It looks like a compile dependency on junit-jupiter snuck into the 3.0.1 release.
If I look at the maven page for 3.0.0 at https://mvnrepository.com/artifact/org.apache.pdfbox/pdfbox/3.0.0, junit-jupiter is listed as a test dependency. If I look at the maven page for 3.0.1 at https://mvnrepository.com/artifact/org.apache.pdfbox/pdfbox/3.0.1, junit-jupiter is listed as a compile dependency. As a result, the war file that I build would contain the junit libraries. I’m assuming it’s a mistake of some sort that it got reclassified as “compile” rather than “test”?