Bump spring-web to 6.0.18

[magwitch324]

This change bumps the version of spring-web from 6.0.14 to 6.0.18

It also fixes two problems preventing the project from building.
Specifically an incorrect version for jackson-databind, and making the
build use a specific version of node.

[vmwclabot]

@magwitch324, you must sign every commit in this pull request acknowledging our Developer Certificate of Origin before your changes are merged. This can be done by adding Signed-off-by: John Doe <john.doe@email.org> to the last line of each Git commit message. The e-mail address used to sign must match the e-mail address of the Git author. Click here to view the Developer Certificate of Origin agreement.

• Commit 7805220 must be signed by Thomas.Grimshaw@acm.org

[vmwclabot]

@magwitch324, you must sign every commit in this pull request acknowledging our Developer Certificate of Origin before your changes are merged. This can be done by adding Signed-off-by: John Doe <john.doe@email.org> to the last line of each Git commit message. The e-mail address used to sign must match the e-mail address of the Git author. Click here to view the Developer Certificate of Origin agreement.

• Commit db62fdc must be signed by Thomas.Grimshaw@acm.org