* [SECURITY-372] Update bundled mailer to 1.20.

* Updated to pick up other detached plugins mentioned in https://jenkins.io/security/advisory/2016-04-11/ or https://jenkins.io/security/advisory/2017-03-20/ while we are here.

* I18nTest.test_baseName_plugin caught that the detached version of credentials was too old to serve as a dependency.
Probably there should be some test case verifying that all detached plugins could be loaded at once,
though it would need to do a topological sort in dependency order.

* Must also include display-url-api as a detached plugin as it is a dependency, even though it was never actually detached from core.

* @oleg-nenashev insists on bundling display-url-api 2.0.

* use snapshot of winstone with new jetty 9.4.x version
Signed-off-by: Nolivier lamy <olamy@apache.org>

* add jetty snapshot repository until last jetty release deployed
Signed-off-by: Nolivier lamy <olamy@apache.org>

* surefire 2.20
Signed-off-by: Nolivier lamy <olamy@apache.org>

* winstone will be 4.0
Signed-off-by: Nolivier lamy <olamy@apache.org>

* remove jetty snapshot repo
Signed-off-by: Nolivier lamy <olamy@apache.org>

* touch to force pr rebuild as snapshot has been deployed
Signed-off-by: Nolivier lamy <olamy@apache.org>

* use winstone release
Signed-off-by: Nolivier lamy <olamy@apache.org>

* use maven-jenkins-dev-plugin 9.4.5.v20170502-jenkins-1
Signed-off-by: Nolivier lamy <olamy@apache.org>

See the changelog: https://github.com/jenkinsci/windows-slave-installer-module/blob/master/CHANGELOG.md

(cherry picked from commit 72901698)

This reverts commit 5caee586.
In fact ssh-cli-auth contains UserPropertyImpl which is used by the sshd module.

This PR updates WinSW to 2.0.3 in order to fix [JENKINS-42744](https://issues.jenkins-ci.org/browse/JENKINS-42744), which is reported as a critical regression in Jenkins 2.50.

Changelog: https://github.com/kohsuke/winsw/blob/master/CHANGELOG.md#203

Full diff: https://github.com/kohsuke/winsw/compare/winsw-2.0.2...winsw-2.0.3

[FIXED JENKINS-33595] Picks up https://github.com/jenkinsci/sshd-module/pull/11
to turn off SSHD by default, but expose it to tests which wish to enable it.

Pick up https://github.com/jenkinsci/sshd-module/pull/10 so we are using a consistent version of sshd-core for client & server.