org.reflections 0.9.10.redhat-3 (used by OptaPlanner and (soon) Drools) requires Javassist version 3.19 but ip-bom downgrades it to 3.18

org.reflections 0.9.10.redhat-3 depends on javassist 3.19.0.GA-redhat-1.
http://mvnrepository.com/artifact/org.reflections/reflections/0.9.10.redhat-3
but the productized ip-bom downgrades javassist to 3.18.2...

Note: org.reflections 0.9.10. depends on javassist 3.18.2-GA
http://mvnrepository.com/artifact/org.reflections/reflections/0.9.10
So the redhat productized version deliberately upgraded javassist. This could be for any reason, such as a security fix.

On community, it's probably a good idea that we upgrade javassist to 3.19, especially on master to avoid future trouble.
https://github.com/jboss-integration/jboss-integration-platform-bom/blob/master/pom.xml#L257

  <version.org.javassist>3.18.2-GA</version.org.javassist>

becomes

  <version.org.javassist>3.19.0-GA</version.org.javassist>

or even 3.21.0-GA directly