GEODE-2460: update dependency versions and notices

* remove non-transitive declaration of org.ow2.asm:asm:5.1
* update to it.unimi.dsi:fastutil:7.1.0
* update to org.apache.httpcomponents:httpclient:4.5.3
* update to io.netty:netty-all:4.1.8.Final
* update to com.tdunning:json:1.8
* update to org.slf4j:slf4j-api:1.7.23
* update to org.springframework.hateoas:spring-hateoas:0.23.0.RELEASE
* update to org.springframework.ldap:spring-ldap-core:2.3.1.RELEASE
* update to org.springframework.security:spring-security-config:4.2.1.RELEASE
* update to org.springframework.security:spring-security-core:4.2.1.RELEASE
* update to org.springframework.security:spring-security-ldap:4.2.1.RELEASE
* update to org.springframework.security:spring-security-web:4.2.1.RELEASE
* update to org.springframework:spring-aspects:4.3.6.RELEASE
* update to org.springframework:spring-beans:4.3.6.RELEASE
* update to org.springframework:spring-context:4.3.6.RELEASE
* update to org.springframework:spring-core:4.3.6.RELEASE
* update to org.springframework:spring-expression:4.3.6.RELEASE
* update to org.springframework:spring-oxm:4.3.6.RELEASE
* update to org.springframework:spring-test:4.3.6.RELEASE
* update to org.springframework:spring-tx:4.3.6.RELEASE
* update to org.springframework:spring-web:4.3.6.RELEASE
* update to org.springframework:spring-webmvc:4.3.6.RELEASE
* update to io.springfox:springfox-swagger2:2.6.1
* update to io.springfox:springfox-swagger-ui:2.6.1

geode-assembly/src/main/dist/NOTICE

@@ -121,8 +121,8 @@ Apache Lucene
 Servlet-api.jar and javax.servlet-*.jar are under the CDDL license, the original
 source code for this can be found at http://www.eclipse.org/jetty/downloads.php
 
-Spring Framework 4.3.2.RELEASE
-Copyright (c) 2002-2015 Pivotal, Inc.
+Spring Framework 4.3.6.RELEASE
+Copyright (c) 2002-2017 Pivotal, Inc.
 
   This product is licensed to you under the Apache License, Version 2.0
   (the "License"). You may not use this product except in compliance with

geode-pulse/src/main/webapp/META-INF/NOTICE

@@ -45,8 +45,8 @@ Jackson Core 2.8.0
   in some artifacts (usually source distributions); but is always available
   from the source code management (SCM) system project uses.
 
-Spring Framework 4.3.2.RELEASE
-Copyright (c) 2002-2015 Pivotal, Inc.
+Spring Framework 4.3.6.RELEASE
+Copyright (c) 2002-2017 Pivotal, Inc.
 
   This product is licensed to you under the Apache License, Version 2.0
   (the "License"). You may not use this product except in compliance with

geode-web-api/src/main/webapp/META-INF/NOTICE

@@ -51,8 +51,8 @@ Jackson Core 2.8.2
   in some artifacts (usually source distributions); but is always available
   from the source code management (SCM) system project uses.
 
-Spring Framework 4.3.2.RELEASE
-Copyright (c) 2002-2015 Pivotal, Inc.
+Spring Framework 4.3.6.RELEASE
+Copyright (c) 2002-2017 Pivotal, Inc.
 
   This product is licensed to you under the Apache License, Version 2.0
   (the "License"). You may not use this product except in compliance with

geode-web/src/main/webapp/META-INF/NOTICE

@@ -22,8 +22,8 @@ project (http://mx4j.sourceforge.net).
 
 This project includes software licensed under the JSON license.
 
-Spring Framework 4.3.2.RELEASE
-Copyright (c) 2002-2015 Pivotal, Inc.
+Spring Framework 4.3.6.RELEASE
+Copyright (c) 2002-2017 Pivotal, Inc.
 
   This product is licensed to you under the Apache License, Version 2.0
   (the "License"). You may not use this product except in compliance with

gradle/dependency-versions.properties

@@ -17,7 +17,6 @@
 activation.version = 1.1.1
 annotations.version = 3.0.0
 antlr.version = 2.7.7
-asm.version = 5.1
 assertj-core.version = 3.6.2
 awaitility.version = 2.0.0
 bcel.version = 6.0
@@ -38,15 +37,15 @@ commons-digester.version=2.1
 commons-exec.version=1.3
 derby.version = 10.13.1.1
 dom4j.version = 1.6.1
-fastutil.version = 7.0.13
+fastutil.version = 7.1.0
 google-gson.version=2.8.0
 guava.version = 21.0
 hadoop.version = 2.4.1
 hamcrest-all.version = 1.3
 hbase.version = 0.94.27
 hibernate.version = 3.5.5-Final
 hibernate-commons-annotations.version = 3.2.0.Final
-httpclient.version = 4.5.2
+httpclient.version = 4.5.3
 httpcore.version = 4.4.6
 httpunit.version = 1.7.2
 hsqldb.version = 2.3.4
@@ -84,26 +83,26 @@ multithreadedtc.version = 1.01
 mx4j.version = 3.0.1
 mx4j-remote.version = 3.0.1
 mx4j-tools.version = 3.0.1
-netty-all.version = 4.1.7.Final
-open-json.version = 1.7
+netty-all.version = 4.1.8.Final
+open-json.version = 1.8
 paranamer.version = 2.3
 phantomjsdriver.version=1.3.0
 powermock.version = 1.6.6
 quartz.version = 2.2.1
 scala.version = 2.10.0
 selenium.version=3.0.1
 shiro.version=1.3.2
-slf4j-api.version = 1.7.22
+slf4j-api.version = 1.7.23
 snappy-java.version=0.4
-spring-hateoas.version = 0.21.0.RELEASE
+spring-hateoas.version = 0.23.0.RELEASE
 spring-shell.version = 1.2.0.RELEASE
-spring-ldap-core.version = 2.1.0.RELEASE
-spring-security.version = 4.1.3.RELEASE
-spring-tx.version = 4.3.2.RELEASE
-springframework.version = 4.3.2.RELEASE
+spring-ldap-core.version = 2.3.1.RELEASE
+spring-security.version = 4.2.1.RELEASE
+spring-tx.version = 4.3.6.RELEASE
+springframework.version = 4.3.6.RELEASE
 stephenc-findbugs.version = 1.3.9-1
 spymemcached.version = 2.12.2
-springfox.version=2.6.0
+springfox.version=2.6.1
 system-rules.version = 1.16.1
 tempus-fugit.version = 1.1
 tomcat6.version = 6.0.37

gradle/test.gradle

@@ -50,7 +50,6 @@ subprojects {
     testCompile 'pl.pragmatists:JUnitParams:' + project.'JUnitParams.version'
 
     testRuntime 'cglib:cglib:' + project.'cglib.version'
-    testRuntime 'org.ow2.asm:asm:' + project.'asm.version'
   }
 
   //This target does not run any tests. Rather, it validates that there are no