Pin spotbugs-annotations version to 4.8.6, last release supporting Java 8 (#3762)

Author: vy

.github/dependabot.yaml

@@ -90,6 +90,9 @@ updates:
     registries:
       - maven-central
     ignore:
+      # `com.github.spotbugs:spotbugs-annotations:4.9.0` and onwards require Java 11
+      - dependency-name: "com.github.spotbugs:spotbugs-annotations"
+        versions: [ "[4.9.0,)" ]
       # Jetty 10.x does not have an internal logging API
       - dependency-name: "org.eclipse.jetty:*"
         versions: [ "[10,)" ]

log4j-parent/pom.xml

@@ -130,7 +130,8 @@
     <osgi.annotation.versioning.version>1.1.2</osgi.annotation.versioning.version>
     <pax-exam.version>4.14.0</pax-exam.version>
     <plexus-utils.version>3.6.0</plexus-utils.version>
-    <spotbugs-annotations.version>4.9.3</spotbugs-annotations.version>
+    <!-- `com.github.spotbugs:spotbugs-annotations:4.9.0` and onwards require Java 11: -->
+    <spotbugs-annotations.version>4.8.6</spotbugs-annotations.version>
     <spring-boot.version>2.7.18</spring-boot.version>
     <spring-framework.version>5.3.39</spring-framework.version>
     <system-stubs.version>2.0.3</system-stubs.version>