dependabot[bot] opened a new pull request, #3031: URL: https://github.com/apache/cxf/pull/3031
Bumps [org.atmosphere:atmosphere-runtime](https://github.com/Atmosphere/atmosphere) from 3.1.0 to 4.0.33. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Atmosphere/atmosphere/releases";>org.atmosphere:atmosphere-runtime's releases</a>.</em></p> <blockquote> <h2>Atmosphere 4.0.33</h2> <h2>🐛 Fixed</h2> <ul> <li>rename release.yml back to release-4x.yml (NPM OIDC path-sensitive)</li> </ul> <h2>🔧 Changed</h2> <ul> <li>bump version to 4.0.32</li> <li>prepare for next development iteration 4.0.33-SNAPSHOT</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/Atmosphere/atmosphere/compare/atmosphere-4.0.32...atmosphere-4.0.33";>https://github.com/Atmosphere/atmosphere/compare/atmosphere-4.0.32...atmosphere-4.0.33</a></p> <h2>Atmosphere 4.0.32</h2> <h2>✨ Added</h2> <ul> <li><strong>add JettyHttp3AsyncSupport — native HTTP/3 via Jetty 12 QUIC connector</strong></li> <li><strong>support container-managed executor injection via atmosphereExecutor bean</strong></li> <li><strong>full Quarkus auto-configuration for admin control plane JAX-RS AdminResource with all REST endpoints, CDI AdminProducer for AtmosphereAdmin bean, admin dashboard HTML, and build step for reflection and bean registration</strong></li> <li><strong>port admin auto-config to SB4 starter (default) Admin dashboard, REST API, metrics, and event stream now work with atmosphere-spring-boot-starter without -Pspring-boot3</strong></li> <li><em><em>add Observability tab with Micrometer metrics dashboard MetricsController queries MeterRegistry for atmosphere.</em> metrics; new /api/admin/metrics endpoint; Observability tab shows connections, broadcasts, latency, cache, backpressure, and AI/LLM metrics</em>*</li> <li><em><em>enable atmosphere-admin in ai-chat and multi-agent samples Adds atmosphere-admin dependency for /atmosphere/admin/ dashboard and /api/admin/</em> REST endpoints</em>*</li> <li><strong>add admin dashboard UI and Quarkus dependency (Phase 5+6) Self-contained HTML dashboard at /atmosphere/admin/ with live event feed; Quarkus runtime gets optional admin dep</strong></li> <li><strong>add MCP tools bridge and WebSocket event stream (Phase 3+4) AdminMcpBridge registers read/write tools via McpRegistry; AdminEventHandler streams events at /atmosphere/admin/events</strong></li> <li><strong>add session tracking, write operations, and task cancel (Phase 2) AgentSessionRegistry tracks active sessions; POST/DELETE endpoints for broadcast, disconnect, resume, destroy, and cancel</strong></li> <li><em><em>add atmosphere-admin control plane module (Phase 1) Read-only REST APIs at /api/admin/</em> for broadcasters, agents, coordinators, tasks, runtimes, and MCP registries</em>*</li> <li><strong>add JMH + load benchmarks with regression CI</strong></li> <li><strong>add atmosphere-checkpoint module with HITL sample + CLI</strong></li> </ul> <h2>🐛 Fixed</h2> <ul> <li>isolate Micrometer wiring in ConditionalOnClass inner class (TypeNotPresentException)</li> <li>restore SmartLifecycle for sidecar startup, keep AsyncSupport for detection</li> <li>gate sidecar on atmosphere.http3.enabled init param</li> <li>restore Jetty HTTP/3 test with CI-compatible page content check</li> <li>remove lsof/stdout checks from Jetty HTTP/3 tests (CI-incompatible)</li> <li>apply admin SmartLifecycle fix to spring-boot3-starter, use OTel API-only for native</li> <li>add quarkus-opentelemetry to quarkus-chat for MCP native image linking</li> <li>full project install + all admin deps in quarkus-chat for native image</li> <li>install all modules for Native Image CI (admin has many transitive deps)</li> <li>add quarkus-admin-extension to Samples CI, add micrometer to quarkus-chat</li> <li>use reflection for Jetty APIs in JettyHttp3AsyncSupport (GraalVM native)</li> <li>load HTTP/3 AsyncSupport by name to avoid NoClassDefFoundError in native image</li> <li>include quarkus-admin-extension in Native Image install step</li> <li>defer event handler to SmartLifecycle (BroadcasterFactory null at bean time)</li> <li>use keytool for HTTP/3 self-signed cert, add jetty-http3 to embedded sample</li> <li>null-guard AtmosphereAdmin when framework is unavailable Prevents NPE in FrameworkController/AgentController/AtmosphereHealth when framework is null (Quarkus fallback)</li> <li>fix Quarkus admin classloading and static resource serving Non-optional admin dep for Quarkus classloader compatibility; dashboard at /admin/ to avoid Atmosphere servlet conflict; retry-loop in CDI producer for framework init timing</li> <li>bundle servlet-api in uber JAR for Broadcaster benchmark</li> <li>discover headless agents and <a href="https://github.com/Coordinator";><code>@Coordinator</code></a> metadata in agents tab Scans MCP sub-paths to find headless agents without base handlers; checks both <a href="https://github.com/Agent";><code>@Agent</code></a> and <a href="https://github.com/Coordinator";><code>@Coordinator</code></a> annotations</li> </ul> <h2>🔧 Changed</h2> <ul> <li>rename workflows to categorized format (CI/Deploy/Release/Security)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Atmosphere/atmosphere/commit/a1a3201f670c292ca768a9d966bac468ff29440a";><code>a1a3201</code></a> release: Atmosphere 4.0.33</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/b63db9cf03ba182365b05effab1bb2b73e09aba5";><code>b63db9c</code></a> fix(ci): rename release.yml back to release-4x.yml (NPM OIDC path-sensitive)</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/633cc30a412c3ea226d6d36e2ac5abc4d7074d34";><code>633cc30</code></a> chore(cli): bump version to 4.0.32</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/a210ef5b8cbe1cde13eb76fc479ba45da132005e";><code>a210ef5</code></a> chore: prepare for next development iteration 4.0.33-SNAPSHOT</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/4d3760b943b377ef627296c716834d5d5a6d697d";><code>4d3760b</code></a> release: Atmosphere 4.0.32</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/2030d15908375052cc52f537e6d4d814d1345c35";><code>2030d15</code></a> fix(security): bump MCP SDK to 1.0.0 (CVE-2026-35568), fix Vite in all frontends</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/45ac317b5b0ae7dfaf3fe0b5b8b9c24cb2441648";><code>45ac317</code></a> fix(admin): isolate Micrometer wiring in ConditionalOnClass inner class (Type...</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/f152d249b8e0258468af922300b5796da0f4c511";><code>f152d24</code></a> fix(webtransport): restore SmartLifecycle for sidecar startup, keep AsyncSupp...</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/7a040aae5d67e7b153f5a9ca658d48ea669d5c78";><code>7a040aa</code></a> chore(ci): rename workflows to categorized format (CI/Deploy/Release/Security)</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/437d112ffa925fb608ff202d4c25d9e38afc23b1";><code>437d112</code></a> perf(ci): split E2E tests from 8 to 16 parallel groups for faster feedback</li> <li>Additional commits viewable in <a href="https://github.com/Atmosphere/atmosphere/compare/atmosphere-project-3.1.0...atmosphere-4.0.33";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
