dependabot[bot] opened a new pull request, #3049: URL: https://github.com/apache/cxf/pull/3049
Bumps [org.atmosphere:atmosphere-runtime](https://github.com/Atmosphere/atmosphere) from 3.1.0 to 4.0.38. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Atmosphere/atmosphere/releases";>org.atmosphere:atmosphere-runtime's releases</a>.</em></p> <blockquote> <h2>Atmosphere 4.0.38</h2> <h2>✨ Added</h2> <ul> <li><strong>reinstate PromptCacheDemoChat now that 4.0.37 is on Central</strong></li> </ul> <h2>🐛 Fixed</h2> <ul> <li>port CoordinationJournal bridge auto-config</li> <li>LocalAgentTransport resolves agents lazily to avoid startup race Candidate paths walked on every call; checkpoint-agent sample pulls atmosphere-a2a so <a href="https://github.com/Agent";><code>@Agent</code></a> handlers land at a resolvable A2A path.</li> <li>stop processor-owned journals on framework shutdown</li> <li>propagate coordinator name as JournalingAgentFleet.coordinationId Canonical id replaces UUID so REST filter ?coordination=dispatch matches snapshots.</li> <li>bridge Spring CoordinationJournal beans into the processor CoordinatorProcessor.resolveJournal now reads framework properties first so spring-boot-starter can wire <a href="https://github.com/Bean";><code>@Bean</code></a> journals; bridged journals are externally managed (no double start) and a new auto-config closes the durable HITL gap.</li> </ul> <h2>🔧 Changed</h2> <ul> <li>coverage sweep round 3 — ~1,650 new unit tests across cpr/ai/a2a/mcp/channels 179 files / 23k lines targeting previously-untested records, interceptors, handlers, protocols, utility classes.</li> <li>use hashFiles for Playwright cache key to avoid ordering bug Previous node -p require(...) resolver needed node_modules which only exists after npm ci; every leg failed at Resolve Playwright version.</li> <li>cache Playwright browsers + unmap broken specs surfaced by split Cache eliminates Microsoft CDN 403 install flake (~12min on random legs). ai-cancel/semantic-kernel-chat/admin-coverage/orchestration-primitives stay unmapped until their latent bugs are fixed; checkpoint-agent moves under gap-coordinator.</li> <li>split slow matrix groups and map unmapped Playwright projects Long pole drops from 15.6min (gap-admin SB3) to ~8min; ai-cancel, checkpoint-agent, semantic-kernel-chat, orchestration-primitives, admin-coverage now run in CI.</li> <li>add 15 unit tests for A2A types, Task, AgentCard, listener adapter</li> <li>add 36 unit tests for memory strategies, cache, budget, interceptors</li> <li>add 65 unit tests for AiEvent, AiCapability, McpMethod, McpMessage, ToolCall</li> <li>add 77 unit tests for util, interceptor, websocket, and core adapters</li> <li>add 26 unit tests for inject package providers and adapter</li> <li>add 66 unit tests for A2A types, WebSocket protocol, and handler</li> <li>add 54 unit tests for MCP protocol, registry, handlers, interceptors</li> <li>add 118 unit tests for 8 untested core classes</li> <li>use forks pool to isolate test file module state Threads pool reuse allowed polyfill singletons to leak across files; forks eliminates the webtransport.test.ts order-dependent flake.</li> <li>add tests for StringEscapeUtils, QueryStringDecoder, HeartbeatInterceptor</li> <li>add semantic-kernel-chat spec and register projects</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/Atmosphere/atmosphere/compare/atmosphere-4.0.37...atmosphere-4.0.38";>https://github.com/Atmosphere/atmosphere/compare/atmosphere-4.0.37...atmosphere-4.0.38</a></p> <h2>Atmosphere 4.0.37</h2> <h2>✨ Added</h2> <ul> <li><strong>4.0.36 e2e coverage sweep + framework fixes from audit Ten gap specs, two samples, five framework fixes (checkpoint/cache/binary/capability/HITL).</strong></li> <li><strong>rewrite cloned sample pom.xml for standalone compile Drops relativePath so atmosphere-project parent resolves from Maven Central, pins SNAPSHOT to release, skips repo-local checkstyle/pmd.</strong></li> <li><strong>runtime capability honesty pass — 7 runtimes declare honest capabilities</strong></li> <li><strong>clone samples for 'atmosphere new' instead of mustache templates Deletes AtmosphereInit.java + handler mustache + bash fallback; compose generator untouched.