dependabot[bot] opened a new pull request, #3321: URL: https://github.com/apache/cxf/pull/3321
Bumps [org.atmosphere:atmosphere-runtime](https://github.com/Atmosphere/atmosphere) from 3.1.0 to 4.0.62. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Atmosphere/atmosphere/releases";>org.atmosphere:atmosphere-runtime's releases</a>.</em></p> <blockquote> <h2>Atmosphere 4.0.62</h2> <h3>Added</h3> <ul> <li>session-tape replay — reconstruct a run and a multi-agent coordination tree TapeReplay reconstruct/reconstructTree (no model) + parentRunId linkage (withParentRun→A2A metadata) + tool-agent dispatch tape; gated /api/admin/tape/runs/{id}/replay + Console Replay tab; fixes A2A metadata-inherit and Resilient/Intercepting proxy propagation; docs (tutorial 36 + reference/tape + READMEs)</li> <li>Tape tab — browse recorded session tapes in the Atmosphere Console Adds gated /api/admin/tape read endpoints (runs + steps, content-read-auth per Inv#6) + hasTape runtime-truth flag + a Vue Tape tab (runs list + step detail) in the spring-boot-starter console</li> <li>tape → training data — self-contained tape + TapeTrainingExtractor Record the input prompt as a tape step on both dispatch paths so the tape is a (prompt→completion) record; TapeTrainingExtractor folds runs to chat-JSONL, TapeDatasetCli emits it; spring-boot-ai-chat demos the durable tape</li> <li>session tape — durable typed AiEvent stream, resume, admin read Records the AiEndpointHandler + AiPipeline session seams to SQLite/in-memory TapeStore; late-bound runId, crash-resume segments, atmosphere_read_tape gated REQUIRE_PRINCIPAL; opt-in (atmosphere.ai.tape.enabled) across both Spring starters + Quarkus</li> <li>opt-in security-headers filter for app routes; mcp-server consumes it</li> <li>in-process sandboxed eval tool (Rhino) — deepagents eval parity Container-free 'eval' JS tool: sandboxed Rhino scope (deny-all ClassShutter, no java/Packages bridge, interpreted-mode instruction + wall-clock budget, fresh scope per call), default-off and runtime-truth gated via an optional dependency, registered at the shared agent/endpoint tool site. Closes the last deepagents capability gap; 14 tests pin the sandbox.</li> <li>add delete + rename file tools — deepagents file-tool parity The built-in filesystem floor grows from six to eight tools: delete (ToolKind.DELETE, approval-gateable) and rename, both bounds/traversal-guarded over the conversation-scoped AgentFileSystem, closing the delete gap vs LangChain deepagents. Updates every count/phrasing across code, tests, READMEs (six→eight), and the e2e tool-count pins (dentist + orchestration now log tools: 11 = 2 user + 9 harness) — both verified empirically from a booted sample.</li> <li>wire governance decision log to Postgres/Kafka audit sinks Config-gated auto-config installs JdbcAuditSink/KafkaAuditSink so admit+deny persist</li> <li>thread inbound image input onto the model request (vision)</li> <li>discover Cedar/Rego PolicyParser SPIs on the governance reload path</li> <li>wire configurable backpressure drop-policy into the broadcaster write path</li> <li>install path for the 5 missing governance admission stages PERMISSIONS.md now wires all 7 stages (rate-limit, concurrency, message-length, time-window, kill-switch)</li> <li>one-dependency streaming <a href="https://github.com/Agent";><code>@Agent</code></a> chat sample proving the blog claim Add spring-boot-one-dep-agent; make atmosphere-ai-spring-boot-starter pull the web server non-optionally so one dependency boots a running streaming chat app.