This is deliberate, as this is supposed to be backwards compatible : https://github.com/apache/jackrabbit-filevault/blob/f91c3d73ab33e4155837768d70b7c3e8c7da9e2d/RELEASE-NOTES.txt#L17
Jackrabbit 2.14 and Oak 1.6 were the versions shipped with AEM 6.3 with which this release is supposed to be compatible. Check out the https://github.com/apache/jackrabbit-filevault/blob/master/target-osgi-environment/pom.xml Konrad > > I noticed that versions:display-dependency-updates shows a few 2.14.0 > references for Jackrabbit, and also ancient versions of > jackson-databind. Not sure whether this is a problem in practice (you > may want to check). > > Best regards, Julian
