Tycho plugins >=4.0.0 require a more recent maven version than Debian 12 Bookworm has. Dependabot is therefore ignoring this dependency since 5fa200a04c4e. Once Debian 13 Trixie is released and more widely adopted, we need to re-visit that exclusion.