Bump dependency versions that are grabbed transitively

[corebonts]

• httpclient:4.5.8 is included with gerrit-rest-java-client
• commons-cli:1.4 is included with checkstyle (1.2 does not even have the DefaultParser that is used for the CLI)

These versions are now explicitly defined, so build won't fail if the first level dependencies won't rely on them anymore.

[codecov-io]

Codecov Report

Merging #232 (8490b7d) into master (1c699a2) will not change coverage. The diff coverage is n/a.

@@            Coverage Diff            @@
##             master     #232   +/-   ##
=========================================
  Coverage     72.38%   72.38%           
  Complexity      608      608           
=========================================
  Files           146      146           
  Lines          1988     1988           
  Branches        131      131           
=========================================
  Hits           1439     1439           
  Misses          489      489           
  Partials         60       60           

---

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 1c699a2...8490b7d. Read the comment docs.

[SpOOnman]

Thank you!