One of Clojure's strengths is the resiliency of code, that something written years ago still works today.
And if you do not change the dependencies, it will continue to work.
I think folks need to consider why you would update a Java library that one of your existing dependencies depends on? If you leave it alone, it continues to work. It only breaks if you explicitly change the version in your own project and that sort of change always has a risk that you're going to break a dependency that also uses it.
Yes, there are sometimes good reasons to override the version of a Java library -- to address a CVE, for example -- or perhaps you have two dependencies that both rely on that Java library and you want to update one of those dependencies. But those sorts of changes always carry a risk -- and even patch release updates of Java libraries can (and do!) introduce breakage in all sorts of ways.
As someone who has a CI pipeline that will fail the build if a new reflection warning appears, I'd much rather have a guarantee of no reflection and to see that error immediately, locally, than not catch the problem introduced by the change further down the line.