Every version the runtime compiles against, in one place. A consumer imports this BOM and declares Nucleo artifacts and their libraries without versions. Nothing here is a transitive guess: each entry is imported directly by runtime code.