We're currently managing javax.servlet:jstl:1.2. We should be managing org.glassfish.web:jakarta.servlet.jsp.jstl:1.2.6. For backwards compatibility, we can add some new dependency management alongside the existing.