Yup, the ASM dependency is one that would constantly cause us headaches. A load of frameworks have a path to ASM for one reason or another and it requires an update every time you move up JVM runtimes.

It's usually not painful to update (just bump the version) but it's an annoyance.

In fact, Byte buddy has a dep on ASM.