There is a mix of com.sun.jaxb dependencies and new RI packaged org.glassfish.jaxb dependencies see documentation for RI https://javaee.github.io/jaxb-v2/doc/user-guide/ch03.html#deployment-maven-coordinates

We should unify on one set of JAXB API/runtime to not mix more dependencies with the same classes. Now it requires to dance in between duplicatedClasses with exclusions.
New versions of hibernate, cxf references jakarta jaxb or org.glassfish.jaxb