The Java/Maven part of the project has a few dependencies that are supposed to be provided by the application container. We need to carefully keep these in sync with Opencast. It would be cool if Opencast offered a BOM.
This also means that we should exclude that stuff from dependabot.