</li> <li>add Checkpoints tab to admin Console over durable-run store</li> </ul> <h3>Fixed</h3> <ul> <li>isolate optional tape types from always-active admin/console signatures Direct atmosphere-ai tape refs were force-loaded by Spring getDeclaredMethods, crashing non-AI samples at startup; reads move to TapeAdminSupport + reflective hasTape probe</li> <li>protect WEB-INF/META-INF in embedded-jetty chat sample</li> <li>honor SERVER_PORT env in kotlin-dsl-chat + embedded-jetty-websocket-chat</li> <li>nonce-based strict CSP for the console + harden mcp-server root SPA</li> <li>harden CORS credentials, console headers, A2A JSON charset, error disclosure</li> <li>map spring-boot-one-dep-agent into the release-gate smoke shard Unmapped sample tripped the no-silent-caps gate; smoke tier (boot jar + GET /atmosphere/console/ == 200) verified locally</li> <li>keep ai-chat content-read secure by default; opt out only in the real-LLM demo run</li> <li>ms-governance-chat opts out content-read-auth so its Decisions tab renders token-less</li> <li>reject SSRF to internal targets in push-notification webhooks Deny loopback/private/link-local/metadata by default (delivery-time re-check for DNS rebinding); opt in via org.atmosphere.a2a.pushAllowPrivateTargets on trusted networks</li> <li>ai-chat opts out content-read-auth so the console Decisions tab renders token-less</li> <li>auth the governance/decisions poll (read-plane fail-close regression)</li> <li>bump rhino 1.7.15 to 1.7.15.1 (CVE-2025-66453)</li> <li>pin logback 1.5.37 in sample poms (CVE-2026-10532) samples re-import the Spring Boot BOM (logback 1.5.34); a direct version pin forces the patched line</li> <li>bump logback 1.5.33 to 1.5.37 (CVE-2026-10532 object injection)</li> <li>patch DoS vulns in test deps + pin org.json (Dependabot) ws 8.19→8.21 (CVE-2026-48779), <code>@grpc/grpc-js</code> 1.14.3→1.14.4 (GHSA-5375-pq7m-f5r2), org.json pinned 20250517</li> <li>add justified unrestricted <a href="https://github.com/AgentScope";><code>@AgentScope</code></a> to one-dep ChatAgent</li> <li>require auth for recorded-content admin reads by default governance/decisions, audit, journal expose prompt/response + coordination content — default-deny, Spring+Quarkus parity, opt-out content-read-auth-required</li> <li>sync capability skillcards + README to the 22-capability set</li> </ul> <h3>Changed</h3> <ul> <li>make compose-with-native-frameworks layering explicit across READMEs</li> <li>tempest campaign coverage overstated — ~8/32 genuinely tested, not 21</li> <li>document the unauthenticated channel posture and production hardening</li> <li>log drift — swept setup-java hardening on a stale local tree Enumerated verify-signature targets before rebasing onto origin/main; gate is fetch+rebase then re-enumerate before any push-bound sweep.</li> <li>GPG-verify Temurin JDK archives across all setup-java steps Fan out the dependency-submission verify-signature pilot; Oracle JDK 26 matrix leg gated off, graalvm skipped (both unsupported).</li> <li>run the coverage-map gate on push/PR, not just nightly A new samples/ dir missing its release-gate map entry now fails the introducing PR (build-free --list check) instead of the next nightly run</li> <li>bump the maven group across 26 directories with 1 update (<a href="https://redirect.github.com/Atmosphere/atmosphere/issues/2712";>#2712</a>)</li> <li>bump testcontainers.version from 1.20.6 to 1.21.4 (<a href="https://redirect.github.com/Atmosphere/atmosphere/issues/2702";>#2702</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Atmosphere/atmosphere/blob/main/CHANGELOG.md";>org.atmosphere:atmosphere-runtime's changelog</a>.</em></p> <blockquote> <h2>[4.0.62] - 2026-07-14</h2> <h3>Added</h3> <ul> <li>session-tape replay — reconstruct a run and a multi-agent coordination tree TapeReplay reconstruct/reconstructTree (no model) + parentRunId linkage (withParentRun→A2A metadata) + tool-agent dispatch tape; gated /api/admin/tape/runs/{id}/replay + Console Replay tab; fixes A2A metadata-inherit and Resilient/Intercepting proxy propagation; docs (tutorial 36 + reference/tape + READMEs)</li> <li>Tape tab — browse recorded session tapes in the Atmosphere Console Adds gated /api/admin/tape read endpoints (runs + steps, content-read-auth per Inv#6) + hasTape runtime-truth flag + a Vue Tape tab (runs list + step detail) in the spring-boot-starter console</li> <li>tape → training data — self-contained tape + TapeTrainingExtractor Record the input prompt as a tape step on