- update org.owasp dependency-check-maven plugin to 5.3.3, log4j2 to 2.13.3
- add cobertura profile to include if needed, activate jacoco by default
- add java12 profile

git-svn-id: https://svn.apache.org/repos/asf/turbine/maven/turbine-parent/trunk@1878775 13f79535-47bb-0310-9956-ffa450edef68