Here are newly introduced library dependencies with bridges-script:
(1), (2), (3), (4), (5) and (6) is from the following ServiceMix maven repository which is defined in the root pom.xml:
<!-- required for scripting engine jars -->
The ServiceMix team seems to have built the JSR-223 API and the reference implementations by themselves and decided to put those into their repository for their scripting integrations.
I assume this should be okay in an Apache project and also okay to use their repository and dependencies from the repo in our project.
For (7), Groovy is licensed by Apache License 2.0.
For (8), Rhino can be licensed by MPL 1.1. Since we just provide a binary dependency for users' convenience and testing, we can just add a notice for this. 
For (9), Jython license seems to be similar to Apache License but quite not sure... 
For (10), Jruby can be licensed by CPL which is in the same category as MPL. 
For (11), Beanshell is licensed by SPL which is in the same category as MPL. 
Anyway, I think it seems good enough to add each license file and notes into the NOTICE file for those.