This is a prerequisite for #39945 as it will help us to keep our dependency management in sync with the contents of the bom.