Thanks for clarification, yeah, I will vote for upgrading our stack of dependencies. Additional reason for reporting this is that I didn't find anything about this issue.

The only I noticed is methodMetaData.getAllParameterMetaData() here doesn't contain any of constraints in parameter metadata in case when validation passes. And contains when validation works as expected.