As Nick suspected, the dependency is actually from HSSF too so commons collections 4 needs adding to the main POM https://bz.apache.org/bugzilla/show_bug.cgi?id=59734
poi/trunk/maven/poi-ooxml.pom
poi/trunk/maven/poi.pom