I struggle to understand why RHBQ 3.2.9.CR1 contains 2 Quarks platform bills of materials (com.redhat.quarkus.platform:quarkus-bom), it means that customer is free to use these BOMs to manage his dependencies. We do not advise customers to use only quarkus-bom:3.2.9.Final-redhat-00001 (please make it clear where we document this if you disagree).

However if customer use 3.2.6.Final-redhat-00002 BOM, there is 555 missing dependencies. Even the fact there are 2 BOMs feel wrong, but if it is necessary for some of our platform participants, it's understandable. I'd like to understand how to present this situation to customer and how is customer expected to deal with this situation. Can customer use 3.2.6.Final-redhat-00002? If yes, he needs his dependencies and we need to instruct him which exact dependencies he can use and which he can not. If no, it shouldn't be there.

This ticket is concerned with what is inside maven repository zip. Whether customer can download artifacts from remote repositories is another story, because it beats whole purpose of the zip.