If you check OSGi headers of jboss-annotations-api_1.3_spec-2.0.1.Final.jar you'll see:

Export-Package: javax.annotation;version="2.0.1",javax.annotation.secu
 rity;version="2.0.1",javax.annotation.sql;version="2.0.1"

I know that JBoss fork of the spec jar uses (as the original) a non-(defacto)-standard org.glassfish.build/spec-version-maven-plugin. This may be the reason.

There's no javax.annotation 2.0 package at all. JavaEE 8 has still version 1.3 and JavaEE, while being an Annotations API JAR 2.0, exports jakarta.annotation package.

I already found some problems with OSGi versions in JavaEE jars:

• https://github.com/eclipse-ee4j/jta-api/issues/186
• https://github.com/eclipse-ee4j/jca-api/issues/120
• https://github.com/eclipse-ee4j/jaf/issues/67

I'd be happy to "review'em all", but it requires some time...