bump dependency-check-maven from 4.0.0 to 4.0.2