.github/workflows/maven.yml

@@ -1,5 +1,5 @@
 #
-# Copyright (c) 2021 Oracle and/or its affiliates. All rights reserved.
+# Copyright (c) 2021, 2024 Oracle and/or its affiliates. All rights reserved.
 #
 # This program and the accompanying materials are made available under the
 # terms of the Eclipse Public License v. 2.0, which is available at
@@ -18,34 +18,38 @@ name: JSON-B API
 
 on: [push, pull_request]
 
+permissions:
+  security-events: read
+  contents: write
+  actions: read
+  id-token: write
+  checks: write
+
+concurrency:
+  group: ${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   build:
     name: JSON-B API compilation
     runs-on: ubuntu-latest
 
     steps:
       - name: Checkout for build
-        uses: actions/checkout@v2.3.4
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Set up compile JDK
-        uses: actions/setup-java@v2
+        uses: actions/setup-java@v4
         with:
           distribution: 'adopt'
           java-version: 11
-      - name: Maven cache
-        uses: actions/cache@v2
-        env:
-          cache-name: maven-cache
-        with:
-          path:
-            ~/.m2
-          key: build-${{ env.cache-name }}
+          cache: 'maven'
       - name: API compilation
-        run: cd api && mvn clean install -Pstaging
+        run: cd api && mvn clean install -Pstaging -B
       - name: TCK test compilation
-        run: cd tck && mvn clean install -Pstaging
+        run: cd tck && mvn clean install -Pstaging -B
       - name: Javadoc compilation
-        run: cd docs && mvn clean install -Pstaging
+        run: cd docs && mvn clean install -Pstaging -B
       - name: Generating specification
-        run: cd spec && mvn clean install -Pstaging
+        run: cd spec && mvn clean install -Pstaging -B

CONTRIBUTING.md

@@ -4,13 +4,19 @@ Thanks for your interest in this project.
 
 ## Project description
 
-JSON-B is a standard binding layer for converting Java objects to/from JSON
-messages. It defines a default mapping algorithm for converting existing Java
-classes to JSON, while enabling developers to customize the mapping process
-through the use of Java annotations.
+Jakarta JSON Binding™ is a standard binding layer for converting Java objects
+to/from JSON messages. It defines a default mapping algorithm for converting
+existing Java classes to JSON, while enabling developers to customize the
+mapping process through the use of Java annotations.
 
 * https://projects.eclipse.org/projects/ee4j.jsonb
 
+## Terms of Use
+
+This repository is subject to the Terms of Use of the Eclipse Foundation
+
+* https://www.eclipse.org/legal/termsofuse.php
+
 ## Developer resources
 
 Information regarding source code management, builds, coding standards, and
@@ -20,24 +26,54 @@ more.
 
 The project maintains the following source code repositories
 
-* https://github.com/eclipse-ee4j/jsonb-api
+* https://github.com/jakartaee/jsonb-api
+
+## Eclipse Development Process
+
+This Eclipse Foundation open project is governed by the Eclipse Foundation
+Development Process and operates under the terms of the Eclipse IP Policy.
+
+The Jakarta EE Specification Committee has adopted the Jakarta EE Specification
+Process (JESP) in accordance with the Eclipse Foundation Specification Process
+v1.2 (EFSP) to ensure that the specification process is complied with by all
+Jakarta EE specification projects.
+
+* https://eclipse.org/projects/dev_process
+* https://www.eclipse.org/org/documents/Eclipse_IP_Policy.pdf
+* https://jakarta.ee/about/jesp/
+* https://www.eclipse.org/legal/efsp_non_assert.php
 
 ## Eclipse Contributor Agreement
 
-Before your contribution can be accepted by the project team contributors must
+In order to be able to contribute to Eclipse Foundation projects you must
 electronically sign the Eclipse Contributor Agreement (ECA).
 
-* http://www.eclipse.org/legal/ECA.php
+* https://www.eclipse.org/legal/ECA.php
 
-Commits that are provided by non-committers must have a Signed-off-by field in
-the footer indicating that the author is aware of the terms by which the
-contribution has been provided to the project. The non-committer must
-additionally have an Eclipse Foundation account and must have a signed Eclipse
-Contributor Agreement (ECA) on file.
+The ECA provides the Eclipse Foundation with a permanent record that you agree
+that each of your contributions will comply with the commitments documented in
+the Developer Certificate of Origin (DCO). Having an ECA on file associated with
+the email address matching the "Author" field of your contribution's Git commits
+fulfills the DCO's requirement that you sign-off on your contributions.
 
 For more information, please see the Eclipse Committer Handbook:
 https://www.eclipse.org/projects/handbook/#resources-commit
 
+## Eclipse Development Process
+
+This Eclipse Foundation open project is governed by the Eclipse Foundation
+Development Process and operates under the terms of the Eclipse IP Policy.
+
+The Jakarta EE Specification Committee has adopted the Jakarta EE Specification
+Process (JESP) in accordance with the Eclipse Foundation Specification Process
+v1.2 (EFSP) to ensure that the specification process is complied with by all
+Jakarta EE specification projects.
+
+* https://eclipse.org/projects/dev_process
+* https://www.eclipse.org/org/documents/Eclipse_IP_Policy.pdf
+* https://jakarta.ee/about/jesp/
+* https://www.eclipse.org/legal/efsp_non_assert.php
+
 ## Contact
 
 Contact the project developers via the project's "dev" list.

NOTICE.md

@@ -6,7 +6,7 @@ This content is produced and maintained by the Jakarta JSON Binding project.
 
 ## Trademarks
 
-Jakarta JSON Binding is a trademark of the Eclipse Foundation.
+Jakarta JSON Binding™ is a trademark of the Eclipse Foundation.
 
 ## Copyright
 
@@ -18,25 +18,19 @@ source code repository logs.
 
 This program and the accompanying materials are made available under the terms
 of the Eclipse Public License v. 2.0 which is available at
-http://www.eclipse.org/legal/epl-2.0. This Source Code may also be made
+https://www.eclipse.org/legal/epl-2.0. This Source Code may also be made
 available under the following Secondary Licenses when the conditions for such
-availability set forth in the Eclipse Public License v. 2.0 are satisfied: GNU
-General Public License, version 2 with the GNU Classpath Exception which is
-available at https://www.gnu.org/software/classpath/license.html.
+availability set forth in the Eclipse Public License v. 2.0 are satisfied:
+GPL-2.0 with Classpath-exception-2.0 which is available at
+https://openjdk.java.net/legal/gplv2+ce.html.
 
-SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+SPDX-License-Identifier: EPL-2.0 OR GPL-2.0-only with Classpath-exception-2.0
 
 ## Source Code
 
 The project maintains the following source code repositories:
 
-* https://github.com/eclipse-ee4j/jsonb-api
-
-## Third-party Content
-
-This project leverages the following third party content.
-
-None
+* https://github.com/jakartaee/jsonb-api
 
 ## Cryptography
 

README.md

@@ -16,7 +16,7 @@ JSON-B is a standard binding layer for converting Java objects to/from JSON mess
 <dependency>
     <groupId>jakarta.json.bind</groupId>
     <artifactId>jakarta.json.bind-api</artifactId>
-    <version>2.0.0</version>
+    <version>3.0.0</version>
 </dependency>
 ```
 
@@ -59,9 +59,9 @@ include the TCK module and apply the appropriate Arquillian container. See the [
 
 ## Links
 
-- [Official web site](https://eclipse-ee4j.github.io/jsonb-api)
+- [Official web site](https://jakartaee.github.io/jsonb-api)
 - [Eclipse project](https://projects.eclipse.org/projects/ee4j.jsonb)
-- [User's Guide](https://eclipse-ee4j.github.io/jsonb-api/docs/user-guide.html)
+- [User's Guide](https://jakartaee.github.io/jsonb-api/docs/user-guide.html)
 - [Jenkins Builds](https://ci.eclipse.org/jsonb/view/all/)
 - [Mailing list](https://www.eclipse.org/lists/jsonb-dev/)
 - [Yasson (Compatible Implementation)](https://github.com/eclipse-ee4j/yasson)

SECURITY.md

@@ -0,0 +1,21 @@
+# Security Policy
+
+This project implements the Eclipse Foundation Security Policy
+
+* https://www.eclipse.org/security
+
+## Supported Versions
+
+These versions of Jakarta JSON Binding are currently being supported with
+security updates.
+
+| Version | Released   | Supported | 
+| ------- | ---------- | --------- | 
+| 3.0.0   | 2022-03-31 | Yes       | 
+| 2.0.0   | 2020-10-07 | Yes       | 
+| < 1.0.2 | 2019-09-10 | No        | 
+
+## Reporting a Vulnerability
+
+Please report vulnerabilities to the Eclipse Foundation Security Team at
+security@eclipse.org