- update org.owasp dependency-check-maven plugin to 5.3.3, log4j2 to 2.13.3 - add cobertura profile to include if needed, activate jacoco by default - add java12 profile