Restrict updates to ignore poor BND dependencies

[merks]

#3579

[merks]

@laeubi

There's really no way to test this without committing it is there?

This buidl confirmed that not updating these two things was successful:

#3580

[laeubi]

There's really no way to test this without committing it is there?

You can just execute the following maven command in the root of the aggregator repo:

mvn -ntp --non-recursive tycho-version-bump:update-target@update-target

then check if/what was changed in the target file looks like what you expect it to be.