Constrain Nimbus Dependencies

Closes gh-9400

Author: jzheaux

gradle/dependency-management.gradle

@@ -37,8 +37,8 @@ dependencies {
 		management "com.google.appengine:appengine-testing:$gaeVersion"
 		management "com.google.appengine:appengine:$gaeVersion"
 		management "com.google.inject:guice:3.0"
-		management "com.nimbusds:nimbus-jose-jwt:latest.release"
-		management "com.nimbusds:oauth2-oidc-sdk:latest.release"
+		management "com.nimbusds:nimbus-jose-jwt:9.+"
+		management "com.nimbusds:oauth2-oidc-sdk:9.+"
 		management "com.squareup.okhttp3:mockwebserver:3.+"
 		management "com.squareup.okhttp3:okhttp:3.+"
 		management "com.sun.xml.bind:jaxb-core:2.+"