [STORM-3911] fetch net.minidev:json-smart:2.3 artifact from maven repo before conjars.org repo is referenced.

* remove mockito.version - handled by dependency management
diff --git a/pom.xml b/pom.xml
index 1f6b72f..098153c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -362,6 +362,7 @@
         <jaxb-version>2.3.0</jaxb-version>
         <activation-version>1.1.1</activation-version>
         <rocksdb-version>8.1.1</rocksdb-version>
+        <json-smart.version>2.3</json-smart.version>
 
         <!-- see intellij profile below... This fixes an annoyance with intellij -->
         <provided.scope>provided</provided.scope>
diff --git a/storm-core/pom.xml b/storm-core/pom.xml
index e0e8f3a..717c664 100644
--- a/storm-core/pom.xml
+++ b/storm-core/pom.xml
@@ -228,6 +228,21 @@
                 </exclusion>
             </exclusions>
         </dependency>
+        <dependency>
+            <!--
+            This jar is pulled in as a transitive dependency from
+            org.apache.hadoop:hadoop-auth
+                -> com.nimbusds:nimbus-jose-jwt
+                -> com.github.stephenc.jcip:jcip-annotations
+            But is being downloaded from http://conjars.org/repo which is no longer active,
+
+            Download this directly from maven repository and avoid long build timeouts due to multiple failed attempts
+            to download from conjars.org
+            -->
+            <groupId>net.minidev</groupId>
+            <artifactId>json-smart</artifactId>
+            <version>${json-smart.version}</version>
+        </dependency>
     </dependencies>
     <build>
         <sourceDirectory>src/jvm</sourceDirectory>