Github user tillrohrmann commented on the issue:
https://github.com/apache/flink/pull/4939
I think excluding dependencies without declaring them explicitly has the
disadvantage that this relies implicitly on another dependency to pull in the
right versions. Once this dependency is removed or its version bumped the whole
build might fail because it no longer pulls in the dependency.---
