This dependency has been removed upstream (starting in 9.0.37), so we will need to adjust our maven wrapper to drop it as well. I'm linking to the BZ here and the commit for reference, but it will be included when we rebase. We just need to make sure the change is reflected in the poms that we build tomcat from.