Switch to a Spring bom for dependency management