I think this exclusion should be moved to the dependencyManagement section. We had a bug with this earlier where the exclusion in the child completely wiped out any declared in dependencyManagement.