cxf jaxws security - com.codahale.metrics wrong version

[ERROR] Failed to execute goal org.apache.karaf.tooling:karaf-maven-plugin:4.2.0.fuse-000191-redhat-1:assembly (karaf-assembly) on project cxf-jaxrw-security: Unable to build assembly: Unable to resolve root: missing requirement [root] osgi.identity; osgi.identity=com.redhat.xpaas.cxf-jaxrw-security; type=osgi.bundle; version="[2.0.0.SNAPSHOT,2.0.0.SNAPSHOT]"; resolution:=mandatory [caused by: Unable to resolve com.redhat.xpaas.cxf-jaxrw-security/2.0.0.SNAPSHOT: missing requirement [com.redhat.xpaas.cxf-jaxrw-security/2.0.0.SNAPSHOT] osgi.wiring.package; filter:="(osgi.wiring.package=org.apache.cxf.ws.security.wss4j)" [caused by: Unable to resolve org.apache.cxf.cxf-rt-ws-security/3.1.11.fuse-000199-redhat-1: missing requirement [org.apache.cxf.cxf-rt-ws-security/3.1.11.fuse-000199-redhat-1] osgi.wiring.package; filter:="(&(osgi.wiring.package=org.opensaml.saml.common)(version>=3.1.0)(!(version>=4.0.0)))" [caused by: Unable to resolve org.apache.servicemix.bundles.opensaml/3.3.0.2: missing requirement [org.apache.servicemix.bundles.opensaml/3.3.0.2] osgi.wiring.package; filter:="(&(osgi.wiring.package=com.codahale.metrics)(version>=3.1.0)(!(version>=4.0.0)))"]]] -