Right now we duplicate the versions of each components that we expose in both the bom and the profile.
That's not how it's supposed to work. If I read the maven manual correctly they are saying that the user (== ejb3_1) should import the bom (== as6). Which of course can't happen.