fix(deps): bump tycho-build from 3.0.5 to 4.0.0

[dependabot]

Bumps tycho-build from 3.0.5 to 4.0.0.

Release notes

Sourced from tycho-build's releases.

Tycho 4.0.0 has been released and is available from Maven Central repository.

🆕 https://github.com/eclipse-tycho/tycho/blob/tycho-4.0.0/RELEASE_NOTES.md 🏷️ https://github.com/eclipse-tycho/tycho/tree/tycho-4.0.0 👔 https://projects.eclipse.org/projects/technology.tycho/releases/4.0.0 🙏 contributors who contributed patches for this release:

• Ben Shelbourne
• Brian de Alwis
• Christoph Läubrich
• Daniel Schwering
• dependabot[bot]
• Dieter Mai
• Ed Merks
• Edoardo Luppi
• Gabriel Einsdorf
• Gregor Latuske
• Hannes Wellmann
• Jakub Stroleny
• Joe Shannon
• Jonah Graham
• Konrad Windszus
• Lars Vogel
• lgoubet
• Lorenzo Bettini
• Michael Keppler
• Mickael Istria
• Patrick Ziegler
• Peter Hermsdorf
• Roncla
• Sebastian Ratz
• StepSecurity Bot
• Vaclav Hala
• William Riley
• Александър Куртаков

💰 we would like to also thank Faktor Zehn GmbH for sponsoring contributions and the Eclipse IDE Working Group for sponsoring the releng work in this release

and thanks to everyone who helped us with testing the snapshot version.

Regards,

The Tycho Team

Changelog

Sourced from tycho-build's changelog.

4.0.0

Maven 3.9 required

Tycho 4.x requires Maven Version 3.9.

creating maven p2 sites with Tycho packaging

There is already a way to create a p2 maven site with Tycho for plain jar based projects. This support is now enhanced to being used in a Tycho based setup so it is possible to build a full maven deployed updatesite automatically with all bundles of the current build. You can find a demo here:

https://github.com/eclipse-tycho/tycho/tree/master/demo/p2-maven-site

New document-bundle mojo

There is now a new mojo that replaces the usual ant-based workflow to generate the help index, it can be used like this:

<plugin>
    <groupId>org.eclipse.tycho.extras</groupId>
    <artifactId>tycho-document-bundle-plugin</artifactId>
    <version>${tycho-version}</version>
    <executions>
        <execution>
            <id>index</id>
            <goals>
                <goal>build-help-index</goal>
            </goals>
        </execution>
    </executions>
</plugin>

New API-Tools Mojo

There is now a new mojo that replaces the usual ant-based workflow to call the PDE-API tools, it can be used like this:

<plugin>
    <groupId>org.eclipse.tycho</groupId>
    <artifactId>tycho-apitools-plugin</artifactId>
    <version>${tycho-version}</version>
    <configuration>
        <baselines>
            <repository>
                <url>... your baseline repo ...</url>
            </repository>
</tr></table> 

... (truncated)

Commits

• cd88ba9 Prepare 4.0.0 Release
• bfec3de Let the MavenAuthenticator caches be static to share state
• 530b623 Use maven-plugin-report-plugin for sitedocs
• ba7b1a9 Issue #2589 Strip asterisk (*) characters from URIs
• 6828bb1 Bump maven-version from 3.9.2 to 3.9.3
• a4a3eb3 Add support for p2.inf in eclipse-repository packaging
• 3569ad7 Bump maven-resolver-util from 1.9.12 to 1.9.13
• 2b875dd Update RELEASE_NOTES.md
• d08e3a5 Prepare for 4.x release
• 6ee26e7 Bump commons-codec from 1.15 to 1.16.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #1239.