dependabot[bot] opened a new pull request, #3024: URL: https://github.com/apache/cxf/pull/3024
Bumps [org.atmosphere:atmosphere-runtime](https://github.com/Atmosphere/atmosphere) from 3.1.0 to 4.0.29. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Atmosphere/atmosphere/releases";>org.atmosphere:atmosphere-runtime's releases</a>.</em></p> <blockquote> <h2>Atmosphere 4.0.29</h2> <h2>✨ Added</h2> <ul> <li><strong>add <code>atmosphere compose</code> to generate multi-agent projects from skill files Interactive wizard + JBang generator produces multi-module Maven projects with <a href="https://github.com/Coordinator";><code>@Coordinator</code></a>, <a href="https://github.com/Fleet";><code>@Fleet</code></a>, A2A agents, docker-compose. 23 unit tests + 3 E2E tests (a2a-docker, single-jar, local).</strong></li> <li><strong>add E2E tests for agent and multiagent over WebTransport Enable WebTransport on ai-tools and multi-agent samples, fix info controller</strong></li> <li><strong>migrate a2a-agent and grpc-chat to shared atmosphere.js/chat UI Replace custom inline UIs with ChatLayout, ChatInput, MessageList, StreamingMessage for consistency</strong></li> <li><strong>bridge WebTransport data streams into AtmosphereFramework CONNECT → doCometSupport with AsyncIOWriter piping to QUIC stream; messages dispatch via POST</strong></li> <li><strong>bridge WebTransport data streams into AtmosphereFramework CONNECT → doCometSupport with AsyncIOWriter piping to QUIC stream; messages dispatch via POST</strong></li> <li><strong>bridge WebTransport data streams into AtmosphereFramework CONNECT → doCometSupport with AsyncIOWriter piping to QUIC stream; messages dispatch via POST</strong></li> <li><strong>bridge WebTransport data streams into AtmosphereFramework CONNECT → doCometSupport with AsyncIOWriter piping to QUIC stream; messages dispatch via POST</strong></li> <li><strong>working WebTransport over HTTP/3 with Chrome Add draft-02 setting (0x2b603742), QPACK zero-config, sec-webtransport-http3-draft header</strong></li> <li><strong>raw Netty HTTP/3 server with ENABLE_CONNECT_PROTOCOL for WebTransport Switch from Reactor Netty HttpServer to raw Netty Http3ServerConnectionHandler with extended CONNECT</strong></li> <li><strong>add WebTransport over HTTP/3 support (<a href="https://redirect.github.com/Atmosphere/atmosphere/issues/2493";>#2493</a>) SPI in cpr, Reactor Netty HTTP/3 sidecar + ECDSA cert pinning, WebTransportTransport client with fallback</strong></li> <li><strong>add ADK bridges, cross-runtime contract tests, tool event normalization AdkCompactionBridge maps to EventsCompactionConfig, AdkArtifactBridge wraps ArtifactStore as BaseArtifactService, AdkEventAdapter emits ToolStart/ToolResult from functionCalls/functionResponses, TCK tests for ADK/LangChain4j/SpringAI</strong></li> <li><strong>wire approval routing, disconnect lifecycle, compaction/artifact SPIs, ADK bridge Fixes gaps A-H from competitive deep-dive: approval fast-path, interceptor onDisconnect, AiCompactionStrategy, ArtifactStore, TOOL_APPROVAL capability, TCK base, doc hardening</strong></li> <li><strong>orchestration demo with working handoff and console routing Support→billing handoff visible in console UI, /status command works, console-info respects configured ai.path for multi-agent apps</strong></li> <li><strong>add orchestration demo with support→billing handoff and <a href="https://github.com/RequiresApproval";><code>@RequiresApproval</code></a> Two <a href="https://github.com/Agent";><code>@Agent</code></a> classes (support, billing), handoff on billing keywords, cancel_account requires approval, /status and /hours commands, demo mode without API key</strong></li> <li><strong>wire handoff() in AiStreamingSession with cycle guard and history transfer Resolves target agent from AtmosphereFramework, copies conversation history, emits AiEvent.Handoff, throws on nested handoffs</strong></li> <li><strong>wire approval gates into tool execution pipeline ToolDefinition carries approvalMessage/approvalTimeout from <a href="https://github.com/RequiresApproval";><code>@RequiresApproval</code></a>, DefaultToolRegistry reads the annotation at scan time, ApprovalGateExecutor wraps the executor for all runtimes</strong></li> <li><strong>add approval gates with VT-parked strategy for human-in-the-loop tool execution <a href="https://github.com/RequiresApproval";><code>@RequiresApproval</code></a>, ApprovalRegistry (ConcurrentHashMap), VirtualThreadApprovalStrategy (parks VT on CompletableFuture), /__approval/ prefix protocol, AiEvent.ApprovalRequired</strong></li> <li><strong>add long-term memory with pluggable extraction strategies LongTermMemory SPI, InMemoryLongTermMemory (ReentrantLock, VT-safe), LongTermMemoryInterceptor, SemanticRecallInterceptor (graceful no-op), 3 strategies (onSessionClose, perMessage, periodic)</strong></li> <li><strong>add agent handoffs, routing, and handoff event to coordinator session.handoff() with cycle guard, memory.copyTo(), AiEvent.Handoff, CoordinationEvent.AgentHandoff, fleet.route() integration with journaling</strong></li> <li><strong>add LLM-as-judge eval assertions (meetsIntent, isGroundedIn, hasQuality) LlmJudge uses a configurable AgentRuntime to score agent responses on intent, grounding, relevance, coherence, and safety via structured JSON prompts</strong></li> </ul> <h2>🐛 Fixed</h2> <ul> <li>add javadoc JARs for Kotlin modules, include embabel in deploy</li> <li>remove shared-resources from exclusion (not a Maven module)</li> <li>exclude koog-chat, orchestration-demo, shared-resources from deploy</li> <li>tag longPolling test as flaky, exclude from release validation</li> <li>tag rag-chat multi-turn as <a href="https://github.com/flaky";><code>@flaky</code></a> (LLM timeout on CI)</li> <li>sync local homebrew formula with tap (4.0.28 + real SHA256)</li> <li>tag LLM-dependent tests as <a href="https://github.com/flaky";><code>@flaky</code></a>, set INCLUDE_FLAKY=false in CI</li> <li>remove never-green approval UI console test (broken locator)</li> <li>remove never-green approval UI console test (broken locator)</li> <li>add AuthConfig to ai-chat sample, rename console CSS classes auth-token E2E now passes with TokenValidator + login endpoint + refresh</li> <li>register RoomProtocolInterceptor as bean for fat-JAR compatibility</li> <li>revert chat to WebSocket default, skip room-typing-direct tests</li> <li>mark room-typing-direct tests as <a href="https://github.com/flaky";><code>@flaky</code></a> pending room protocol fix</li> <li>check wtInfo.enabled before setting webTransportUrl</li> <li>append newline delimiter to byte writes for streaming events</li> <li>skip auth-token rejection tests until auth interceptor is configured</li> <li>increase timeouts and fix locator for approval UI and room typing tests</li> <li>graceful degradation when self-signed cert fails in native image</li> <li>increase test timeouts for CI readLoop close detection</li> <li>fix ByteBuf leak in fragmented varint header parsing</li> </ul> <h2>🔧 Changed</h2> <ul> <li>add auth, WebTransport details, compose, update sample table to 20</li> <li>raise bundle size limit from 32KB to 40KB for WebTransport</li> <li>link atmosphere-skills registry from main README</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Atmosphere/atmosphere/commit/167ef24357b34042ebdb2e81808ab04be3336f34";><code>167ef24</code></a> release: Atmosphere 4.0.29</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/1e3bd078649d052f87b063ac21fc0231c5878dcd";><code>1e3bd07</code></a> fix(release): add javadoc JARs for Kotlin modules, include embabel in deploy</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/fbc8e48b2e5d81420a17f056f64d3057cfe4ee61";><code>fbc8e48</code></a> fix(release): remove shared-resources from exclusion (not a Maven module)</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/a8ff68229d9a47319fbff58b6c9cac21da78dbaa";><code>a8ff682</code></a> fix(release): exclude koog-chat, orchestration-demo, shared-resources from de...</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/ad420c218bf188a86a95a0e560c343eb8f68eddb";><code>ad420c2</code></a> fix(release): tag longPolling test as flaky, exclude from release validation</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/14315d62c502041f15fe17e5856f37e58d1e2a14";><code>14315d6</code></a> docs(readme): add auth, WebTransport details, compose, update sample table to 20</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/ec5d996dc11e9aa0b3e3312ab3fc41be0dfeb316";><code>ec5d996</code></a> fix(e2e): tag rag-chat multi-turn as <a href="https://github.com/flaky";><code>@flaky</code></a> (LLM timeout on CI)</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/81faaf938fa18014148a6f8a01c14c7d6acf2a4d";><code>81faaf9</code></a> fix(cli): sync local homebrew formula with tap (4.0.28 + real SHA256)</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/2fb0a92bafc7148afe7db2fe983686e9cc2165f4";><code>2fb0a92</code></a> fix(e2e): tag LLM-dependent tests as <a href="https://github.com/flaky";><code>@flaky</code></a>, set INCLUDE_FLAKY=false in CI</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/dd4885ef9434c713a3d51da344ca033a309e346f";><code>dd4885e</code></a> fix(e2e): remove never-green approval UI console test (broken locator)</li> <li>Additional commits viewable in <a href="https://github.com/Atmosphere/atmosphere/compare/atmosphere-project-3.1.0...atmosphere-4.0.29";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
