we fixed a potential security issue in maven-bundle-plugin today (FELIX-5579 - security issue in old dependency). i also updated to bndlib 3.3.0 which was released in last September.
if no one objects i will start a release 3.3.0 within the next 1-2 days. stefan