2.38.0
NO-JIRA: ensure a check build is done with -Prelease on JDK11
NO-JIRA: have dependabot ignore errorprone >= 2.32.0 since it needs Java 17+
NO-JIRA: use the google mirror for maven central to spread load and help reduce sporadic CI failures