both dispatch paths so the tape is a (prompt→completion) record; TapeTrainingExtractor folds runs to chat-JSONL, TapeDatasetCli emits it; spring-boot-ai-chat demos the durable tape</li> <li>session tape — durable typed AiEvent stream, resume, admin read Records the AiEndpointHandler + AiPipeline session seams to SQLite/in-memory TapeStore; late-bound runId, crash-resume segments, atmosphere_read_tape gated REQUIRE_PRINCIPAL; opt-in (atmosphere.ai.tape.enabled) across both Spring starters + Quarkus</li> <li>opt-in security-headers filter for app routes; mcp-server consumes it</li> <li>in-process sandboxed eval tool (Rhino) — deepagents eval parity Container-free 'eval' JS tool: sandboxed Rhino scope (deny-all ClassShutter, no java/Packages bridge, interpreted-mode instruction + wall-clock budget, fresh scope per call), default-off and runtime-truth gated via an optional dependency, registered at the shared agent/endpoint tool site. Closes the last deepagents capability gap; 14 tests pin the sandbox.</li> <li>add delete + rename file tools — deepagents file-tool parity The built-in filesystem floor grows from six to eight tools: delete (ToolKind.DELETE, approval-gateable) and rename, both bounds/traversal-guarded over the conversation-scoped AgentFileSystem, closing the delete gap vs LangChain deepagents. Updates every count/phrasing across code, tests, READMEs (six→eight), and the e2e tool-count pins (dentist + orchestration now log tools: 11 = 2 user + 9 harness) — both verified empirically from a booted sample.</li> <li>wire governance decision log to Postgres/Kafka audit sinks Config-gated auto-config installs JdbcAuditSink/KafkaAuditSink so admit+deny persist</li> <li>thread inbound image input onto the model request (vision)</li> <li>discover Cedar/Rego PolicyParser SPIs on the governance reload path</li> <li>wire configurable backpressure drop-policy into the broadcaster write path</li> <li>install path for the 5 missing governance admission stages PERMISSIONS.md now wires all 7 stages (rate-limit, concurrency, message-length, time-window, kill-switch)</li> <li>one-dependency streaming <a href="https://github.com/Agent";><code>@Agent</code></a> chat sample proving the blog claim Add spring-boot-one-dep-agent; make atmosphere-ai-spring-boot-starter pull the web server non-optionally so one dependency boots a running streaming chat app.</li> <li>add Checkpoints tab to admin Console over durable-run store</li> </ul> <h3>Fixed</h3> <ul> <li>isolate optional tape types from always-active admin/console signatures Direct atmosphere-ai tape refs were force-loaded by Spring getDeclaredMethods, crashing non-AI samples at startup; reads move to TapeAdminSupport + reflective hasTape probe</li> <li>protect WEB-INF/META-INF in embedded-jetty chat sample</li> <li>honor SERVER_PORT env in kotlin-dsl-chat + embedded-jetty-websocket-chat</li> <li>nonce-based strict CSP for the console + harden mcp-server root SPA</li> <li>harden CORS credentials, console headers, A2A JSON charset, error disclosure</li> <li>map spring-boot-one-dep-agent into the release-gate smoke shard Unmapped sample tripped the no-silent-caps gate; smoke tier (boot jar + GET /atmosphere/console/ == 200) verified locally</li> <li>keep ai-chat content-read secure by default; opt out only in the real-LLM demo run</li> <li>ms-governance-chat opts out content-read-auth so its Decisions tab renders token-less</li> <li>reject SSRF to internal targets in push-notification webhooks Deny loopback/private/link-local/metadata by default (delivery-time re-check for DNS rebinding); opt in via org.atmosphere.a2a.pushAllowPrivateTargets on trusted networks</li> <li>ai-chat opts out content-read-auth so the console Decisions tab renders token-less</li> <li>auth the governance/decisions poll (read-plane fail-close regression)</li> <li>bump rhino 1.7.15 to 1.7.15.1 (CVE-2025-66453)</li> <li>pin logback 1.5.37 in sample poms (CVE-2026-10532) samples re-import the Spring Boot BOM (logback 1.5.34); a direct version pin forces the