It can start as a non-blocking CI check, but it should block any release from going out as any released version of the google-cloud-bom should converge for these dependencies.

If the CI check fails, it should enumerate the clients that need to update their shared-dependencies version.