Unable to figure out how a transitive dependency of a particular version is ending up in my jar?

And no I don’t see any 19.0 in fact here is the output. gradle dependencyInsight --configuration compile --dependency guava

Configuration on demand is an incubating feature.

com.google.guava:failureaccess:1.0.1
   variant "runtime" [
      org.gradle.status   = release (not requested)
      org.gradle.usage    = java-runtime (not requested)
      org.gradle.category = library (not requested)
   ]

com.google.guava:failureaccess:1.0.1
+--- compile
\--- com.google.guava:guava:28.0-android
     +--- compile (requested com.google.guava:guava:26.0-jre)
     +--- io.grpc:grpc-protobuf:1.23.0 (requested com.google.guava:guava:26.0-android)
     |    +--- compile
     |    +--- io.grpc:grpc-all:1.23.0
     |    |    \--- compile
     |    +--- io.grpc:grpc-grpclb:1.23.0
     |    |    \--- compile
     |    \--- io.grpc:grpc-services:1.23.0
     |         \--- compile
     +--- io.grpc:grpc-protobuf-lite:1.23.0 (requested com.google.guava:guava:26.0-android)
     |    +--- compile
     |    \--- io.grpc:grpc-protobuf:1.23.0 (*)
     +--- io.grpc:grpc-api:1.23.0 (requested com.google.guava:guava:26.0-android)
     |    +--- compile
     |    +--- io.grpc:grpc-all:1.23.0 (requested io.grpc:grpc-api:[1.23.0]) (*)
     |    +--- io.grpc:grpc-auth:1.23.0 (requested io.grpc:grpc-api:[1.23.0])
     |    |    +--- compile
     |    |    \--- io.grpc:grpc-all:1.23.0 (*)
     |    +--- io.grpc:grpc-core:1.23.0 (requested io.grpc:grpc-api:[1.23.0])
     |    |    +--- compile
     |    |    +--- io.grpc:grpc-all:1.23.0 (requested io.grpc:grpc-core:[1.23.0]) (*)
     |    |    +--- io.grpc:grpc-grpclb:1.23.0 (requested io.grpc:grpc-core:[1.23.0]) (*)
     |    |    +--- io.grpc:grpc-netty-shaded:1.23.0 (requested io.grpc:grpc-core:[1.23.0])
     |    |    |    \--- compile
     |    |    +--- io.grpc:grpc-okhttp:1.23.0 (requested io.grpc:grpc-core:[1.23.0])
     |    |    |    +--- compile
     |    |    |    \--- io.grpc:grpc-all:1.23.0 (*)
     |    |    +--- io.grpc:grpc-services:1.23.0 (requested io.grpc:grpc-core:[1.23.0]) (*)
     |    |    +--- io.grpc:grpc-netty:1.23.0 (requested io.grpc:grpc-core:[1.23.0])
     |    |    |    \--- io.grpc:grpc-all:1.23.0 (*)
     |    |    \--- io.grpc:grpc-testing:1.23.0 (requested io.grpc:grpc-core:[1.23.0])
     |    |         \--- io.grpc:grpc-all:1.23.0 (*)
     |    +--- io.grpc:grpc-protobuf:1.23.0 (*)
     |    +--- io.grpc:grpc-protobuf-lite:1.23.0 (*)
     |    \--- io.grpc:grpc-stub:1.23.0
     |         +--- compile
     |         +--- io.grpc:grpc-all:1.23.0 (*)
     |         +--- io.grpc:grpc-grpclb:1.23.0 (*)
     |         +--- io.grpc:grpc-services:1.23.0 (*)
     |         \--- io.grpc:grpc-testing:1.23.0 (*)
     +--- com.atlassian.jira:jira-rest-java-client-api:5.1.6 (requested com.google.guava:guava:26.0-jre)
     |    +--- compile
     |    \--- com.atlassian.jira:jira-rest-java-client-core:5.1.6
     |         +--- compile
     |         \--- project :pipes (requested com.atlassian.jira:jira-rest-java-client-core:5.1.2-2bd0a62e)
     |              \--- compile
     \--- com.google.protobuf:protobuf-java-util:3.10.0
          +--- compile
          +--- io.grpc:grpc-grpclb:1.23.0 (requested com.google.protobuf:protobuf-java-util:3.9.0) (*)
          \--- io.grpc:grpc-services:1.23.0 (requested com.google.protobuf:protobuf-java-util:3.9.0) (*)

