Some plugins' dependency versions get unexpectedly overridden

Issue Summary

Some plugins' dependency versions get unexpectedly overridden by OSGi – e.g. the "Better PDF Exporter for Jira" app gets Guava v26 even that it requires (and bundles) Guava v10.

Steps to Reproduce

1. Get a clean Jira 8.5.2
2. Install "Better PDF Exporter for Jira" app
3. Go to Jira Administration -> OSGi
4. Search for "com.midori.jira.plugin.pdfview"
5. Expand "Import-Package" block
6. Search for "com.google.common.base" 

Expected Results

No "com.google.common.base" present on the "Import-Package" list

Actual Results

"com.google.common.base version: [26.0.0,26.0.0]" is present on the "Import-Package" list

Note

Jira 8.5.1 is not affected

Workaround

Replace WEB-INF/lib/atlassian-plugins-osgi-5.3.3.jar file with atlassian-plugins-osgi-5.2.2.jar from previous Jira version