I would say this debug warnings can be ignored. The activation.jar is the only one that we need (AFAI am aware of) and it is in fact on the classpath when its needed
Yes, we provide all of the jars that are refernced here (jsr-173 = StAX). They can for sure be ignored, although we could also remove that classpath entry. from the manifest.