update legal files

Signed-off-by: Lukas Jungmann <lukas.jungmann@oracle.com>

CONTRIBUTING.md

@@ -1,4 +1,4 @@
-[//]: # " Copyright (c) 2018, 2022 Oracle and/or its affiliates. All rights reserved. "
+[//]: # " Copyright (c) 2018, 2024 Oracle and/or its affiliates. All rights reserved. "
 [//]: # "  "
 [//]: # " This program and the accompanying materials are made available under the "
 [//]: # " terms of the Eclipse Distribution License v. 1.0, which is available at "
@@ -12,11 +12,17 @@ Thanks for your interest in this project.
 
 ## Project description
 
-The Jakarta XML Binding provides an API and tools that
-automate the mapping between XML documents and Java objects.
+Jakarta XML Binding™ defines an API and tools that automate the mapping
+between XML documents and Java objects.
 
 * https://projects.eclipse.org/projects/ee4j.jaxb
 
+## Terms of Use
+
+This repository is subject to the Terms of Use of the Eclipse Foundation
+
+* https://www.eclipse.org/legal/termsofuse.php
+
 ## Developer resources
 
 Information regarding source code management, builds, coding standards, and
@@ -26,24 +32,8 @@ more.
 
 The project maintains the following source code repositories
 
-* https://github.com/eclipse-ee4j/jaxb-api
-* https://github.com/eclipse-ee4j/jaxb-tck
-
-## Eclipse Contributor Agreement
-
-Before your contribution can be accepted by the project team contributors must
-electronically sign the Eclipse Contributor Agreement (ECA).
-
-* http://www.eclipse.org/legal/ECA.php
-
-Commits that are provided by non-committers must have a Signed-off-by field in
-the footer indicating that the author is aware of the terms by which the
-contribution has been provided to the project. The non-committer must
-additionally have an Eclipse Foundation account and must have a signed Eclipse
-Contributor Agreement (ECA) on file.
-
-For more information, please see the Eclipse Committer Handbook:
-https://www.eclipse.org/projects/handbook/#resources-commit
+* https://github.com/jakartaee/jaxb-api
+* https://github.com/jakartaee/jaxb-tck
 
 ## Eclipse Development Process
 
@@ -60,6 +50,22 @@ Jakarta EE specification projects.
 * https://jakarta.ee/about/jesp/
 * https://www.eclipse.org/legal/efsp_non_assert.php
 
+## Eclipse Contributor Agreement
+
+In order to be able to contribute to Eclipse Foundation projects you must
+electronically sign the Eclipse Contributor Agreement (ECA).
+
+* https://www.eclipse.org/legal/ECA.php
+
+The ECA provides the Eclipse Foundation with a permanent record that you agree
+that each of your contributions will comply with the commitments documented in
+the Developer Certificate of Origin (DCO). Having an ECA on file associated with
+the email address matching the "Author" field of your contribution's Git commits
+fulfills the DCO's requirement that you sign-off on your contributions.
+
+For more information, please see the Eclipse Committer Handbook:
+https://www.eclipse.org/projects/handbook/#resources-commit
+
 ## Contact
 
 Contact the project developers via the project's "dev" list.

NOTICE.md

@@ -1,4 +1,4 @@
-[//]: # " Copyright (c) 2018, 2022 Oracle and/or its affiliates. All rights reserved. "
+[//]: # " Copyright (c) 2018, 2024 Oracle and/or its affiliates. All rights reserved. "
 [//]: # "  "
 [//]: # " This program and the accompanying materials are made available under the "
 [//]: # " terms of the Eclipse Distribution License v. 1.0, which is available at "
@@ -8,14 +8,13 @@
 
 # Notices for Jakarta XML Binding
 
-This content is produced and maintained by the Jakarta XML Binding
-project.
+This content is produced and maintained by the Jakarta XML Binding project.
 
 * Project home: https://projects.eclipse.org/projects/ee4j.jaxb
 
 ## Trademarks
 
-Jakarta XML Binding is a trademark of the Eclipse Foundation.
+Jakarta XML Binding™ is a trademark of the Eclipse Foundation.
 
 ## Copyright
 
@@ -26,46 +25,17 @@ source code repository logs.
 ## Declared Project Licenses
 
 This program and the accompanying materials are made available under the terms
-of the Eclipse Distribution License v. 1.0 which is available at
-http://www.eclipse.org/org/documents/edl-v10.php.
+of the Eclipse Distribution License v1.0 which is available at
+https://www.eclipse.org/org/documents/edl-v10.php.
 
