From PR-9827

Today, jenkins-bom is delivering a managed dependency on asm 9.5, coming from Guice. While it is bad that we deliver any reference to ASM from jenkins-bom, it is even worse that we deliver an old one. This overrides the old version to a more recent one, which is a strict improvement over the status quo. It is not a complete long-term solution to the problem, but it will surely not make things any worse than they are today, and will make them better in some cases.