spring-boot dependency override : dependency upgrade best practices?

Question

is it safe to override spring-boot dependencies in applications?

spring-boot 2.3.0.RELEASE supports apache httpclient(4.5.12).

will it be safe to override in m