com.google.guava:guava:28.0-android
   variant "runtime" [
      org.gradle.status   = release (not requested)
      org.gradle.usage    = java-runtime (not requested)
      org.gradle.category = library (not requested)
   ]
   Selection reasons:
      - By conflict resolution : between versions 28.0-android, 26.0-jre and 26.0-android

com.google.guava:guava:28.0-android
\--- com.google.protobuf:protobuf-java-util:3.10.0
     +--- compile
     +--- io.grpc:grpc-grpclb:1.23.0 (requested com.google.protobuf:protobuf-java-util:3.9.0)
     |    \--- compile
     \--- io.grpc:grpc-services:1.23.0 (requested com.google.protobuf:protobuf-java-util:3.9.0)
          \--- compile

com.google.guava:guava:26.0-android -> 28.0-android
+--- io.grpc:grpc-api:1.23.0
|    +--- compile
|    +--- io.grpc:grpc-all:1.23.0 (requested io.grpc:grpc-api:[1.23.0])
|    |    \--- compile
|    +--- io.grpc:grpc-auth:1.23.0 (requested io.grpc:grpc-api:[1.23.0])
|    |    +--- compile
|    |    \--- io.grpc:grpc-all:1.23.0 (*)
|    +--- io.grpc:grpc-core:1.23.0 (requested io.grpc:grpc-api:[1.23.0])
|    |    +--- compile
|    |    +--- io.grpc:grpc-all:1.23.0 (requested io.grpc:grpc-core:[1.23.0]) (*)
|    |    +--- io.grpc:grpc-grpclb:1.23.0 (requested io.grpc:grpc-core:[1.23.0])
|    |    |    \--- compile
|    |    +--- io.grpc:grpc-netty-shaded:1.23.0 (requested io.grpc:grpc-core:[1.23.0])
|    |    |    \--- compile
|    |    +--- io.grpc:grpc-okhttp:1.23.0 (requested io.grpc:grpc-core:[1.23.0])
|    |    |    +--- compile
|    |    |    \--- io.grpc:grpc-all:1.23.0 (*)
|    |    +--- io.grpc:grpc-services:1.23.0 (requested io.grpc:grpc-core:[1.23.0])
|    |    |    \--- compile
|    |    +--- io.grpc:grpc-netty:1.23.0 (requested io.grpc:grpc-core:[1.23.0])
|    |    |    \--- io.grpc:grpc-all:1.23.0 (*)
|    |    \--- io.grpc:grpc-testing:1.23.0 (requested io.grpc:grpc-core:[1.23.0])
|    |         \--- io.grpc:grpc-all:1.23.0 (*)
|    +--- io.grpc:grpc-protobuf:1.23.0
|    |    +--- compile
|    |    +--- io.grpc:grpc-all:1.23.0 (*)
|    |    +--- io.grpc:grpc-grpclb:1.23.0 (*)
|    |    \--- io.grpc:grpc-services:1.23.0 (*)
|    +--- io.grpc:grpc-protobuf-lite:1.23.0
|    |    +--- compile
|    |    \--- io.grpc:grpc-protobuf:1.23.0 (*)
|    \--- io.grpc:grpc-stub:1.23.0
|         +--- compile
|         +--- io.grpc:grpc-all:1.23.0 (*)
|         +--- io.grpc:grpc-grpclb:1.23.0 (*)
|         +--- io.grpc:grpc-services:1.23.0 (*)
|         \--- io.grpc:grpc-testing:1.23.0 (*)
+--- io.grpc:grpc-protobuf:1.23.0 (*)
\--- io.grpc:grpc-protobuf-lite:1.23.0 (*)

com.google.guava:guava:26.0-jre -> 28.0-android
+--- compile
\--- com.atlassian.jira:jira-rest-java-client-api:5.1.6
     +--- compile
     \--- com.atlassian.jira:jira-rest-java-client-core:5.1.6
          +--- compile
          \--- project :pipes (requested com.atlassian.jira:jira-rest-java-client-core:5.1.2-2bd0a62e)
               \--- compile

