Signed-off-by: Nolivier lamy <olamy@apache.org>

Signed-off-by: Nolivier lamy <olamy@apache.org>

Signed-off-by: Nolivier lamy <olamy@apache.org>

Signed-off-by: Nolivier lamy <olamy@apache.org>

* Pick up SSHD module including sshd-core 1.4.0.

* [FIXED JENKINS-39738] Picking up https://github.com/jenkinsci/sshd-module/commit/bb6963453086edef4e600abb2740182cd2f4ade0

* Picking up Apache SSHD 1.6.0 & Jenkins sshd module 2.0.

* [FIXED JENKINS-44764, JENKINS-44894] - Update Extras Executable War from 1.34 to 1.35

* Pick version with a system property name fix, noticed by @daniel-beck

* [SECURITY-372] Update bundled mailer to 1.20.

* Updated to pick up other detached plugins mentioned in https://jenkins.io/security/advisory/2016-04-11/ or https://jenkins.io/security/advisory/2017-03-20/ while we are here.

* I18nTest.test_baseName_plugin caught that the detached version of credentials was too old to serve as a dependency.
Probably there should be some test case verifying that all detached plugins could be loaded at once,
though it would need to do a topological sort in dependency order.

* Must also include display-url-api as a detached plugin as it is a dependency, even though it was never actually detached from core.

* @oleg-nenashev insists on bundling display-url-api 2.0.

* use snapshot of winstone with new jetty 9.4.x version
Signed-off-by: Nolivier lamy <olamy@apache.org>

* add jetty snapshot repository until last jetty release deployed
Signed-off-by: Nolivier lamy <olamy@apache.org>

* surefire 2.20
Signed-off-by: Nolivier lamy <olamy@apache.org>

* winstone will be 4.0
Signed-off-by: Nolivier lamy <olamy@apache.org>

* remove jetty snapshot repo
Signed-off-by: Nolivier lamy <olamy@apache.org>

* touch to force pr rebuild as snapshot has been deployed
Signed-off-by: Nolivier lamy <olamy@apache.org>

* use winstone release
Signed-off-by: Nolivier lamy <olamy@apache.org>

* use maven-jenkins-dev-plugin 9.4.5.v20170502-jenkins-1
Signed-off-by: Nolivier lamy <olamy@apache.org>