Not sure what your opinions are on this but I think hibernate validator should be a runtime dependency. Any extra constraints should be separated since people compile against those.

Note that Hibernate Validator has a public API with user-facing functionality, so it's more than just the constraints what a user might want to access from HV. You can use the runtime or provided scope if you don't need any of these and want to ensure 100% portability but for other cases it's perfectly fine to use it as compile scoped dependency. You only should never import any of the internal packages as they are not intended for public acces.