I captured a rudimentary process[1] based upon the PR reviews I have done in this space to help contributors and committers. Feel free to update and/or point people to that cwiki page.
1: https://cwiki.apache.org/confluence/display/BEAM/Dependency+Upgrades