title: Maven BOM for solving dependencies on Spring + Spring Data + Spring Security?
body: <p><a href="http://docs.spring.io/spring-data/data-jpa/docs/1.9.1.RELEASE/reference/html/#dependencies" rel="nofollow noreferrer">Spring Data Jpa Docs</a> suggest to use Maven BOM (<a href="https://maven.apache.org/guides/introduction/introduction-to-dependency-mechanism.html" rel="nofollow noreferrer">bill of materials</a>) due to:</p>
  <blockquote>
  <p>Due to different inception dates of individual Spring Data modules, most
  of them carry different major and minor version numbers. The easiest way
  to find compatible ones is by relying on the Spring Data Release Train BOM
  we ship with the compatible versions defined. In a Maven project you’d
  declare this dependency in the <code>&lt;dependencyManagement/&gt;</code> section of your POM</p>
  </blockquote>
  <p>Reference to <a href="https://github.com/spring-projects/spring-data-examples/blob/master/bom/pom.xml" rel="nofollow noreferrer">official example</a> is provided.</p>
  <p>I've got the idea of BOM and <code>dependencyManagement</code>. Vendor officially supply us (developers) with tested/recommended/supported compatibility list. <em>That is great!</em></p>
  <p>In order to move versions synchronously I need some &quot;super-BOM&quot; that governs following BOMs:</p>
  <pre><code>org.springframework:spring-framework-bom
  org.springframework.data:spring-data-releasetrain
  org.springframework.security:spring-security-bom
  </code></pre>
  <p>How do I choose compatible ones?</p>
  <p>Are there <strong>SPRING-SUPER-BOM</strong> for all umbrella (I mean official or community supported so I save my time by avoiding troubleshooting and if that happen and I have found and have resolved issue - I have an option to get back solution to community)?</p>