UpdateMojo seems to make no mention of BOMs imported in dependencyManagement.
mvn versions:display-dependency-updates does not mention the BOM either, so this might be an issue upstream in versions-maven-plugin.