title: Spring Boot and dependency for spring-security-jwt
body: <p>I'm migrating a Spring Boot project from boot 1.5.x to 2.0.x. </p>
  
  <p>In the 1.5.x project I see that the following dependency is being used:</p>
  
  <pre><code>dependencies {
  
    ...
    compile("org.springframework.security:spring-security-jwt")
    ...
  }
  </code></pre>
  
  <p>The version of the <code>spring-security-jwt</code> is managed by Spring and I can verify that <a href="https://github.com/spring-projects/spring-boot/blob/v1.5.14.RELEASE/spring-boot-dependencies/pom.xml#L170" rel="nofollow noreferrer">here</a>. Namely:</p>
  
  <pre><code>&lt;spring-security-jwt.version&gt;1.0.9.RELEASE&lt;/spring-security-jwt.version&gt;
  </code></pre>
  
  <p>The same dependency fails to resolve when I move to Boot 2 because it is no longer managed by Spring. I can verify that <a href="https://github.com/spring-projects/spring-boot/blob/v2.0.2.RELEASE/spring-boot-project/spring-boot-dependencies/pom.xml" rel="nofollow noreferrer">here</a>...</p>
  
  <p>Is this a bug or it is removed and included in another lib? Somehow I can't find clues in the docs... Shall I manage the version manually now?</p>