Tycho 5.0.3

Tycho 5.0.3 has been released and is available from Maven Central repository.

🆕 https://github.com/eclipse-tycho/tycho/blob/tycho-5.0.3/RELEASE_NOTES.md
🏷️ https://github.com/eclipse-tycho/tycho/tree/tycho-5.0.3
👔 https://projects.eclipse.org/projects/technology.tycho/releases/5.0.3
🙏 contributors who contributed patches for this release:

• Andrew Tram
• Christoph Läubrich
• Copilot
• copilot-swe-agent[bot]
• dependabot[bot]
• DieterMai
• Ed Merks
• Hannes Wellmann
• Sebastian Ratz
• Vasili Gulevich
• Александър Куртаков

💰 we would like to also thank the Eclipse IDE Workingroup for funding the release work and thanks to everyone who helped us with testing the snapshot version.

Regards,

The Tycho Team

What's Changed

• Bump org.codehaus.plexus:plexus-compiler-javac from 2.16.1 to 2.16.2 by @dependabot[bot] in #5794
• Bump plexusCompilerVersion from 2.16.1 to 2.16.2 by @dependabot[bot] in #5793
• [tycho-5.0.x] Use plexusCompilerVersion variable by @eclipse-tycho-bot in #5796
• [tycho-5.0.x] Consider linked preference files in tycho-ds-plugin by @HannesWell in #5797
• [tycho-5.0.x] Add skipAssembling parameter to assemble-repository goal by @eclipse-tycho-bot in #5800
• Bump commons-codec:commons-codec from 1.20.0 to 1.21.0 by @dependabot[bot] in #5803
• Bump jetty.version from 12.1.5 to 12.1.6 by @dependabot[bot] in #5806
• Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.1 to 3.15.0 by @dependabot[bot] in #5808
• [tycho-5.0.x] Cache source bundle generation in local Maven repository (#5813) by @eclipse-tycho-bot in #5815
• Bump org.cyclonedx:cyclonedx-core-java from 12.0.1 to 12.1.0 by @dependabot[bot] in #5819
• Bump sisu-version from 0.9.0.M4 to 1.0.0 by @dependabot[bot] in #5824
• Bump org.apache.maven.plugins:maven-dependency-plugin from 3.9.0 to 3.10.0 by @dependabot[bot] in #5826
• Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 by @dependabot[bot] in #5825
• Bump eu.maveniverse.maven.njord:extension3 from 0.9.3 to 0.9.4 by @dependabot[bot] in #5836
• Bump junit5.version from 5.14.2 to 6.0.3 by @dependabot[bot] in #5839
• [tycho-5.0.x] Restructure P2 update site documentation with overview page and specialized sub-sections (#5842) by @eclipse-tycho-bot in #5843
• [tycho-5.0.x] Fix wrapped source bundle caching to key on BSN and version instead of artifact name (#5844) by @eclipse-tycho-bot in #5846
• [tycho-5.0.x] Modularize the DependencyCheckMojo for future improvements by @eclipse-tycho-bot in #5848
• Bump org.eclipse.emf:org.eclipse.emf.ecore from 2.41.0 to 2.42.0 by @dependabot[bot] in #5858
• Bump org.mockito:mockito-core from 5.21.0 to 5.22.0 by @dependabot[bot] in #5862
• [tycho-5.0.x] Add Require-Bundle dependency checking to DependencyCheckMojo by @eclipse-tycho-bot in #5850
• [bp] Add transitive dependencies with forbidden access to classpath by @laeubi in #5864
• [tycho-5.0.x] Fix version range generation and add check-dependencies integration by @eclipse-tycho-bot in #5867
• [tycho-5.0.x] Add support for split-packages in RequireBundleChecker by @eclipse-tycho-bot in #5870
• Bump org.apache.maven.plugins:maven-resources-plugin from 3.4.0 to 3.5.0 by @dependabot[bot] in #5872
• Bump jetty.version from 12.1.6 to 12.1.7 by @dependabot[bot] in #5871
• [tycho-5.0.x] Add re-export chain resolution to RequireBundleChecker | Optimize RequireBundleChecker with caching and narrow test ranges by @eclipse-tycho-bot in #5876
• Bump surefire-version from 3.5.3 to 3.5.5 by @dependabot[bot] in #5855
• [tycho-5.0.x] Skip manifest update when version range is semantically unchanged by @eclipse-tycho-bot in #5878
• [tycho-5.0.x] Update maven-resolver-util to 1.9.27 by @eclipse-tycho-bot in #5880
• [tycho-5.0.x] Also provide requirements of jars.extra.classpath additionally by @eclipse-tycho-bot in #5884
• Bump org.eclipse.platform:org.eclipse.equinox.app from 1.7.500 to 1.7.600 by @dependabot[bot] in #5905
• Bump org.eclipse.platform:org.eclipse.ui.workbench from 3.137.0 to 3.138.0 by @dependabot[bot] in #5903
• Bump org.eclipse.pde:org.eclipse.pde.ui from 3.16.300 to 3.16.400 by @dependabot[bot] in #5901
• Bump the p2 group with 2 updates by @dependabot[bot] in #5898
• Bump the jdt group with 5 updates by @dependabot[bot] in #5897
• Bump org.eclipse.pde:org.eclipse.pde.core from 3.21.100 to 3.21.200 by @dependabot[bot] in #5911
• Bump org.eclipse.platform:org.eclipse.jface from 3.38.100 to 3.39.0 by @dependabot[bot] in #5913
