title: Why does Maven choose version 1.0.b2 over 1.3.03
body: <p>I have a project with a dependency on HTTP BUilder, this gives me the followoing dependency tree:</p>
  
  <pre><code>[INFO] +- org.codehaus.groovy.modules.http-builder:http-builder:jar:0.5.1:compile
  [INFO] |  +- org.apache.httpcomponents:httpclient:jar:4.3.2:compile
  [INFO] |  |  \- commons-codec:commons-codec:jar:1.6:compile
  [INFO] |  +- net.sf.json-lib:json-lib:jar:jdk15:2.3:compile
  [INFO] |  |  +- commons-beanutils:commons-beanutils:jar:1.8.0:compile
  [INFO] |  |  +- commons-collections:commons-collections:jar:3.2.1:compile
  [INFO] |  |  +- commons-lang:commons-lang:jar:2.4:compile
  [INFO] |  |  \- net.sf.ezmorph:ezmorph:jar:1.0.6:compile
  [INFO] |  +- net.sourceforge.nekohtml:nekohtml:jar:1.9.9:compile
  [INFO] |  |  \- xerces:xercesImpl:jar:2.8.1:compile
  [INFO] |  |     \- xml-apis:xml-apis:jar:1.3.03:compile
  [INFO] |  \- xml-resolver:xml-resolver:jar:1.2:compile
  </code></pre>
  
  <p>After I add hibernate-entitymanager, the version of <code>xml-apis:aml-apis</code> changes. Suddenly Maven prefers to use version 1.0b2 which is a transitive dependency via dom4j:</p>
  
  <pre><code>[INFO] +- org.hibernate:hibernate-entitymanager:jar:4.3.1.Final:compile
  [INFO] |  +- org.jboss.logging:jboss-logging:jar:3.1.3.GA:compile
  [INFO] |  +- org.jboss.logging:jboss-logging-annotations:jar:1.2.0.Beta1:compile
  [INFO] |  +- org.hibernate:hibernate-core:jar:4.3.1.Final:compile
  [INFO] |  |  +- antlr:antlr:jar:2.7.7:compile
  [INFO] |  |  \- org.jboss:jandex:jar:1.1.0.Final:compile
  [INFO] |  +- dom4j:dom4j:jar:1.6.1:compile
  [INFO] |  |  \- xml-apis:xml-apis:jar:1.0.b2:compile
  </code></pre>
  
  <p>Due to this, I now get the following exception during runtime:</p>
  
  <pre><code>java.lang.IncompatibleClassChangeError: 
  Class org.apache.xerces.parsers.AbstractSAXParser$LocatorProxy 
  does not implement the requested interface org.xml.sax.Locator
  </code></pre>
  
  <p>I know I can fix it by manually adding the dependency with the good version number in my pom.xml, but I wonder why this is needed:</p>
  
  <pre><code>    &lt;dependency&gt;
          &lt;groupId&gt;xml-apis&lt;/groupId&gt;
          &lt;artifactId&gt;xml-apis&lt;/artifactId&gt;
          &lt;version&gt;1.3.03&lt;/version&gt;
      &lt;/dependency&gt;
  </code></pre>