Spring Cloud Openfeign openfeign overrides spring security oauth client that is managed by spring-boot

Describe the bug If create a spring-boot project with spring-security-oauth2-client and bom
then spring-security-oauth2-client has outdated version that does not match version from spring-boot-dependencies.
It appears that spring-cloud-openfeign manages spring-security-oauth2-client as well and overrides it that is not desirable.

Sample openfeign-overrides-spring-security-oauth-client.zip

run mvn org.apache.maven.plugins:maven-help-plugin:3.2.0:effective-pom -Dverbose=true -Doutput="effective-pom2.xml" on the sample project

with spring-cloud-dependencies import that imports spring-cloud-openfeign-dependencies

      <dependency>
        <groupId>org.springframework.security</groupId>  <!-- org.springframework.cloud:spring-cloud-openfeign-dependencies:3.1.6, line 101 -->
        <artifactId>spring-security-oauth2-client</artifactId>  <!-- org.springframework.cloud:spring-cloud-openfeign-dependencies:3.1.6, line 102 -->
        <version>5.7.3</version>  <!-- org.springframework.cloud:spring-cloud-openfeign-dependencies:3.1.6, line 103 -->
      </dependency>

remove spring-cloud-dependencies import and run mvn org.apache.maven.plugins:maven-help-plugin:3.2.0:effective-pom -Dverbose=true -Doutput="effective-pom3.xml" on the sample project

      <dependency>
        <groupId>org.springframework.security</groupId>  <!-- org.springframework.security:spring-security-bom:5.7.7, line 92 -->
        <artifactId>spring-security-oauth2-client</artifactId>  <!-- org.springframework.security:spring-security-bom:5.7.7, line 93 -->
        <version>5.7.7</version>  <!-- org.springframework.security:spring-security-bom:5.7.7, line 94 -->
      </dependency>

Comment From: OlgaMaciaszek

Hello @robotmrv, we've recently fixed an issue in the area. The sample zip turns out empty for me. Which versions of Spring Cloud OpenFeign/ Spring Cloud Dependencies are you using?

Comment From: robotmrv

@OlgaMaciaszek
I've re-uploaded archive sample was created using https://start.spring.io/
It uses spring-cloud-dependencies:2021.0.6 and spring-boot:2.7.10

Comment From: robotmrv

now I see that it is a duplicate of https://github.com/spring-cloud/spring-cloud-openfeign/issues/786
That is not released