dependabot[bot] opened a new pull request, #3032: URL: https://github.com/apache/cxf/pull/3032
Bumps [org.atmosphere:atmosphere-runtime](https://github.com/Atmosphere/atmosphere) from 3.1.0 to 4.0.34. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Atmosphere/atmosphere/releases";>org.atmosphere:atmosphere-runtime's releases</a>.</em></p> <blockquote> <h2>Atmosphere 4.0.34</h2> <h2>✨ Added</h2> <ul> <li><strong>add validation gates for unchecked returns + no-op tests Architectural validation now fails on unchecked offer() and expect(true).toBe(true). Fixed 4 offer() calls (use add() or check return). Replaced 4 no-op specs with test.skip().</strong></li> <li><strong>bundle atmosphere-skills as classpath JAR for CI reliability</strong></li> <li><strong>migrate all skills to atmosphere-skills registry, remove local prompts</strong></li> <li><strong>SkillFileLoader with GitHub fallback + SHA-256 integrity, AgentRuntime.generate() PromptLoader.loadSkill() searches classpath -> disk cache -> GitHub with registry.json hash verification. skill: prefix in @Agent/<a href="https://github.com/Coordinator";><code>@Coordinator</code></a> skillFile. CollectingSession + generate() eliminate 4 duplicated sync adapters.</strong></li> <li><strong>add LlmResultEvaluator, rename QualityEvaluator to SanityCheck LLM judge uses active AgentRuntime; prompt from META-INF/skills/llm-judge/SKILL.md. Hardcoded evaluator renamed to SanityCheckEvaluator.</strong></li> <li><strong>configurable A2A timeouts, SqliteCheckpointStore, QualityResultEvaluator A2aAgentTransport.Timeouts record replaces magic numbers; CO_LOCATED preset for same-host agents. SqliteCheckpointStore persists checkpoints to SQLite. QualityResultEvaluator scores on length/structure/errors.</strong></li> <li><strong>add SqliteCheckpointStore and QualityResultEvaluator Persistent checkpoint store backed by SQLite (reuses durable-sessions pattern); built-in ResultEvaluator scoring on length, error indicators, and structure — no LLM required</strong></li> <li><strong>enable real A2A transport in multi-agent team, fix subtitle</strong></li> <li><strong>URL override forces A2A transport, enable in multi-agent sample</strong></li> <li><strong>extract pluggable RetryPolicy from hardcoded backoff Sealed RetryPolicy hierarchy (ExponentialBackoff, LinearBackoff, NoRetry) replaces hardcoded backoff in DefaultAgentProxy; backward-compatible via fromMaxRetries()</strong></li> <li><strong>add OpenAI Responses API support with previous_response_id continuation</strong></li> <li><strong>add per-agent resource limits and cancellable execution handles AgentLimits(timeout, maxTurns) via <a href="https://github.com/AgentRef";><code>@AgentRef</code></a>(timeoutMs=N), AgentExecution sealed interface with cancel()/join(), parallelCancellable() for non-blocking fan-out</strong></li> <li><strong>add agent activity model with real-time streaming AgentActivity sealed interface + StreamingActivityListener bridges fleet state to AiEvent.AgentStep over WebSocket; also adds remark-gfm for markdown table rendering</strong></li> </ul> <h2>🐛 Fixed</h2> <ul> <li>cli-runtime tests use pre-built JARs, not atmosphere run</li> <li>switch to auth-free sample, scope admin agents tab selector</li> <li>protocol mismatch fixes, selector ambiguities, skip incompatible tests</li> <li>improved WebTransport and admin test resilience</li> <li>inject auth token for admin event stream WebSocket connection</li> <li>WebTransport tests tolerate missing QUIC, admin timeout increase</li> <li>update 6 test specs for console UI migration</li> <li>correct CLI path resolution in cli-runtime.spec.ts</li> <li>move path collision check into hasUserDefinedAiEndpoint</li> <li>prevent default AI endpoint from overriding <a href="https://github.com/ManagedService";><code>@ManagedService</code></a> handlers</li> <li>add console-endpoint property, fix spring-boot-chat CI failure</li> <li>add tool-card/tool-activity test IDs, unskip demo-compatible tests</li> <li>skip LLM-dependent agui-chat