Dependency Updates

[eclipse-releng-bot]

The content of the target eclipse-sdk-prereqs.target was updated

Please review the changes and merge if appropriate, or cherry pick individual updates.

The following maven artifacts have been updated:

• biz.aQute.bnd:aQute.libg:jar:7.1.0 has been updated to version 7.2.0
  • additionally requires java.package; aQute.lib.getopt [3.1.0,4.0.0) compared to the previous version
  • additionally requires java.package; aQute.lib.markdown [3.3.0,4.0.0) compared to the previous version
  • additionally requires java.package; aQute.lib.utf8properties [4.2.0,5.0.0) compared to the previous version
  • additionally requires java.package; org.osgi.util.promise [1.3.0,2.0.0) compared to the previous version
  • additionally requires java.package; org.slf4j [2.0.0,3.0.0) compared to the previous version
• biz.aQute.bnd:biz.aQute.bnd.annotation:jar:7.1.0 has been updated to version 7.2.0
• biz.aQute.bnd:biz.aQute.bnd.embedded-repo:jar:7.1.0 has been updated to version 7.2.0
  • additionally requires osgi.bundle; biz.aQute.bndlib [7.2.0,7.3.0) compared to the previous version
• biz.aQute.bnd:biz.aQute.bnd.util:jar:7.1.0 has been updated to version 7.2.0
• biz.aQute.bnd:biz.aQute.bndlib:jar:7.1.0 has been updated to version 7.2.0
  • additionally requires java.package; org.osgi.util.promise [1.3.0,2.0.0) compared to the previous version
• biz.aQute.bnd:biz.aQute.repository:jar:7.1.0 has been updated to version 7.2.0
  • additionally requires java.package; aQute.bnd.build [4.7.0,5.0.0) compared to the previous version
  • additionally requires java.package; aQute.bnd.maven [3.6.0,4.0.0) compared to the previous version
  • additionally requires java.package; aQute.bnd.osgi [7.5.0,8.0.0) compared to the previous version
  • additionally requires java.package; aQute.bnd.osgi.repository [3.3.0,4.0.0) compared to the previous version
  • additionally requires java.package; org.osgi.util.promise [1.3.0,2.0.0) compared to the previous version
• biz.aQute.bnd:biz.aQute.resolve:jar:7.1.0 has been updated to version 7.2.0
  • additionally requires java.package; aQute.bnd.build [4.7.0,5.0.0) compared to the previous version
  • additionally requires java.package; aQute.bnd.build.model [4.5.0,5.0.0) compared to the previous version
  • additionally requires java.package; aQute.bnd.help [2.1.0,3.0.0) compared to the previous version
  • additionally requires java.package; aQute.bnd.osgi [7.5.0,8.0.0) compared to the previous version
  • additionally requires java.package; aQute.bnd.osgi.repository [3.3.0,4.0.0) compared to the previous version
• biz.aQute.bnd:biz.aQute.tester:jar:7.1.0 has been updated to version 7.2.0
• org.bndtools:bndtools.api:jar:7.1.0 has been updated to version 7.2.0
  • additionally requires java.package; aQute.bnd.build [4.7.0,5.0.0) compared to the previous version
  • additionally requires java.package; aQute.bnd.build.model [4.5.0,5.0.0) compared to the previous version
  • additionally requires java.package; aQute.bnd.osgi [7.5.0,8.0.0) compared to the previous version
• org.bndtools:bndtools.jareditor:jar:7.1.0 has been updated to version 7.2.0
  • additionally requires java.package; aQute.bnd.osgi [7.5.0,8.0.0) compared to the previous version
  • additionally requires java.package; aQute.bnd.print [2.3.0,3.0.0) compared to the previous version
• org.bndtools:org.bndtools.headless.build.manager:jar:7.1.0 has been updated to version 7.2.0
• org.bndtools:org.bndtools.headless.build.plugin.gradle:jar:7.1.0 has been updated to version 7.2.0
  • additionally requires java.package; aQute.bnd.build [4.7.0,5.0.0) compared to the previous version
  • additionally requires java.package; aQute.bnd.osgi [7.5.0,8.0.0) compared to the previous version
• org.bndtools:org.bndtools.templates.template:jar:7.1.0 has been updated to version 7.2.0
• org.bndtools:org.bndtools.versioncontrol.ignores.manager:jar:7.1.0 has been updated to version 7.2.0
• org.bndtools:org.bndtools.versioncontrol.ignores.plugin.git:jar:7.1.0 has been updated to version 7.2.0

[merks]

I think the latest release of the BND tool set is kind of messed up.

