We have always explicitly excluded the xml-api dependency, which is the only non-optional transitive dependency of dom4j. I don't see this changing and obviously the workaround for sbt is to manually include it until they resolve the issue you discovered.