fix: prevent maven-source-plugin from being automatically upgraded

fix: prevent maven-source-plugin from being automatically upgraded #892