Java: Extend JAXB.qll to cover Jakarta XML Binding

[Marcono1234]

Jakarta EE has taken over development of Java EE but had to rename packages (see also "Update on Jakarta EE Rights to Java Trademarks").
Maybe it would therefore be good to update JAXB.qll to cover these renamed packages as well.

The Jakarta XML Binding documentation can be found here.

[github-actions]

This issue is stale because it has been open 14 days with no activity. Comment or remove the stale label in order to avoid having this issue closed in 7 days.

[JLLeitschuh]

@aschackmull is there a plan to support this holistically, or is this worth a pull request by me?

It looks like there are quite a few packages to support/migrate:

Here's a solid list of all of the package name migrations that need to occur to support this.

https://docs.openrewrite.org/recipes/java/migrate/jakarta

Would this be bountyable for a change contributed via the BB program?

[aschackmull]

is there a plan to support this holistically, or is this worth a pull request by me?

I think @atorralba is better able to answer that.

[atorralba]

We have no immediate plans to cover this, so it might be a good contribution to make.

Would this be bountyable for a change contributed via the BB program?

It would if you meet the CVE criteria (either new or existent). As a reminder, rules are here.