Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 30, 2022

Bumps tycho.version from 2.7.4 to 3.0.0.
Updates tycho-p2-director-plugin from 2.7.4 to 3.0.0

Updates tycho-maven-plugin from 2.7.4 to 3.0.0

Changelog

Sourced from tycho-maven-plugin's changelog.

3.0.0 (under development)

Tycho now support forking of the Eclipse Java Compiler

Previously forking was not supported, now forking is possible and will be used if a custom java home is specified.

New option to transform P2 dependencies into real maven coordinates

The tycho-consumer-pom mojo has a new option to resolve p2 introduced dependencies to 'real' maven coordinates now, when enabled it queries maven-central with the SHA1 of the file to find out what are the actual maven central coordinates and place them in the generated pom consumer-pom.

<plugin>
	<groupId>org.eclipse.tycho</groupId>
	<artifactId>tycho-packaging-plugin</artifactId>
	<version>${tycho-version}</version>
	<configuration>
		<mapP2Dependencies>true</mapP2Dependencies>
	</configuration>
</plugin>

New tycho-p2-plugin:dependency-tree mojo

Sometimes it is useful to find out how dependencies of a project are actually pulled in. Tycho now supports a new tycho-p2-plugin:dependency-tree mojo that outputs a tree view of the P2 dependecies of a tycho project.

Example with Tycho integration test project:

tycho-its/projects/reactor.makeBehaviour$ mvn org.eclipse.tycho:tycho-p2-plugin:3.0.0-SNAPSHOT:dependency-tree

...

[INFO] --- tycho-p2-plugin:3.0.0-SNAPSHOT:dependency-tree (default-cli) @ feature2 --- [INFO] tycho-its-project.reactor.makeBehaviour:feature2:eclipse-feature:1.0.0-SNAPSHOT [INFO] +- feature2.feature.group (1.0.0.qualifier) --> [tycho-its-project.reactor.makeBehaviour:feature2:eclipse-feature:1.0.0-SNAPSHOT] [INFO] +- bundle2 (1.0.0.qualifier) satisfies org.eclipse.equinox.p2.iu; bundle2 0.0.0 --> [tycho-its-project.reactor.makeBehaviour:bundle2:eclipse-plugin:1.0.0-SNAPSHOT] [INFO] +- feature1.feature.group (1.0.0.qualifier) satisfies org.eclipse.equinox.p2.iu; feature1.feature.group 0.0.0 --> [tycho-its-project.reactor.makeBehaviour:feature1:eclipse-feature:1.0.0-SNAPSHOT] [INFO] +- bundle1 (1.0.0.qualifier) satisfies org.eclipse.equinox.p2.iu; bundle1 0.0.0 --> [tycho-its-project.reactor.makeBehaviour:bundle1:eclipse-plugin:1.0.0-SNAPSHOT] ...

Support for inclusion of all source bundles in an update-site

The tycho-p2-repository-plugin:2.7.0:assemble-repository now support a new property includeAllSources that, when enabled, includes any available source bundle in the resulting repository.

Support for Eclipse-Products with mixed Features and Plugins

Tycho now supports building mixed Products. In mixed Products both the listed features and listed plug-ins are installed.

... (truncated)

Commits
  • ff82c74 Tycho 3.0.0 release
  • ccc1f1c Backport fix for missing method
  • b071d3b Check for null in case the framework is already shut down
  • acebd99 Pin the bcprov version for 3.x release
  • 7493b25 Use the TargetPlatformService in the PackageFeatureMojo
  • f7b1413 Update toolchains.xml
  • c43ee58 Don't add non existing classpath entries to the analyzer
  • 466dad9 Add TargetPlatformService for unified acces to the TargetPlatform
  • 90a3a61 Add test project to demonstrate jgit buildtimestamp provider bug
  • b11b0c4 3.0.0 is no longer under development
  • Additional commits viewable in compare view

Updates tycho-surefire-plugin from 2.7.4 to 3.0.0

Updates tycho-compiler-plugin from 2.7.4 to 3.0.0

Changelog

Sourced from tycho-compiler-plugin's changelog.

3.0.0 (under development)

Tycho now support forking of the Eclipse Java Compiler

Previously forking was not supported, now forking is possible and will be used if a custom java home is specified.

New option to transform P2 dependencies into real maven coordinates

The tycho-consumer-pom mojo has a new option to resolve p2 introduced dependencies to 'real' maven coordinates now, when enabled it queries maven-central with the SHA1 of the file to find out what are the actual maven central coordinates and place them in the generated pom consumer-pom.

