Updating vulnurable dependencies reported by Snyk.io

[istraka]

New dependencies have introduced new rules for find bugs plugin -> issues are fixed

[rsvoboda]

@msve please take a look

@Ladicek can you grant rights for creaper repo to @msve ? He is "component owner" now on eap qe side.

[simkam]

@istraka please rebase

[istraka]

@simkam done

[simkam]

I'm adding label 2.0. Guava requires JDK8 starting with v21.

[jstourac]

I believe this PR is outdated and should be closed:

1. Both changes in pom.xml file are irrelevant already (newer versions are used in master now).
2. Changes regarding the store closing - according to the documentation the method Closeables.closeQuietly(InputStream) accepts null and does nothing in such case so provided changes doesn't make sense to me anyway.