add jgit constraint to resolve transitive dependency security check

add jgit constraint to resolve transitive dependency security check #686