> And as soon as I pulled the trigger on the IdP version bump, I realized that it may be necessary to update the dependent project versions as well. OSJ is still 3.2.1-SNAPSHOT, for example. We're keeping all these in sync for our sanity, right? Nope. Just bump the IdP, unless a code change in OSAML requires a bump there too, they're not coupled.