Pin Apache Maven to 3.9.11 for Tycho 4.0.x compatibility

The GitHub-hosted ubuntu runner image bumped its default Apache Maven
from 3.9.x to 3.10.0 (image ubuntu24/20261004.327). Tycho 4.0.x requires
the Maven 3.9.x line; under Maven 3.10.0 Tycho's Sisu/Guice component
wiring fails at extension bootstrap with "No implementation for
MavenTargetLocationFactory was bound" while provisioning
DefaultTargetPlatformFactory, breaking the build.

Pin Maven to 3.9.11 via setup-maven in every workflow that runs Maven
(release, build-aws-sdk-p2, build-sailing-base-p2, build-jetty-p2) so the
build no longer depends on whatever Maven the runner image ships. The
action is SHA-pinned consistently (stCarolas/setup-maven v5.1).

Assisted-By: Claude Opus 4.8

.github/workflows/build-aws-sdk-p2.yml

@@ -49,6 +49,14 @@ jobs:
           distribution: 'temurin' # See 'Supported distributions' for available options
           java-version: '17'
           mvn-toolchain-id: 'JavaSE-17'
+      - name: Pin Apache Maven to 3.9.11
+        # Tycho 4.0.x requires the Maven 3.9.x line; the GitHub runner image's default
+        # Maven floats and bumped to 3.10.0, which breaks Tycho's Sisu/Guice component
+        # wiring. Pin a known-good 3.9.x so the build no longer depends on the runner
+        # image's default.
+        uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1
+        with:
+          maven-version: 3.9.11
       - shell: bash
         env: # Or as an environment variable
           TMP: /mnt/tmp

.github/workflows/build-jetty-p2.yml

@@ -16,6 +16,14 @@ jobs:
         with:
           distribution: temurin
           java-version: 21
+      - name: Pin Apache Maven to 3.9.11
+        # Tycho 4.0.x requires the Maven 3.9.x line; the GitHub runner image's default
+        # Maven floats and bumped to 3.10.0, which breaks Tycho's Sisu/Guice component
+        # wiring. Pin a known-good 3.9.x so the build no longer depends on the runner
+        # image's default.
+        uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1
+        with:
+          maven-version: 3.9.11
       - name: Check out the repository to the runner
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:

.github/workflows/build-sailing-base-p2.yml

@@ -30,6 +30,14 @@ jobs:
           distribution: 'temurin' # See 'Supported distributions' for available options
           java-version: '17'
           mvn-toolchain-id: 'JavaSE-17'
+      - name: Pin Apache Maven to 3.9.11
+        # Tycho 4.0.x requires the Maven 3.9.x line; the GitHub runner image's default
+        # Maven floats and bumped to 3.10.0, which breaks Tycho's Sisu/Guice component
+        # wiring. Pin a known-good 3.9.x so the build no longer depends on the runner
+        # image's default.
+        uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1
+        with:
+          maven-version: 3.9.11
       - shell: bash
         env: # Or as an environment variable
           TMP: /mnt/tmp

.github/workflows/release.yml

@@ -189,6 +189,14 @@ jobs:
           distribution: 'temurin' # See 'Supported distributions' for available options
           java-version: '25'
           mvn-toolchain-id: 'JavaSE-25'
+      - name: Pin Apache Maven to 3.9.11
+        # Tycho 4.0.x requires the Maven 3.9.x line; the GitHub runner image's default
+        # Maven floats and bumped to 3.10.0, which breaks Tycho's Sisu/Guice component
+        # wiring ("No implementation for MavenTargetLocationFactory was bound"). Pin a
+        # known-good 3.9.x so the build no longer depends on the runner image's default.
+        uses: stCarolas/setup-maven@12eb41b233df95d49b0c11fc1b5bc8312e5d4ce0 # v5.1
+        with:
+          maven-version: 3.9.11
       - name: Setup Android SDK
         uses: android-actions/setup-android@40fd30fb8d7440372e1316f5d1809ec01dcd3699 # v4.0.1
         with: