Update Jackson dependency to 2.10.5 and update SnakeYAML to 1.26

According to the Jackson announce mailing list it's time to update to keep the scan tools happy. We are currently on 2.10.1 so update to 2.10.5 should be feasible, to be investigating of now is the time to go to 2.11.0 for 14.3. 

Since there is already 2.11.0 available (and 2.10 and
2.11 both add features to fully block these attacks), we strongly recommend
downstream projects to start migrating away from versions 2.9 and older,
especially if you do use polymorphic deserialization as described on

https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062

Upgrade to 2.10.5 at least is recommended in general too, but is
especially useful to make vuln scan tools happy.