I've now revised the initial PR (https://github.com/apache/solr/pull/2646) and created a clean PR with the changes and version conflict resolution. See for that https://github.com/apache/solr/pull/2706. The new PR does not include dependency updates like the initial PR.
Right now, the constraints hold information about the dependencies that cause the version conflict, so that in the future developers may check the constraints of the updated dependency for matching constraints and clean it up if the constraint is no longer necessary. I tried to find an easier or more automated way to properly maintain the constraints that have been added, but I couldn't find a better one. So if you have any ideas how this could be improved, please let me know. >
