> So we probably ought to just bump them. If we want to ship commons-collections 3.2.2, I think we should declare/bump it in parent-v3 (since java-support is [optionally] dependent on Velocity which has the transitive dependency on commons-collections). So we’re bumping the stack at that point.