I bumped a few others, including jetty and xmlsec. I didn't bump httpclient to 4.4 because that's the one with the new hostname verifier in it, and I wasn't sure if we wanted that or not yet. -- Scott