<plugin>
	<groupId>org.eclipse.tycho</groupId>
	<artifactId>tycho-packaging-plugin</artifactId>
	<version>${tycho-version}</version>
	<configuration>
		<mapP2Dependencies>true</mapP2Dependencies>
	</configuration>
</plugin>

New tycho-p2-plugin:dependency-tree mojo

Sometimes it is useful to find out how dependencies of a project are actually pulled in. Tycho now supports a new tycho-p2-plugin:dependency-tree mojo that outputs a tree view of the P2 dependecies of a tycho project.

Example with Tycho integration test project:

tycho-its/projects/reactor.makeBehaviour$ mvn org.eclipse.tycho:tycho-p2-plugin:3.0.0-SNAPSHOT:dependency-tree

...

[INFO] --- tycho-p2-plugin:3.0.0-SNAPSHOT:dependency-tree (default-cli) @ feature2 --- [INFO] tycho-its-project.reactor.makeBehaviour:feature2:eclipse-feature:1.0.0-SNAPSHOT [INFO] +- feature2.feature.group (1.0.0.qualifier) --> [tycho-its-project.reactor.makeBehaviour:feature2:eclipse-feature:1.0.0-SNAPSHOT] [INFO] +- bundle2 (1.0.0.qualifier) satisfies org.eclipse.equinox.p2.iu; bundle2 0.0.0 --> [tycho-its-project.reactor.makeBehaviour:bundle2:eclipse-plugin:1.0.0-SNAPSHOT] [INFO] +- feature1.feature.group (1.0.0.qualifier) satisfies org.eclipse.equinox.p2.iu; feature1.feature.group 0.0.0 --> [tycho-its-project.reactor.makeBehaviour:feature1:eclipse-feature:1.0.0-SNAPSHOT] [INFO] +- bundle1 (1.0.0.qualifier) satisfies org.eclipse.equinox.p2.iu; bundle1 0.0.0 --> [tycho-its-project.reactor.makeBehaviour:bundle1:eclipse-plugin:1.0.0-SNAPSHOT] ...

Support for inclusion of all source bundles in an update-site

The tycho-p2-repository-plugin:2.7.0:assemble-repository now support a new property includeAllSources that, when enabled, includes any available source bundle in the resulting repository.

Support for Eclipse-Products with mixed Features and Plugins

Tycho now supports building mixed Products. In mixed Products both the listed features and listed plug-ins are installed.

... (truncated)

Commits
  • ff82c74 Tycho 3.0.0 release
  • ccc1f1c Backport fix for missing method
  • b071d3b Check for null in case the framework is already shut down
  • acebd99 Pin the bcprov version for 3.x release
  • 7493b25 Use the TargetPlatformService in the PackageFeatureMojo
  • f7b1413 Update toolchains.xml
  • c43ee58 Don't add non existing classpath entries to the analyzer
  • 466dad9 Add TargetPlatformService for unified acces to the TargetPlatform
  • 90a3a61 Add test project to demonstrate jgit buildtimestamp provider bug
  • b11b0c4 3.0.0 is no longer under development
  • Additional commits viewable in compare view

Updates tycho-packaging-plugin from 2.7.4 to 3.0.0

Changelog

Sourced from tycho-packaging-plugin's changelog.

3.0.0 (under development)

Tycho now support forking of the Eclipse Java Compiler

Previously forking was not supported, now forking is possible and will be used if a custom java home is specified.

New option to transform P2 dependencies into real maven coordinates

The tycho-consumer-pom mojo has a new option to resolve p2 introduced dependencies to 'real' maven coordinates now, when enabled it queries maven-central with the SHA1 of the file to find out what are the actual maven central coordinates and place them in the generated pom consumer-pom.

<plugin>
	<groupId>org.eclipse.tycho</groupId>
	<artifactId>tycho-packaging-plugin</artifactId>
	<version>${tycho-version}</version>
	<configuration>
		<mapP2Dependencies>true</mapP2Dependencies>
	</configuration>
</plugin>

New tycho-p2-plugin:dependency-tree mojo

Sometimes it is useful to find out how dependencies of a project are actually pulled in. Tycho now supports a new tycho-p2-plugin:dependency-tree mojo that outputs a tree view of the P2 dependecies of a tycho project.

Example with Tycho integration test project:

tycho-its/projects/reactor.makeBehaviour$ mvn org.eclipse.tycho:tycho-p2-plugin:3.0.0-SNAPSHOT:dependency-tree

...