com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
   variant "runtime" [
      org.gradle.status   = release (not requested)
      org.gradle.usage    = java-runtime (not requested)
      org.gradle.category = library (not requested)
   ]

com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
+--- compile
\--- com.google.guava:guava:28.0-android
     +--- compile (requested com.google.guava:guava:26.0-jre)
     +--- io.grpc:grpc-protobuf:1.23.0 (requested com.google.guava:guava:26.0-android)
     |    +--- compile
     |    +--- io.grpc:grpc-all:1.23.0
     |    |    \--- compile
     |    +--- io.grpc:grpc-grpclb:1.23.0
     |    |    \--- compile
     |    \--- io.grpc:grpc-services:1.23.0
     |         \--- compile
     +--- io.grpc:grpc-protobuf-lite:1.23.0 (requested com.google.guava:guava:26.0-android)
     |    +--- compile
     |    \--- io.grpc:grpc-protobuf:1.23.0 (*)
     +--- io.grpc:grpc-api:1.23.0 (requested com.google.guava:guava:26.0-android)
     |    +--- compile
     |    +--- io.grpc:grpc-all:1.23.0 (requested io.grpc:grpc-api:[1.23.0]) (*)
     |    +--- io.grpc:grpc-auth:1.23.0 (requested io.grpc:grpc-api:[1.23.0])
     |    |    +--- compile
     |    |    \--- io.grpc:grpc-all:1.23.0 (*)
     |    +--- io.grpc:grpc-core:1.23.0 (requested io.grpc:grpc-api:[1.23.0])
     |    |    +--- compile
     |    |    +--- io.grpc:grpc-all:1.23.0 (requested io.grpc:grpc-core:[1.23.0]) (*)
     |    |    +--- io.grpc:grpc-grpclb:1.23.0 (requested io.grpc:grpc-core:[1.23.0]) (*)
     |    |    +--- io.grpc:grpc-netty-shaded:1.23.0 (requested io.grpc:grpc-core:[1.23.0])
     |    |    |    \--- compile
     |    |    +--- io.grpc:grpc-okhttp:1.23.0 (requested io.grpc:grpc-core:[1.23.0])
     |    |    |    +--- compile
     |    |    |    \--- io.grpc:grpc-all:1.23.0 (*)
     |    |    +--- io.grpc:grpc-services:1.23.0 (requested io.grpc:grpc-core:[1.23.0]) (*)
     |    |    +--- io.grpc:grpc-netty:1.23.0 (requested io.grpc:grpc-core:[1.23.0])
     |    |    |    \--- io.grpc:grpc-all:1.23.0 (*)
     |    |    \--- io.grpc:grpc-testing:1.23.0 (requested io.grpc:grpc-core:[1.23.0])
     |    |         \--- io.grpc:grpc-all:1.23.0 (*)
     |    +--- io.grpc:grpc-protobuf:1.23.0 (*)
     |    +--- io.grpc:grpc-protobuf-lite:1.23.0 (*)
     |    \--- io.grpc:grpc-stub:1.23.0
     |         +--- compile
     |         +--- io.grpc:grpc-all:1.23.0 (*)
     |         +--- io.grpc:grpc-grpclb:1.23.0 (*)
     |         +--- io.grpc:grpc-services:1.23.0 (*)
     |         \--- io.grpc:grpc-testing:1.23.0 (*)
     +--- com.atlassian.jira:jira-rest-java-client-api:5.1.6 (requested com.google.guava:guava:26.0-jre)
     |    +--- compile
     |    \--- com.atlassian.jira:jira-rest-java-client-core:5.1.6
     |         +--- compile
     |         \--- project :pipes (requested com.atlassian.jira:jira-rest-java-client-core:5.1.2-2bd0a62e)
     |              \--- compile
     \--- com.google.protobuf:protobuf-java-util:3.10.0
          +--- compile
          +--- io.grpc:grpc-grpclb:1.23.0 (requested com.google.protobuf:protobuf-java-util:3.9.0) (*)
          \--- io.grpc:grpc-services:1.23.0 (requested com.google.protobuf:protobuf-java-util:3.9.0) (*)

(*) - dependencies omitted (listed previously)

A web-based, searchable dependency report is available by adding the --scan option.

BUILD SUCCESSFUL in 4s
1 actionable task: 1 executed