Dependency of lower version is selected by default

[Vampire (Björn Kautler)]

Yeah, looks like enforced by the spring dependency management plugin as I expected. So you probably have that version in a BOM you import. Replace the plugin by the built-in BOM support.