GEODE-5421 Updated dependencies

Updated bundled library dependencies. The updated libaries are:

HikariCP 3.0.0 -> 3.2.0
fast-classpath-scanner 2.19.0 -> 2.21
fastutil 8.1.1 -> 8.2.1
google-gson 2.8.2 -> 2.8.5
guava 24.1-jre -> 25.1-jre
jackson 2.9.5 -> 2.9.6
jansi 1.17 -> 1.17.1
netty 4.1.21.Final -> 4.1.27.Final
protobuf 3.5.1 -> 3.6.0
spring-security 4.2.4 -> 4.2.7
spring-* 4.3.14 -> 4.3.18
springfox 2.8.0 -> 2.9.2

These changes mean that javassist and reflections are no longer
bundled with the binary convenience distributions.

geode-assembly/src/main/dist/NOTICE

@@ -26,7 +26,7 @@ Java ClassMate library was originally written by Tatu Saloranta (tatu.saloranta@
 
   * Brian Langel
 
-Jackson Core 2.9.5
+Jackson Core 2.9.6
 
   # Jackson JSON processor
 
@@ -119,7 +119,7 @@ Apache Lucene
 Servlet-api.jar and javax.servlet-*.jar are under the CDDL license, the original
 source code for this can be found at http://www.eclipse.org/jetty/downloads.php
 
-Spring Framework 4.3.14.RELEASE
+Spring Framework 4.3.18.RELEASE
 Copyright (c) 2002-2017 Pivotal, Inc.
 
   This product is licensed to you under the Apache License, Version 2.0

geode-assembly/src/test/resources/expected_jars.txt

@@ -25,7 +25,6 @@ jackson-databind
 jackson-module-paranamer
 jackson-module-scala
 jansi
-javassist
 javax.mail-api
 javax.resource-api
 javax.servlet-api
@@ -60,7 +59,6 @@ netty-all
 paranamer
 protobuf-java
 ra.jar
-reflections
 rmiio
 scala-library
 scala-reflect

geode-pulse/src/main/webapp/META-INF/NOTICE

@@ -43,7 +43,7 @@ Jackson Core 2.9.5
   in some artifacts (usually source distributions); but is always available
   from the source code management (SCM) system project uses.
 
-Spring Framework 4.3.14.RELEASE
+Spring Framework 4.3.18.RELEASE
 Copyright (c) 2002-2017 Pivotal, Inc.
 
   This product is licensed to you under the Apache License, Version 2.0

geode-web-api/src/main/webapp/META-INF/NOTICE

@@ -49,7 +49,7 @@ Jackson Core 2.9.5
   in some artifacts (usually source distributions); but is always available
   from the source code management (SCM) system project uses.
 
-Spring Framework 4.3.14.RELEASE
+Spring Framework 4.3.18.RELEASE
 Copyright (c) 2002-2017 Pivotal, Inc.
 
   This product is licensed to you under the Apache License, Version 2.0

geode-web/src/main/webapp/META-INF/NOTICE

@@ -20,7 +20,7 @@ Copyright 2016 AddThis
 This product includes software developed by the MX4J
 project (http://mx4j.sourceforge.net).
 
-Spring Framework 4.3.14.RELEASE
+Spring Framework 4.3.18.RELEASE
 Copyright (c) 2002-2017 Pivotal, Inc.
 
   This product is licensed to you under the Apache License, Version 2.0

gradle/dependency-versions.properties

@@ -32,20 +32,20 @@ commons-lang.version = 2.6
 commons-logging.version = 1.2
 commons-modeler.version = 2.0.1
 commons-validator.version = 1.6
-HikariCP.version = 3.0.0
+HikariCP.version = 3.2.0
 derby.version = 10.13.1.1
 dom4j.version = 1.6.1
-fast-classpath-scanner.version=2.19.0
-fastutil.version = 8.1.1
-google-gson.version=2.8.2
-guava.version = 24.1-jre
+fast-classpath-scanner.version=2.21
+fastutil.version = 8.2.1
+google-gson.version=2.8.5
+guava.version = 25.1-jre
 hamcrest-all.version = 1.3
 httpclient.version = 4.5.3
 httpcore.version = 4.4.6
 httpunit.version = 1.7.2
-jackson.version = 2.9.5
-jackson-module-scala_2.10.version = 2.9.5
-jansi.version = 1.17
+jackson.version = 2.9.6
+jackson-module-scala_2.10.version = 2.9.6
+jansi.version = 1.17.1
 javassist.version = 3.21.0-GA
 javax.ejb-api.version = 3.0
 javax.jsr250-api.version = 1.0
@@ -76,25 +76,25 @@ multithreadedtc.version = 1.01
 mx4j.version = 3.0.2
 mx4j-remote.version = 3.0.2
 mx4j-tools.version = 3.0.1
-netty-all.version = 4.1.21.Final
+netty-all.version = 4.1.27.Final
 open-json.version = 1.8
 powermock.version = 1.7.1
-protobuf-gradle-plugin.version = 0.8.4
-protobuf-java.version = 3.5.1
-protoc.version = 3.5.1-1
+protobuf-gradle-plugin.version = 0.8.6
+protobuf-java.version = 3.6.0
+protoc.version = 3.6.0
 rmiio.version = 2.1.2
 selenium.version=3.9.1
 shiro.version=1.4.0
 slf4j-api.version = 1.7.25
 snappy-java.version=0.4
 spring-hateoas.version = 0.24.0.RELEASE
 spring-ldap-core.version = 2.3.2.RELEASE
-spring-security.version = 4.2.4.RELEASE
+spring-security.version = 4.2.7.RELEASE
 spring-shell.version = 1.2.0.RELEASE
-spring-tx.version = 4.3.14.RELEASE
-springframework.version = 4.3.14.RELEASE
+spring-tx.version = 4.3.18.RELEASE
+springframework.version = 4.3.18.RELEASE
 spymemcached.version = 2.12.2
-springfox.version=2.8.0
+springfox.version=2.9.2
 stephenc-findbugs.version = 1.3.9-1
 system-rules.version = 1.17.1
 tempus-fugit.version = 1.1