We don't configure the relevant repositories for buildSrc so using a commercial-only dependency will fail.

Comment From: snicoll

Problem with this approach is that repo.spring.io is going to be unnecessarily configured when the build type is OSS

Comment From: snicoll

We've discussed this and we're wondering if we could reduce the dependency to other modules. For instance, we could use the JDK client directly for Bomr. If our build no longer depends on Spring-related artifacts, this issue would fix itself.