excluding dependencies from transitive dependencies does not work

[mkristian]

Jarfile with

jar 'org.opensaml:opensaml', '2.6.1', :exclusions => ['org.bouncycastle:bcprov-jdk15']

works OK when there is no Jarfile.lock and .jbundler/classpath.rb. but with Jarfile.lock and without jbundler/classpath.rb the transitive dependency org.opensaml:xmltooling:jar:1.4.1 does pull in org.bouncycastle:bcprov-jdk15 while creating .jbundler/classpath.rb.

also see:

no_group_id_given:jbundler:jar:0.0.0
\- org.opensaml:opensaml:jar:2.6.1:compile
   +- org.opensaml:openws:jar:1.5.1:compile
   |  +- org.opensaml:xmltooling:jar:1.4.1:compile
   |  |  +- org.bouncycastle:bcprov-jdk15:jar:1.46:compile
   |  |  \- ca.juliusdavies:not-yet-commons-ssl:jar:0.3.9:compile
   |  +- commons-httpclient:commons-httpclient:jar:3.1:compile
   |  \- org.apache.santuario:xmlsec:jar:1.5.6:compile
   |     \- commons-logging:commons-logging:jar:1.1.1:compile
   +- commons-codec:commons-codec:jar:1.7:compile
   +- commons-collections:commons-collections:jar:3.2.1:compile
   +- commons-lang:commons-lang:jar:2.6:compile
   +- org.apache.velocity:velocity:jar:1.7:compile
   +- org.owasp.esapi:esapi:jar:2.0.1:compile
   +- joda-time:joda-time:jar:2.2:compile
   +- xerces:xercesImpl:jar:2.10.0:runtime
   +- xalan:serializer:jar:2.7.1:runtime
   +- xml-resolver:xml-resolver:jar:1.2:runtime
   \- xalan:xalan:jar:2.7.1:runtime