atlassian-core 4.6.2 brings log4j into compile scope

[INFO] +- com.atlassian.core:atlassian-core:jar:4.6.2:compile
[INFO] |  +- commons-io:commons-io:jar:2.1:compile (version managed from 1.2)
[INFO] |  +- commons-logging:commons-logging:jar:1.0.4:compile (version managed 
from 1.0.4)
[INFO] |  +- dom4j:dom4j:jar:1.4:compile (version managed from 1.4)
[INFO] |  |  +- jaxen:jaxen:jar:1.1.1:compile (version managed from 1.0-FCS)
[INFO] |  |  |  +- jdom:jdom:jar:1.0:compile
[INFO] |  |  |  \- xom:xom:jar:1.0:compile
[INFO] |  |  |     +- xalan:xalan:jar:2.6.0:compile
[INFO] |  |  |     \- com.ibm.icu:icu4j:jar:4.8.1:compile (version managed from 
2.6.1)
[INFO] |  |  +- saxpath:saxpath:jar:1.0-FCS:compile
[INFO] |  |  +- msv:msv:jar:20020414:compile
[INFO] |  |  +- relaxngDatatype:relaxngDatatype:jar:20020414:compile
[INFO] |  |  \- isorelax:isorelax:jar:20020414:compile
[INFO] |  +- opensymphony:oscore:jar:2.2.7-atlassian-1:compile (version managed 
from 2.2.7)
[INFO] |  +- com.atlassian.image:atlassian-image-consumer:jar:1.0.1:compile
[INFO] |  +- log4j:log4j:jar:1.2.17:compile (version managed from 1.2.7)
[INFO] |  \- mockobjects:alt-jdk1.3:jar:0.07:compile