spring-cloud-gcp-dependencies BOM forces to use specific version of depenencies

[ivan-zaitsev]

Describe the bug
When BOM is used in maven dependencyManagement section it will manage dependencies. It is good for the libraries which are provided by this repository, but for example such library as opentelemetry-bom is not managed by this repository. When spring-cloud-gcp-dependencies is added to dependencyManagement section it overwrites parent opentelemetry version.

Sample
https://mvnrepository.com/artifact/com.google.cloud/spring-cloud-gcp-dependencies/5.1.2
Managed Dependencies section

[suztomo]

Is this dependency management preventing you from using certain feature of OpenTelemetry?

[ivan-zaitsev]

The thing is here not about using certain feature, by using spring-cloud-gcp-dependencies in dependencyManagement I don't expect that it will manage additionally opentelemetry or other dependencies that Spring parent manages already. This creates implicit dependency override.

[suztomo]

opentelemetry or other dependencies that Spring parent manages already

That's interesting. I didn't know that Spring parent manages OpenTelemetry version already. Thanks.

Found: https://docs.spring.io/spring-boot/docs/current/reference/html/dependency-versions.html

[ivan-zaitsev]

I think that r2dbc-postgresql also managed by Spring.

[JoeWang1127]

OpenTelemetry is no longer managed by spring-cloud-gcp-dependencies starting from 5.4.0.

googleapis/sdk-platform-java#2736 fixed this issue.