As Nick suspected, the dependency is actually from HSSF too so commons collections 4 needs adding to the main POM

https://bz.apache.org/bugzilla/show_bug.cgi?id=59734


git-svn-id: https://svn.apache.org/repos/asf/poi/trunk@1754563 13f79535-47bb-0310-9956-ffa450edef68

maven/poi-ooxml.pom

@@ -74,10 +74,5 @@
     	<artifactId>curvesapi</artifactId>
     	<version>1.04</version>
     </dependency>
-    <dependency>
-      <groupId>org.apache.commons</groupId>
-      <artifactId>commons-collections4</artifactId>
-      <version>4.1</version>
-    </dependency>
   </dependencies>
 </project>

maven/poi.pom

@@ -91,6 +91,11 @@
       <scope>test</scope>
       <version>4.12</version>
     </dependency>
+    <dependency>
+      <groupId>org.apache.commons</groupId>
+      <artifactId>commons-collections4</artifactId>
+      <version>4.1</version>
+    </dependency>
   </dependencies>
 
 </project>