_6.0 changed third party libraries

<TODO: What is listed below is what we aim to do for M-6.0; they are linked to  MAGNOLIA-7333 - Getting issue details... STATUS .
Please check again the Epic and the state of the distinct tasks before the release>

All changes are managed via BOM for third-party modules. If you manage your bundles via Maven using the BOM, updates are handled automatically.

Vaadin 8.5.2

• com.vaadin:vaadin-cdi 10.0.0
• com.vaadin:vaadin-client-compiled 8.5.2
• com.vaadin:vaadin-client-compiler 8.5.2
• com.vaadin:vaadin-client 8.5.2
• com.vaadin:vaadin-compatibility-client-compiled 8.5.2
• com.vaadin:vaadin-compatibility-client 8.5.2
• com.vaadin:vaadin-compatibility-server 8.5.2
• com.vaadin:vaadin-compatibility-shared 8.5.2
• com.vaadin:vaadin-compatibility-themes 8.5.2
• com.vaadin:vaadin-context-menu 3.0.0.beta1
• com.vaadin:vaadin-push 8.5.2
• com.vaadin:vaadin-server 8.5.2
• com.vaadin:vaadin-shared 8.5.2
• com.vaadin:vaadin-spring-boot-starter 11.0.1
• com.vaadin:vaadin-spring-boot 3.1.1
• com.vaadin:vaadin-spring 10.0.5
• com.vaadin:vaadin-testbench-api 8.5.2
• com.vaadin:vaadin-testbench-core 6.0.1
• com.vaadin:vaadin-themes 8.5.2

Apache commons-compress 1.18

org.apache.commons:commons-compress 1.18

Bouncy Castle encryption lib 1.60

• org.bouncycastle:bcmail-jdk15on 1.60
• org.bouncycastle:bcpg-jdk15on 1.60
• org.bouncycastle:bcprov-jdk15on 1.60

Java Streaming API for XML

We removed javax.xml.stream:stax-api and  org.apache.geronimo.specs:geronimo-stax-api_1.0_spec from our builds. Both artifacts enable Java Streaming API for XML as described in JSR-173. The functionality is provided by the JDK since version 1.6.

jquery 3.3.1

This jQuery update only concerns AdminCentral. jQuery 3.3.1 for AdminCentral is included via the Magnolia UI project. 

If you rely on jQuery for the frontend, for instance in a template, this change does not affect your frontend code.

See MGNLUI-4727

Lombok 1.18.2

org.projectlombok:lombok 1.18.2