Many REST APIs fail due to expect4j dependencies missing

For snmp4sdn REST APIs that was implemented using CLI to configure switches, fail, including:
All ACL APIs:
acl:xxx (all ACL functions)
Some STP APIs:
misc-config:enable-stp
misc-config:disable-stp

With the gerrit, "Use upstream expect4j", the dependencies expect4j requires are missing (gerrit #43235 for mater, and #43480 for stable/boron).

The missing dependencies could be found as below.
In Karaf console, execute command:
bundle:headers <expect4j_bundle_id>
then shows some import-package are red.
The red ones includes:
com.jcraft.jsch;resolution:=optional,
org.apache.commons.net.io;resolution:=optional,
org.apache.commons.net.telnet;resolution:=optional,
org.apache.oro.text;resolution:=optional,
org.apache.oro.text.regex;resolution:=optional,