This message was deleted.

According to the docs it should work like that. Can you show an MCVE where it does not work?

sorry I forgot to write that the library is inside bom is there a way to override that?

Then that has absolutely nothing to do with the version catalog. The version catalog is just a catalog of coordinates and versions to pick from. It does not even have any meaning of bom vs. normal dependency and if you do not use a version catalog entry somewhere, it has not effect at all. For what you want to do, you would set a version constraint, either a normal one to upgrade the version or a strict one to downgrade the version.