patched line</li> <li>bump logback 1.5.33 to 1.5.37 (CVE-2026-10532 object injection)</li> <li>patch DoS vulns in test deps + pin org.json (Dependabot) ws 8.19→8.21 (CVE-2026-48779), <code>@grpc/grpc-js</code> 1.14.3→1.14.4 (GHSA-5375-pq7m-f5r2), org.json pinned 20250517</li> <li>add justified unrestricted <a href="https://github.com/AgentScope";><code>@AgentScope</code></a> to one-dep ChatAgent</li> <li>require auth for recorded-content admin reads by default governance/decisions, audit, journal expose prompt/response + coordination content — default-deny, Spring+Quarkus parity, opt-out content-read-auth-required</li> <li>sync capability skillcards + README to the 22-capability set</li> </ul> <h3>Changed</h3> <ul> <li>make compose-with-native-frameworks layering explicit across READMEs</li> <li>tempest campaign coverage overstated — ~8/32 genuinely tested, not 21</li> <li>document the unauthenticated channel posture and production hardening</li> <li>log drift — swept setup-java hardening on a stale local tree Enumerated verify-signature targets before rebasing onto origin/main; gate is fetch+rebase then re-enumerate before any push-bound sweep.</li> <li>GPG-verify Temurin JDK archives across all setup-java steps Fan out the dependency-submission verify-signature pilot; Oracle JDK 26 matrix leg gated off, graalvm skipped (both unsupported).</li> <li>run the coverage-map gate on push/PR, not just nightly A new samples/ dir missing its release-gate map entry now fails the introducing PR (build-free --list check) instead of the next nightly run</li> <li>bump the maven group across 26 directories with 1 update (<a href="https://redirect.github.com/Atmosphere/atmosphere/issues/2712";>#2712</a>)</li> <li>bump testcontainers.version from 1.20.6 to 1.21.4 (<a href="https://redirect.github.com/Atmosphere/atmosphere/issues/2702";>#2702</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Atmosphere/atmosphere/commit/31bbb22abc711ad4a40220b9b3915a4941e4561e";><code>31bbb22</code></a> release: Atmosphere 4.0.62</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/b2606da62ab44602be4316e09198656c5949654c";><code>b2606da</code></a> docs: make compose-with-native-frameworks layering explicit across READMEs</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/941f820860e1a3f7d7c310ce4aa9cc88f9be77fc";><code>941f820</code></a> feat(ai): session-tape replay — reconstruct a run and a multi-agent coordinat...</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/1e239403a85c7c6ef5995cfb3915f5ceb4152e02";><code>1e23940</code></a> fix(spring-boot): isolate optional tape types from always-active admin/consol...</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/d305e6a02056611ad34bf66e2a690c8f618fdfeb";><code>d305e6a</code></a> feat(console): Tape tab — browse recorded session tapes in the Atmosphere Con...</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/0532ae0bcf836a9f3352a0422851ab8ec92bf852";><code>0532ae0</code></a> fix(sample): protect WEB-INF/META-INF in embedded-jetty chat sample</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/4d058cff2d1ffaad1733dfcea5e19ad3f08c9227";><code>4d058cf</code></a> feat(ai): tape → training data — self-contained tape + TapeTrainingExtractor</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/8db213b0115ac20462497c6b1bf776ab2665b7dc";><code>8db213b</code></a> fix(samples): honor SERVER_PORT env in kotlin-dsl-chat + embedded-jetty-webso...</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/3d6ed5fa2ffb4bb61fb5a564867e9c657166a456";><code>3d6ed5f</code></a> feat(ai): session tape — durable typed AiEvent stream, resume, admin read</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/b0f6deb66608f2e6942b99488c5ee38607ef2b78";><code>b0f6deb</code></a> docs(drift-log): tempest campaign coverage overstated — ~8/32 genuinely teste...</li> <li>Additional commits viewable in <a href="https://github.com/Atmosphere/atmosphere/compare/atmosphere-project-3.1.0...atmosphere-4.0.62";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