UI tests to prevent CI failures</li> <li>add test IDs to console Vue components, fix E2E tests for console migration</li> <li>console endpoint detection for <a href="https://github.com/ManagedService";><code>@ManagedService</code></a> samples</li> <li>add atmosphere-ai dep for console-migrated samples</li> <li>add logback runtime deps to channels-chat sample</li> <li>auth guards on spring-boot3 admin, ThreadLocal leak, swallowed exceptions</li> <li>move field above method javadoc to fix JDK 26 unattached doc warning JDK 26 treats javadoc between a field and its method as unattached; -Werror promotes to error</li> <li>QUIC token handler warning, configurable draft negotiation P2: InsecureQuicTokenHandler logged with awareness message. P3: draft setting and response header configurable via system properties; response mirrors client draft header.</li> </ul> <h2>🔧 Changed</h2> <ul> <li>skip XSS and admin agents-tab tests pending <a href="https://redirect.github.com/Atmosphere/atmosphere/issues/2598";>#2598</a> selector fix</li> <li>add CLI runtime Playwright tests for console WebSocket verification</li> <li>wire CLI runtime E2E tests into CI workflow</li> <li>migrate 5 samples from custom UI to Atmosphere Console</li> <li>regression test for SlidingWindowCompaction all-system-messages hard cap Verifies compaction enforces maxMessages even when all messages are system role (Window 9 P2)</li> <li>add 6 regression tests for WebTransport review findings UTF-8 multibyte across chunks, findNewline byte scanner, AltSvc header gated on server running state</li> <li>update multi-agent README with all new features Activity streaming, SanityCheck/LlmResultEvaluator, SqliteCheckpointStore, skill: prefix, WebTransport discovery, remark-gfm journal tables</li> <li>bump version to 4.0.33</li> <li>prepare for next development iteration 4.0.34-SNAPSHOT</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Atmosphere/atmosphere/commit/1611e8b53b89ea7e904793b31cf19f359e6b4bda";><code>1611e8b</code></a> release: Atmosphere 4.0.34</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/b8f1fe6528fabf09e38fa02fec169b39c6d4d16b";><code>b8f1fe6</code></a> test(e2e): skip XSS and admin agents-tab tests pending <a href="https://redirect.github.com/Atmosphere/atmosphere/issues/2598";>#2598</a> selector fix</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/9a4575125491b20eceed6ceb277d924c0d6b4b13";><code>9a45751</code></a> fix(e2e): cli-runtime tests use pre-built JARs, not atmosphere run</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/d5cb23184b01078c147afe3c7a2d05b05b31e9ca";><code>d5cb231</code></a> fix(e2e): switch to auth-free sample, scope admin agents tab selector</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/c828ae3d6af4ac6721f9992e2f8921bfdd28bb9e";><code>c828ae3</code></a> fix(e2e): protocol mismatch fixes, selector ambiguities, skip incompatible tests</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/8b84516108246eb38bf8bf5d85461dfb1ef85bdc";><code>8b84516</code></a> fix(e2e): improved WebTransport and admin test resilience</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/dd98f921b10c3ebe716c505f38f1d964f0fa28f5";><code>dd98f92</code></a> fix(e2e): inject auth token for admin event stream WebSocket connection</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/aab11066a706f40a685ddb57d9e1c42f0163dc64";><code>aab1106</code></a> fix(e2e): WebTransport tests tolerate missing QUIC, admin timeout increase</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/de77c463a882fceca2d2a483b6abe584cbf046e5";><code>de77c46</code></a> fix(e2e): update 6 test specs for console UI migration</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/b3a193f99a5d039e8866c102be08ee5e3f3fa267";><code>b3a193f</code></a> fix(e2e): correct CLI path resolution in cli-runtime.spec.ts</li> <li>Additional commits viewable in <a href="https://github.com/Atmosphere/atmosphere/compare/atmosphere-project-3.1.0...atmosphere-4.0.34";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
