Github user afs commented on the issue:
https://github.com/apache/jena/pull/413
It is from the released artifacts (specifically, the source artifact).
The Xerces `Version` class has `getVersion()` -> "2.11.0-jena".
The last Xerces dependency is in the JIRA ticket.
And the commit has the change to the dependency management in the POM.---
