Patch Set 1:

current situation looks like a mess

- we should not depend on SNAPSHOT versions, why are there 2.3.2-SNAPSHOT and 2.4-SNAPSHOT but no released version in that range ?
- the codehaus repo we reference has the 2.3.2-SNAPSHOT version [1] 
but the build on hudson fails over and over again complaining that this doesn't exist

[1] http://snapshots.repository.codehaus.org/org/codehaus/mojo/findbugs-maven-plugin/2.3.2-SNAPSHOT/