[INFO] --- tycho-p2-plugin:3.0.0-SNAPSHOT:dependency-tree (default-cli) @ feature2 --- [INFO] tycho-its-project.reactor.makeBehaviour:feature2:eclipse-feature:1.0.0-SNAPSHOT [INFO] +- feature2.feature.group (1.0.0.qualifier) --> [tycho-its-project.reactor.makeBehaviour:feature2:eclipse-feature:1.0.0-SNAPSHOT] [INFO] +- bundle2 (1.0.0.qualifier) satisfies org.eclipse.equinox.p2.iu; bundle2 0.0.0 --> [tycho-its-project.reactor.makeBehaviour:bundle2:eclipse-plugin:1.0.0-SNAPSHOT] [INFO] +- feature1.feature.group (1.0.0.qualifier) satisfies org.eclipse.equinox.p2.iu; feature1.feature.group 0.0.0 --> [tycho-its-project.reactor.makeBehaviour:feature1:eclipse-feature:1.0.0-SNAPSHOT] [INFO] +- bundle1 (1.0.0.qualifier) satisfies org.eclipse.equinox.p2.iu; bundle1 0.0.0 --> [tycho-its-project.reactor.makeBehaviour:bundle1:eclipse-plugin:1.0.0-SNAPSHOT] ...

Support for inclusion of all source bundles in an update-site

The tycho-p2-repository-plugin:2.7.0:assemble-repository now support a new property includeAllSources that, when enabled, includes any available source bundle in the resulting repository.

Support for Eclipse-Products with mixed Features and Plugins

Tycho now supports building mixed Products. In mixed Products both the listed features and listed plug-ins are installed.

... (truncated)

Commits
  • ff82c74 Tycho 3.0.0 release
  • ccc1f1c Backport fix for missing method
  • b071d3b Check for null in case the framework is already shut down
  • acebd99 Pin the bcprov version for 3.x release
  • 7493b25 Use the TargetPlatformService in the PackageFeatureMojo
  • f7b1413 Update toolchains.xml
  • c43ee58 Don't add non existing classpath entries to the analyzer
  • 466dad9 Add TargetPlatformService for unified acces to the TargetPlatform
  • 90a3a61 Add test project to demonstrate jgit buildtimestamp provider bug
  • b11b0c4 3.0.0 is no longer under development
  • Additional commits viewable in compare view

Updates target-platform-configuration from 2.7.4 to 3.0.0

Changelog

Sourced from target-platform-configuration's changelog.

3.0.0 (under development)

Tycho now support forking of the Eclipse Java Compiler

Previously forking was not supported, now forking is possible and will be used if a custom java home is specified.

New option to transform P2 dependencies into real maven coordinates

The tycho-consumer-pom mojo has a new option to resolve p2 introduced dependencies to 'real' maven coordinates now, when enabled it queries maven-central with the SHA1 of the file to find out what are the actual maven central coordinates and place them in the generated pom consumer-pom.

<plugin>
	<groupId>org.eclipse.tycho</groupId>
	<artifactId>tycho-packaging-plugin</artifactId>
	<version>${tycho-version}</version>
	<configuration>
		<mapP2Dependencies>true</mapP2Dependencies>
	</configuration>
</plugin>

New tycho-p2-plugin:dependency-tree mojo

Sometimes it is useful to find out how dependencies of a project are actually pulled in. Tycho now supports a new tycho-p2-plugin:dependency-tree mojo that outputs a tree view of the P2 dependecies of a tycho project.

Example with Tycho integration test project:

tycho-its/projects/reactor.makeBehaviour$ mvn org.eclipse.tycho:tycho-p2-plugin:3.0.0-SNAPSHOT:dependency-tree

...

[INFO] --- tycho-p2-plugin:3.0.0-SNAPSHOT:dependency-tree (default-cli) @ feature2 --- [INFO] tycho-its-project.reactor.makeBehaviour:feature2:eclipse-feature:1.0.0-SNAPSHOT [INFO] +- feature2.feature.group (1.0.0.qualifier) --> [tycho-its-project.reactor.makeBehaviour:feature2:eclipse-feature:1.0.0-SNAPSHOT] [INFO] +- bundle2 (1.0.0.qualifier) satisfies org.eclipse.equinox.p2.iu; bundle2 0.0.0 --> [tycho-its-project.reactor.makeBehaviour:bundle2:eclipse-plugin:1.0.0-SNAPSHOT] [INFO] +- feature1.feature.group (1.0.0.qualifier) satisfies org.eclipse.equinox.p2.iu; feature1.feature.group 0.0.0 --> [tycho-its-project.reactor.makeBehaviour:feature1:eclipse-feature:1.0.0-SNAPSHOT] [INFO] +- bundle1 (1.0.0.qualifier) satisfies org.eclipse.equinox.p2.iu; bundle1 0.0.0 --> [tycho-its-project.reactor.makeBehaviour:bundle1:eclipse-plugin:1.0.0-SNAPSHOT] ...

