see #16860 - Resolve oauth.signpost:signpost-core via Apache Ivy
Signpost 2.0.0 includes the update to Java 8: https://github.com/mttkay/signpost/releases/tag/oauth-signpost-2.0.0