diff --git a/build.gradle b/build.gradle
index 83bfda6c17c4..5be0a0fd1d78 100644
--- a/build.gradle
+++ b/build.gradle
@@ -26,8 +26,12 @@ allprojects {
 
 	repositories {
 		mavenCentral()
-		if (version.contains('-')) {
-			maven { url "https://repo.spring.io/milestone" }
+		maven {
+			url "https://repo.spring.io/milestone"
+			content {
+				// Thymeleaf uses 6.0.0-RC2 of Security's bom in its dependency management
+				includeModule("org.springframework.security", "spring-security-bom")
+			}
 		}
 		if (version.endsWith('-SNAPSHOT')) {
 			maven { url "https://repo.spring.io/snapshot" }