Details
Description
we currently rely on spotbugs definitions from 3.1.0-RC3, which was a pre-release candidate from Jun 2017.
spotbugs version 3.1.6 came out about a month ago. We should update to the latest.
they also have their own maven plugin now. as a stretch goal we could switch over to that, if it works with yetus.