org.bouncycastle:bcpkix-jdk15on dependency declared twice in the pom

Just upgraded to version 4.39, and noticed that bouncycastle has been added as a transitive dependency.

But I'm a bit confused. The changelog for version 4.32 states:

"Makes org.bouncycastle:bcpkix-jdk15on an optional dependency."

However, the dependency is declared twice in the pom:

<dependency>
    <groupId>org.bouncycastle</groupId>
    <artifactId>bcpkix-jdk15on</artifactId>
    <version>[1.52,)</version>
    <optional>true</optional>
</dependency>
<dependency>
    <groupId>org.bouncycastle</groupId>
    <artifactId>bcpkix-jdk15on</artifactId>
    <version>1.55</version>
</dependency>

Comments (3)