Support for inclusion of all source bundles in an update-site

The tycho-p2-repository-plugin:2.7.0:assemble-repository now support a new property includeAllSources that, when enabled, includes any available source bundle in the resulting repository.

Support for Eclipse-Products with mixed Features and Plugins

Tycho now supports building mixed Products. In mixed Products both the listed features and listed plug-ins are installed.

... (truncated)

Commits
  • ff82c74 Tycho 3.0.0 release
  • ccc1f1c Backport fix for missing method
  • b071d3b Check for null in case the framework is already shut down
  • acebd99 Pin the bcprov version for 3.x release
  • 7493b25 Use the TargetPlatformService in the PackageFeatureMojo
  • f7b1413 Update toolchains.xml
  • c43ee58 Don't add non existing classpath entries to the analyzer
  • 466dad9 Add TargetPlatformService for unified acces to the TargetPlatform
  • 90a3a61 Add test project to demonstrate jgit buildtimestamp provider bug
  • b11b0c4 3.0.0 is no longer under development
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `tycho.version` from 2.7.4 to 3.0.0.

Updates `tycho-p2-director-plugin` from 2.7.4 to 3.0.0

Updates `tycho-maven-plugin` from 2.7.4 to 3.0.0
- [Release notes](https://github.com/eclipse/tycho/releases)
- [Changelog](https://github.com/eclipse-tycho/tycho/blob/master/RELEASE_NOTES.md)
- [Commits](eclipse-tycho/tycho@tycho-2.7.4...tycho-3.0.0)

Updates `tycho-surefire-plugin` from 2.7.4 to 3.0.0

Updates `tycho-compiler-plugin` from 2.7.4 to 3.0.0
- [Release notes](https://github.com/eclipse/tycho/releases)
- [Changelog](https://github.com/eclipse-tycho/tycho/blob/master/RELEASE_NOTES.md)
- [Commits](eclipse-tycho/tycho@tycho-2.7.4...tycho-3.0.0)

Updates `tycho-packaging-plugin` from 2.7.4 to 3.0.0
- [Release notes](https://github.com/eclipse/tycho/releases)
- [Changelog](https://github.com/eclipse-tycho/tycho/blob/master/RELEASE_NOTES.md)
- [Commits](eclipse-tycho/tycho@tycho-2.7.4...tycho-3.0.0)

Updates `target-platform-configuration` from 2.7.4 to 3.0.0
- [Release notes](https://github.com/eclipse/tycho/releases)
- [Changelog](https://github.com/eclipse-tycho/tycho/blob/master/RELEASE_NOTES.md)
- [Commits](eclipse-tycho/tycho@tycho-2.7.4...tycho-3.0.0)

---
updated-dependencies:
- dependency-name: org.eclipse.tycho:tycho-p2-director-plugin
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.eclipse.tycho:tycho-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.eclipse.tycho:tycho-surefire-plugin
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.eclipse.tycho:tycho-compiler-plugin
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.eclipse.tycho:tycho-packaging-plugin
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.eclipse.tycho:target-platform-configuration
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies java Pull requests that update Java code labels Sep 30, 2022
@github-actions
Copy link
Contributor

Logo
Checkmarx AST – Scan Summary & Details50912329-664a-4841-8f26-bdf10f19aeeb

New Issues

Severity Issue File / Package Scan Engine
HIGH CVE-2022-42003 Maven-com.fasterxml.jackson.core:jackson-databind-2.13.2.2 CxSCA
HIGH CVE-2022-42004 Maven-com.fasterxml.jackson.core:jackson-databind-2.13.2.2 CxSCA

@cx-pedro-lopes cx-pedro-lopes merged commit dc64fa3 into main Oct 25, 2022
@dependabot dependabot bot deleted the dependabot/maven/tycho.version-3.0.0 branch October 25, 2022 13:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant