Use BOM instead of fixed version for spring dependency