Karaf has transitive dependencies on old Spring artifacts

[Martin Lichtin]

Hi

I've seen this issue with NMR recently 
https://issues.apache.org/jira/browse/SMX4NMR-313 and also see it with Karaf.
Does anyone understand why Karaf depends spring-osgi-* and therefore on oldish 
versions of spring artifacts?
The dependency goes like

apache-karaf [2.3.1]
   spring-osgi-extender [1.2.1]
      spring-osgi-core [1.2.1]
         org.springframework.aop [2.5.6.SEC01]
         org.springframework.beans [2.5.6.SEC01]
         org.springframework.context [2.5.6.SEC01]
         org.springframework.core [2.5.6.SEC01]
   spring-osgi-core[1.2.1]
      ...