There is this failure:

17:18:26 [ERROR] Cannot resolve dependencies of project org.eclipse.pde:org.eclipse.pde.bnd.ui:eclipse-plugin:1.2.400-SNAPSHOT
17:18:26 [ERROR] with context {osgi.os=linux, osgi.ws=gtk, org.eclipse.update.install.features=true, org.eclipse.jdt.buildtime=true, osgi.arch=x86_64, org.eclipse.update.install.sources=true}
17:18:26 [ERROR] Software being installed: org.eclipse.pde.bnd.ui 1.2.400.qualifier
17:18:26 [ERROR] Missing requirement: org.bndtools.templating 7.2.0.202512261929 requires 'java.package; com.google.common.util.concurrent.internal 0.0.0' but it could not be found
17:18:26 [ERROR] Cannot satisfy dependency: org.eclipse.pde.bnd.ui 1.2.400.qualifier depends on: java.package; org.bndtools.templating [2.0.0,3.0.0): See log for details

Looking at the new version of that bundle, I think this import should probably be Private-Package like the other com.google.common packages:

Looking at

https://repo.maven.apache.org/maven2/org/bndtools/org.bndtools.templating/7.2.0/org.bndtools.templating-7.2.0.pom

the dependency listed as provided:

com.google.guava guava 33.4.8-jre provided

I don't think we want to drag guava into the Platform/SDK.

---

I don't think that's the only think that' appears messed up....

When I try to build these updates with Orbit, that build fails like this:

[ERROR] Missing requirement: biz.aQute.tester.junit-platform 7.2.0.202512261929 requires 'java.package; org.junit.platform.commons [1.10.1,1.13.0)' but it could not be found
[ERROR] Cannot satisfy dependency: org.eclipse.orbit.maven.osgi.all.feature.group 4.39.0.v20251227-1000 depends on: org.eclipse.equinox.p2.iu; biz.aQute.tester.junit-platform [7.2.0.202512261929,7.2.0.202512261929]
[ERROR] Cannot satisfy dependency: org.eclipse.orbit.maven.osgi.site raw:1.0.0.'SNAPSHOT'/format(n[.n=0;[.n=0;[-S]]]):1.0.0-SNAPSHOT depends on: org.eclipse.equinox.p2.iu; org.eclipse.orbit.maven.osgi.all.feature.group 0.0.0: See log for details
[ERROR] -> [Help 1]

The current version of the org.junit.platform.commons package is 1.14.1:

The older version of that bundle has a broader range for the dependency:

So this too appear inappropriate to me.

---

I can't be sure there are other problems we've not noticed yet...

[laeubi]

FYI @chrisrueger @peterkir

[laeubi]

/request-license-review

[github-actions]

/request-license-review

⚠️ Failed to request review of not vetted licenses.

Workflow run (with attached summary files):
https://github.com/eclipse-platform/eclipse.platform.releng.aggregator/actions/runs/20536352231

[chrisrueger]

@laeubi @merks bnd 7.2.0 has introduced a smaller range on junit. See https://github.com/bndtools/bnd/wiki/Changes-in-7.2.0#known-issues

Regarding guava:

The change was since we upgrade to guava 33

• bndtools/bnd@087061e
• bndtools/bnd@c0abf81

Those newly imported packages are because of guava requires com.google.errorprone.annotations and com.google.guava.failureaccess in the newer version.

Open for suggestions, how to improve the situation.

[iloveeclipse]

Those newly imported packages are because of guava requires com.google.errorprone.annotations

These should be optional, only required during compilation (in theory).

[chrisrueger]

I have created bndtools/bnd#7022 and will try to improve it. Would appreciate more feedback as soon as you find something.

What is the timeline until you need this for the next eclipse release? So we can plan a 7.2.1 or 7.3.0

[chrisrueger]

Guava deps

I have added bndtools/bnd#7024 to adresse the Guava Dependencies by making them optional.

Let me more if you discover more packages which should be optional.

Regarding JUnit:

I am a bit unsure what to do: bnd (biz.aQute.tester.junit-platform) has a Problem with JUnit starting 1.13 (bndtools/bnd#6651)

So currently bnd osgi tests (or projects using it) need max. JUnit BOM 5.12.2 (or otherwise tests won't be discovered).
I am not sure if and what Eclipse is using this part

I have a PR waiting for review for this ( bndtools/bnd#7000 ) but I got help from copilot since I am not familar with bnd tester stuff.