There are a number of major upgrades, such as those for the switch to Java EE 9's jakarta.* namespace that we don't want to consume at the moment. We should prohibit them for now at least so that they're ignored when performing dependency upgrades.