The documentation on managed dependencies specifies that errorprone is managed as:

com.google.errorprone error_prone_annotations 2.18.0

But there is no such specified value in spring-boot-dependencies bom

Should it be managed or is the documentation wrong? Since the documentation seems to be generated, are there more bom:s used than the spring-boot-dependencies bom?

Comment From: wilkinsona

spring-boot-dependencies imports several other boms so you should not expect to see every dependency in the docs listed in the source for spring-boot-dependencies. That said, error_prone_annotations should probably not be managed. https://github.com/spring-projects/spring-boot/issues/42522 is covering tidying up some unwanted dependency management and this appears to be another instance of that.

Comment From: wilkinsona

On closer investigation, I think it's the documentation that's incorrect. com.google.errorprone:error_prone_annotations doesn't appear in the effective pom of spring-boot-dependencies so it should not be listed in the documentation. This may be similar to https://github.com/spring-projects/spring-boot/issues/43584.

Comment From: wilkinsona

com.google.j2objc:j2objc-annotations:2.8 is also listed in the managed coordinates but is not actually managed.