Since 1.3.2, prometheus-metrics-bom has managed the version of Guava as a result of inheriting it from its parent. I suspect that this dependency management is accidental as it was added as part of 27ffb91 which appears to be an unrelated change.

Could the dependency management be reworked so that prometheus-metrics-bom can be used without influencing the managed version of Guava?