Latest upstream release: 13576
Current version/release in rawhide: 0-0.85.11427svn.fc28
Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.
Based on the information from anitya: https://release-monitoring.org/project/1470/
So far the release is available in the following copr repository (release 89 is with bundled apache-commons-*):
Reading through the bundling guidelines , it looks like it is already allowed to bundle some libraries, if there is no way around so I will probably make use of this to finally update JOSM in Fedora.
I submitted a PR to apache-commons-jcs updating to latest version  and I built it together with the new geronimo-annotation (thanks msimacek for updating it in F28 ) so this copr can provide up to date josm with only tweaked gnu-getopt bundled at this moment (release 90 in the above copr repository). If everything will go fine and we will update the dependency in F28, we can expect JOSM land there too.
Thanks for patience everyone.
Also I can make use of a review, if that what I just did to make it working in the spec file and with the patches makes sense:
josm-0-0.86.13576svn.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-c1e4817e2a
josm-0-0.86.13576svn.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-c1e4817e2a
josm-0-0.86.13576svn.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report.