if we implement JENKINS-47498 some of this might be easier to handle
Currently the BOM uses POM properties to define versions only for plugins with tests JARs, but we can see that when this is done, the dependency tree of a plugin importing the BOM can be adjusted without touching pom.xml (just like we could already do with jenkins.version):