 SPDX-License-Identifier: BSD-3-Clause
 
 ## Source Code
 
 The project maintains the following source code repositories:
 
-* https://github.com/eclipse-ee4j/jaxb-api
-* https://github.com/eclipse-ee4j/jaxb-tck
-
-## Third-party Content
-
-This project leverages the following third party content.
-
-Apache River (3.0.0)
-
-* License: Apache-2.0 AND BSD-3-Clause
-
-ASM 7 (n/a)
-
-* License: BSD-3-Clause
-* Project: https://asm.ow2.io/
-* Source:
-   https://repository.ow2.org/nexus/#nexus-search;gav~org.ow2.asm~asm-commons~~~~kw,versionexpand
-
-JTHarness (5.0)
-
-* License: (GPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0)	
-* Project: https://wiki.openjdk.java.net/display/CodeTools/JT+Harness
-* Source: http://hg.openjdk.java.net/code-tools/jtharness/
-
-normalize.css (3.0.2)
-
-* License: MIT
-
-SigTest (n/a)
-
-* License: GPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+* https://github.com/jakartaee/jaxb-api
+* https://github.com/jakartaee/jaxb-tck
 
 ## Cryptography
 

README.md

@@ -8,7 +8,7 @@
 
 # Jakarta XML Binding project
 
-[![Build Status](https://github.com/eclipse-ee4j/jaxb-api/actions/workflows/maven.yml/badge.svg?branch=master)](https://github.com/eclipse-ee4j/jaxb-api/actions/workflows/maven.yml?branch=master)
+[![Build Status](https://github.com/jakartaee/jaxb-api/actions/workflows/maven.yml/badge.svg?branch=master)](https://github.com/jakartaee/jaxb-api/actions/workflows/maven.yml?branch=master)
 [![Jakarta Staging (Snapshots)](https://img.shields.io/nexus/s/https/jakarta.oss.sonatype.org/jakarta.xml.bind/jakarta.xml.bind-api.svg)](https://jakarta.oss.sonatype.org/content/repositories/staging/jakarta/xml/bind/jakarta.xml.bind-api/)
 
 The Jakarta XML Binding provides an API and tools that automate the mapping

SECURITY.md

@@ -0,0 +1,29 @@
+[//]: # " Copyright (c) 2024 Oracle and/or its affiliates. All rights reserved. "
+[//]: # "  "
+[//]: # " This program and the accompanying materials are made available under the "
+[//]: # " terms of the Eclipse Distribution License v. 1.0, which is available at "
+[//]: # " http://www.eclipse.org/org/documents/edl-v10.php. "
+[//]: # "  "
+[//]: # " SPDX-License-Identifier: BSD-3-Clause "
+
+# Security Policy
+
+This project implements the Eclipse Foundation Security Policy
+
+* https://www.eclipse.org/security
+
+## Supported Versions
+
+These versions of Jakarta XML Binding are currently being supported with
+security updates.
+
+| Version | Released   | Supported | 
+| ------- | ---------- | --------- | 
+| 4.0     | 2022-03-30 | Yes       | 
+| 3.0.1   | 2021-03-26 | Yes       | 
+| < 3.0   | 2020-11-04 | No        | 
+
+## Reporting a Vulnerability
+
+Please report vulnerabilities to the Eclipse Foundation Security Team at
+security@eclipse.org

pom.xml

@@ -28,12 +28,12 @@
     <packaging>pom</packaging>
     <name>Jakarta XML Binding</name>
     <description>Jakarta XML Binding API</description>
-    <url>https://github.com/eclipse-ee4j/jaxb-api</url>
+    <url>https://github.com/jakartaee/jaxb-api</url>
 
     <scm>
-        <connection>scm:git:git://github.com/jakartaee/jaxb-api</connection>
-        <developerConnection>scm:git:git@github.com:jakartaee/jaxb-api</developerConnection>
-        <url>https://github.com/jakartaee/jaxb-api</url>
+        <connection>scm:git:git://github.com/jakartaee/jaxb-api.git</connection>
+        <developerConnection>scm:git:git@github.com:jakartaee/jaxb-api.git</developerConnection>
+        <url>https://github.com/jakartaee/jaxb-api.git</url>
         <tag>HEAD</tag>
     </scm>
 
@@ -55,7 +55,7 @@
 
     <issueManagement>
         <system>github</system>
-        <url>https://github.com/eclipse-ee4j/jaxb-api/issues</url>
+        <url>https://github.com/jakartaee/jaxb-api/issues</url>
     </issueManagement>
 
     <mailingLists>

spec/pom.xml

@@ -35,14 +35,14 @@
     <name>Jakarta XML Binding Specification</name>
 
     <scm>
-        <connection>scm:git:git://github.com/jakartaee/jaxb-api</connection>
-        <developerConnection>scm:git:git@github.com:jakartaee/jaxb-api</developerConnection>
-        <url>https://github.com/jakartaee/jaxb-api</url>
+        <connection>scm:git:git://github.com/jakartaee/jaxb-api.git</connection>
+        <developerConnection>scm:git:git@github.com:jakartaee/jaxb-api.git</developerConnection>
+        <url>https://github.com/jakartaee/jaxb-api.git</url>
         <tag>HEAD</tag>
     </scm>
     <distributionManagement>
         <site>
-            <url>scm:git:git@github.com:jakartaee/jaxb-api</url>
+            <url>scm:git:git@github.com:jakartaee/jaxb-api.git</url>
         </site>
     </distributionManagement>