• Bump org.eclipse.platform:org.eclipse.osgi from 3.24.0 to 3.24.100 by @dependabot[bot] in #5902
• [bp] Add classpathDependencies option for target platform resolution by @laeubi in #5918
• Bump org.mockito:mockito-core from 5.22.0 to 5.23.0 by @dependabot[bot] in #5921
• Bump org.eclipse.platform:org.eclipse.help.base from 4.5.300 to 4.6.0 by @dependabot[bot] in #5914
• Bump org.eclipse.platform:org.eclipse.core.runtime from 3.34.100 to 3.34.200 by @dependabot[bot] in #5912
• Bump org.eclipse.platform:org.eclipse.e4.ui.workbench3 from 0.17.600 to 0.18.0 by @dependabot[bot] in #5900
• Bump org.eclipse.platform:org.eclipse.ui.ide from 3.22.800 to 3.23.0 by @dependabot[bot] in #5904
• Bump org.eclipse.jgit:org.eclipse.jgit from 7.5.0.202512021534-r to 7.6.0.202603022253-r by @dependabot[bot] in #5927
• Bump org.eclipse.pde:org.eclipse.pde.api.tools from 1.3.1000 to 1.3.1100 by @dependabot[bot] in #5899
• Bump commons-net:commons-net from 3.12.0 to 3.13.0 by @dependabot[bot] in #5931
• Bump maven-version from 3.9.12 to 3.9.14 by @dependabot[bot] in #5925
• Refactor o.e.t.versions.engine.Versions to o.e.t.helper.VersionTool by @merks in #5933
• Bump org.apache.maven.doxia:doxia-module-markdown from 2.0.0 to 2.1.0 by @dependabot[bot] in #5935
• Bump bnd.version from 7.2.1 to 7.2.3 by @dependabot[bot] in #5938
• Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 4.0.3 by @dependabot[bot] in #5942
• Bump jetty.version from 12.1.7 to 12.1.8 by @dependabot[bot] in #5950
• Bump eu.maveniverse.maven.njord:extension3 from 0.9.4 to 0.9.5 by @dependabot[bot] in #5957
• Bump org.apache.felix:org.apache.felix.scr from 2.2.14 to 2.2.18 by @dependabot[bot] in #5965
• Bump maven-version from 3.9.14 to 3.9.15 by @dependabot[bot] in #5969
• Bump bouncycastleVersion from 1.83 to 1.84 by @dependabot[bot] in #5967
• [tycho-5.0.x] Support fragment host bundles in dependency check by @eclipse-tycho-bot in #5972
• Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 by @dependabot[bot] in #5979
• Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.0 by @dependabot[bot] in #5978
• Bump commons-io:commons-io from 2.21.0 to 2.22.0 by @dependabot[bot] in #5974
• Bump jetty.version from 12.1.8 to 12.1.9 by @dependabot[bot] in #5990
• Bump org.cyclonedx:cyclonedx-core-java from 12.1.0 to 12.2.0 by @dependabot[bot] in #5991
• Bump org.apache.maven.plugins:maven-invoker-plugin from 3.10.0 to 3.10.1 by @dependabot[bot] in #5987
• Bump org.apache.maven.plugins:maven-source-plugin from 3.3.1 to 3.4.0 by @dependabot[bot] in #5994
• Bump eu.maveniverse.maven.njord:extension3 from 0.9.5 to 0.9.6 by @dependabot[bot] in #6009
• [tycho-5.0.x] Mark tycho-gpg-plugin as thread-safe and fix KeyStore concurrent access by @eclipse-tycho-bot in #5985
• [tycho-5.0.x] Update resolver transport for tests by @eclipse-tycho-bot in #6010
• Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18 by @dependabot[bot] in #5999
• [tycho-5.0.x] Retry HTTP 502/503/504 errors in Java11HttpTransportFactory by @eclipse-tycho-bot in #6014
• [tycho-5.0.x] Add integration test for bump-versions not updating package versions | Fix Export-Package versions not updated during baseline version bump by @eclipse-tycho-bot in #6015
• [tycho-5.0.x] materialize-products: deleteP2Cache on macOS Foo.app/Contents/Eclipse by @eclipse-tycho-bot in #6017
• Bump asm.version from 9.9.1 to 9.10 by @dependabot[bot] in #6005
• Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 by @dependabot[bot] in #6031
• Bump junit.version from 6.0.3 to 6.1.0 by @dependabot[bot] in #6037
• Bump io.github.java-diff-utils:java-diff-utils from 4.16 to 4.17 by @dependabot[bot] in #6026
• [tycho-5.0.x] Skip source bundles during classpath resolution by @eclipse-tycho-bot in #6040
• Bump ch.digitalfondue.jfiveparse:jfiveparse from 1.1.4 to 2.0.0 by @dependabot[bot] in #6008
• [tycho-5.0.x] Merge branch 'main' into cnfe_osgibooter by @eclipse-tycho-bot in #6018
• [tycho-5.0.x] Add categoryName option to MirrorMojo for top-level category grouping by @eclipse-tycho-bot in #6043
• Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0 by @dependabot[bot] in #6047
• Bump maven-version from 3.9.15 to 3.9.16 by @dependabot[bot] in #6027
• [bp] Add tycho-p2-extras:p2-manager mojo for managing P2 update sites by @laeubi in #6050
• [tycho-5.0.x] Correct central search property name in SBOM.md by @eclipse-tycho-bot in #6055

Full Changelog: tycho-5.0.2...tycho-5.0.3