lock down transitive dependency version for Eclipse components

Someone uploaded corrupted versions of Eclipse 3.6 artifacts to maven central today, and it broke our builds for things like eclipse plugins, which transitively reference artifacts which are being resolved to the corrupted versions.

To work around this and prevent this in the future, lock down all the transitive dependencies (or at least the ones affected now), to versions which "work".