Vaadin 23: maven versions of vaadin-core vs. flow-server differ

Question

Observation (at 2022-08-13 20:06):

1. In a BOM of Vaadin 23.1.6 ( https://repo1.maven.org/maven2/com/vaadin/vaadin-spring-bom/23.1.6/vaadin-spring-bom-23.1.6.pom ) there is a dependency to a version 23.1.4: <flow.version>23.1.4</flow.version>
2. When I check the Dependency Hierarchy of my pom.xml in eclipse then I see different versions combined:

Releases:

1. According to https://repo1.maven.org/maven2/com/vaadin/vaadin-core/ the latest version is 23.1.6 from 2022-08-09 12:37 (and there's also a 23.1.4 from 2022-08-02 10:43).
2. According to https://repo1.maven.org/maven2/com/vaadin/flow-server/ the latest version is 23.1.4 from 2022-08-05 07:47

So the release cycles do not seem to be synchronized.

pom.xml: The only place where the vaadin version is set in my pom.xml is here:

<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>com.vaadin</groupId>
            <artifactId>vaadin-bom</artifactId>
            <version>${com.vaadin.version}</version>
            <type>pom</type>
            <scope>import</scope>
        </dependency>

Question:

1. This mix works, but would it be better to enforce same versions?

2. If the difference in versions is intended: why does it exist?

Answer 1

As stated in the discussion, the versions are not exact to maintenance versions. The minor difference here is just an implementation detail. You should always check the release notes for the correctly matching dependencies if you for some reason need to set versions manually instead of using BOM.