We have discussed with pferraro@redhat.com on call W24/2016 that we should keep all dependency versions on latest releases, this way we can detect regressions in tomcat code compatibility quickly.