Add Bomr metadata to prohibit unwanted upgrades

Closes gh-16064

.bomr/bomr.yaml

@@ -7,6 +7,16 @@ bomr:
       issue-labels:
         - 'type: dependency-upgrade'
     policy: same-minor-version
+    prohibited:
+      - project: commons-collections
+        versions:
+          - '[20030101,)' # Old versions that use yyyymmdd format
+      - project: dom4j
+        versions:
+          - '[20040101,)' # Old versions that use yyyymmdd format
+      - project: ehcache
+        versions:
+          - '[2.10.6,2.11)' # 2.10.6 raised the Java baseline to Java 8
   verify:
     repositories:
       # Spring Data GemFire's GemFire dependencies