Since release 5.0RC1, we have silently upgraded Bouncy Castle library to 1.46, which was a major, non-binary compatible upgrade in preparation to upcoming 2.x of BC. This have probably broken some BC dependencies, like the tika parser, which use PDFBox (see https://issues.apache.org/jira/browse/PDFBOX-1587), but most probably, without real annoyance (at least nobody complained).
BC classes are better dispatched in latest releases, with a separate bcpkix module which contains part of the bcmail module, that was not only related to mails (PKCS7 for exemple).
Reverting back to pre-1.46 release seems too late and inappropriate for future evolution, since some new features proposed in the latest release of BC would be helpful for improving the crypto API.
So, we upgrade now to the following deps: