mvn dependency:analyze is strange on this one. You can remove or add the dependency, it won't complain about "used but undeclared" or "undeclared but used" dependencies. But it does a difference in dependency:tree or for the client application.
stack made changes -
|Fix Version/s||0.96.1 [ 12324961 ]|
|Status||Patch Available [ 10002 ]||Resolved [ 5 ]|
|Resolution||Invalid [ 6 ]|
|Status||Open [ 1 ]||Patch Available [ 10002 ]|