Migrate from findbugs to spotbugs

**Auto-cherry-pick to `3.0.x`**

build.gradle

@@ -24,6 +24,7 @@ plugins {
 	id 'io.spring.dependency-management' version '1.1.4' apply false
 	id 'org.antora' version '1.0.0'
 	id 'io.spring.antora.generate-antora-yml' version '0.0.1'
+	id 'com.github.spotbugs' version '6.0.7'
 }
 
 description = 'Spring AMQP'
@@ -49,7 +50,6 @@ ext {
 	commonsCompressVersion = '1.20'
 	commonsHttpClientVersion = '5.2.3'
 	commonsPoolVersion = '2.12.0'
-	googleJsr305Version = '3.0.2'
 	hamcrestVersion = '2.2'
 	hibernateValidationVersion = '8.0.1.Final'
 	jacksonBomVersion = '2.15.3'
@@ -202,7 +202,10 @@ configure(javaProjects) { subproject ->
 
 	// dependencies that are common across all java projects
 	dependencies {
-		compileOnly "com.google.code.findbugs:jsr305:$googleJsr305Version"
+		def spotbugsAnnotations = "com.github.spotbugs:spotbugs-annotations:${spotbugs.toolVersion.get()}"
+		compileOnly spotbugsAnnotations
+		testCompileOnly spotbugsAnnotations
+
 		testImplementation 'org.apache.logging.log4j:log4j-core'
 		testImplementation "org.hamcrest:hamcrest-core:$hamcrestVersion"
 		testImplementation ("org.mockito:mockito-core:$mockitoVersion") {
@@ -224,7 +227,6 @@ configure(javaProjects) { subproject ->
 		// To avoid compiler warnings about @API annotations in JUnit code
 		testCompileOnly 'org.apiguardian:apiguardian-api:1.0.0'
 
-		testCompileOnly "com.google.code.findbugs:jsr305:$googleJsr305Version"
 		testImplementation 'org.jetbrains.kotlin:kotlin-reflect'
 		testImplementation 'org.jetbrains.kotlin:kotlin-stdlib-jdk8'