Ghost dependency jakarta.mail:jakarta.mail

[tassio-braga]

Type: Bug

Component:
spring-clould-aws-dependencie

Describe the bug
The spring-cloud-aws-dependencies BOM contains an invalid dependency coordinate for Jakarta Mail. It incorrectly attempts to manage jakarta.mail:jakarta.mail:2.1.3.

In the Jakarta Mail 2.1.x release line, the project split the API from the implementation. The correct coordinate for the API is jakarta.mail:jakarta.mail-api:2.1.3. The coordinate jakarta.mail:jakarta.mail was used in the 1.x and 2.0.x lines (published by com.sun.mail), but does not exist in Maven Central for version 2.1.3.

This causes build failures (ArtifactNotFoundException) for any user attempting to resolve dependencies managed by the BOM if they explicitly or transitively trigger a lookup for the jakarta.mail artifact ID at version 2.1.3.

Sample
To reproduce, create a simple Maven project using the Spring Cloud AWS BOM and attempt to resolve the dependencies:

<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>io.awspring.cloud</groupId>
            <artifactId>spring-cloud-aws-dependencies</artifactId>
            <version>3.2.0</version> <type>pom</type>
            <scope>import</scope>
        </dependency>
    </dependencies>
</dependencyManagement>

<dependencies>
    <dependency>
        <groupId>jakarta.mail</groupId>
        <artifactId>jakarta.mail</artifactId>
    </dependency>
</dependencies>