Versions of dependencies are overridden even if they are explicitly mentioned in build.gradle

Help/Discuss
1

I have below build.gradle file. The version of spring-core and the others are mentioned as 4.1.3.RELEASE build but it still pulls 4.1.6.RELEASE versions. I am new to Gradle so not sure what’s happening here. Please help.

apply plugin: 'war'

jar.enabled = true
description = 'portal-core - the business logic and services of  Portal'
dependencies {
    compile group: 'com.sun.jersey', name: 'jersey-client', version:'1.8'
    compile group: 'com.sun.jersey', name: 'jersey-json', version:'1.8'
    compile group: 'com.fasterxml.jackson.core', name: 'jackson-core', version:'2.3.0'
    compile group: 'com.fasterxml.jackson.core', name: 'jackson-databind', version:'2.3.0'
  compile(project(':portal-common')) {
    		exclude module: 'spring-core'
  }
  compile(project(':portal-persistence')){
    		exclude module: 'spring-core'
  }
    compile(group: 'com.xxx', name: 'rest-api-model', version:'1.2.4') {
exclude(module: 'jersey-bean-validation')
    }
    compile group: 'javax.mail', name: 'mail', version:'1.4.7'
    compile group: 'org.springframework', name: 'spring-core', version:'4.1.3.RELEASE'
    compile group: 'org.springframework', name: 'spring-context', version:'4.1.3.RELEASE'
    compile group: 'org.springframework', name: 'spring-context-support', version:'4.1.3.RELEASE'
    compile group: 'org.springframework', name: 'spring-tx', version:'4.1.3.RELEASE'
    compile group: 'org.springframework', name: 'spring-web', version:'4.1.3.RELEASE'
    compile group: 'org.springframework', name: 'spring-webmvc', version:'4.1.3.RELEASE'
    compile group: 'org.springframework', name: 'spring-aop', version:'4.1.3.RELEASE'
    compile group: 'org.springframework', name: 'spring-aspects', version:'4.1.3.RELEASE'
    compile group: 'org.springframework', name: 'spring-beans', version:'4.1.3.RELEASE'
    compile group: 'org.springframework.security', name: 'spring-security-core', version:'3.2.5.RELEASE'
    compile group: 'org.springframework.security', name: 'spring-security-config', version:'3.2.5.RELEASE'
    compile group: 'org.springframework.security', name: 'spring-security-web', version:'3.2.5.RELEASE'
    compile group: 'com.google.code.gson', name: 'gson', version:'2.2.4'
    compile group: 'org.apache.commons', name: 'commons-lang3', version:'3.3.2'
    compile group: 'commons-io', name: 'commons-io', version:'2.1'
    compile group: 'commons-lang', name: 'commons-lang', version:'2.4'
    testCompile group: 'org.easymock', name: 'easymock', version:'3.0'
    testCompile group: 'com.sun.xml.bind', name: 'jaxb-impl', version:'2.1.9'
    testCompile group: 'org.springframework', name: 'spring-test', version:'4.1.3.RELEASE'
    testCompile group: 'com.jayway.restassured', name: 'rest-assured', version:'2.4.0'
    testCompile group: 'com.jayway.restassured', name: 'spring-mock-mvc', version:'2.4.1'
    testCompile group: 'com.sun.jersey.contribs', name: 'jersey-apache-client', version:'1.8'
    providedCompile group: 'javax.servlet', name: 'javax.servlet-api', version:'3.0.1'
}

The gradle dependencies command shows output as below (partial)

compile - Compile classpath for source set ‘main’.
±-- org.springframework:spring-core:3.0.6.RELEASE -> 4.1.6.RELEASE
…
±-- project :portal-common
| ±-- project :portal-common-model
| | ±-- com.google.guava:guava-collections:r03 ()
| | — com.framework:common-model:1.0.3-SNAPSHOT
| | ±-- org.springframework.security:spring-security-core:3.0.6.RELEASE -> 3.2.5.RELEASE
| | | ±-- org.springframework:spring-aop:3.2.8.RELEASE -> 4.1.3.RELEASE
| | | | ±-- org.springframework:spring-beans:4.1.3.RELEASE
| | | | | — org.springframework:spring-core:4.1.3.RELEASE -> 4.1.6.RELEASE ()
| | | | — org.springframework:spring-core:4.1.3.RELEASE -> 4.1.6.RELEASE ()
| | | ±-- org.springframework:spring-context:3.2.8.RELEASE -> 4.1.3.RELEASE
| | | | ±-- org.springframework:spring-aop:4.1.3.RELEASE ()
| | | | ±-- org.springframework:spring-beans:4.1.3.RELEASE ()
| | | | ±-- org.springframework:spring-core:4.1.3.RELEASE -> 4.1.6.RELEASE ()
| | | | — org.springframework:spring-expression:4.1.3.RELEASE