</strong></li> </ul> <h2>🐛 Fixed</h2> <ul> <li>drop PromptCacheDemoChat (requires 4.0.37-SNAPSHOT APIs) Sample demo used AiPipeline.setDefaultCachePolicy which is 4.0.37-only; sparse-clone against 4.0.36 parent broke ai-chat standalone compile. Framework cache-hit signal stays tested in ai-cache.spec.ts.</li> <li>await broadcaster subscribers in WAsync long-polling test Replaces brittle 10x5s retry loop with a subscriber-count precondition to eliminate the CI flake on slow runners.</li> <li>drop setDefaultCachePolicy from cloned ai-chat sample Method is 4.0.37-SNAPSHOT-only; sparse-clone compile against 4.0.36 parent fails at step 6.</li> <li>drop standalone-compile assertions from e2e runtime tests Clone-from-sample pom.xml inherits from the reactor parent; assert structure only. Also fix stale a2a-agent→agent template reference.</li> <li>align test-cli.sh + npx wrapper with sample-clone 'atmosphere new' Rewrites sections 12/12b/13 for the sparse-clone path; npx becomes a thin delegating shim.</li> <li>LC4j drops post-cancel errors; Settable records first-writer terminal reason RetryPolicy.isInheritSentinel formalises DEFAULT-as-inheritance contract</li> <li>use repository-dispatch + SITE_DISPATCH_TOKEN for docs sync Rewrites the atmosphere.github.io sync step to mirror the existing trigger-site-rebuild.yml pattern: fire a repository_dispatch event with the version in client_payload, let the sibling repo's own sync-version.yml workflow run its update script with its own GITHUB_TOKEN. No cross-repo cloning, no new token — reuses SITE_DISPATCH_TOKEN which already has dispatch scope on atmosphere.github.io.</li> <li>sync atmosphere.github.io sibling repo after Maven Central push New step in release-maven job clones atmosphere.github.io with DOCS_SITE_TOKEN, runs its own scripts/update-doc-versions.sh, and pushes. The sibling repo shipped 4.0.36 with 23 stale SNAPSHOT references and a 6-runtime Hero stat because the release workflow never touched it — this closes the cross-repo automation gap. When DOCS_SITE_TOKEN is unset the step emits a ::warning:: and exits 0 so missing auth is visible in CI instead of silent.</li> <li>catch two stale version patterns the doc-version script missed README.md "Current release: `X.Y.Z`" inline-code pattern and cli/sdkman/SUBMISSION.md "publish.sh X.Y.Z" example command both slipped past the tag-only and json-key regexes — 4.0.36 shipped with 4.0.36-SNAPSHOT and 4.0.35 respectively in these files. Adds two new sections to update-doc-versions.sh so the release-4x.yml workflow catches them next release, and backfills the current state to 4.0.36.</li> <li>paid nightly real-LLM workflow must build integration-tests module Same ClassNotFoundException on AiFeatureTestServer as the Ollama workflow had — the -pl target only installed modules/ai and modules/ai-test, but the Playwright fixture spawns exec:java inside modules/integration-tests which needs its own classes compiled. Mirror the Ollama workflow fix: -pl modules/integration-tests with -am pulls all transitive dependencies.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Atmosphere/atmosphere/commit/2fdfe98503f79ddaf86bc44f0f83405071ef5f7d";><code>2fdfe98</code></a> release: Atmosphere 4.0.38</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/632e7163d8f1a312145967fc206b90c5d9bfb625";><code>632e716</code></a> test: coverage sweep round 3 — ~1,650 new unit tests across cpr/ai/a2a/mcp/ch...</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/223b3153c25e57913c9ef45ebc40fe4ed4acd014";><code>223b315</code></a> ci(e2e): use hashFiles for Playwright cache key to avoid ordering bug</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/ece4a161cc72326b8b4921ef27cb5093a97705db";><code>ece4a16</code></a> ci(e2e): cache Playwright browsers + unmap broken specs surfaced by split</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/52916fcc06dea5323de0187151efb9ac5e794f56";><code>52916fc</code></a> ci(e2e): split slow matrix groups and map unmapped Playwright projects</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/a1237ec13acc635e9f970f75a72f2bfedb791bc7";><code>a1237ec</code></a> test(a2a,cpr): add 15 unit tests for A2A types, Task, AgentCard, listener ada...</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/74c50b0a5fb423c28d603c4d1d4bda8cf9d575bf";><code>74c50b0</code></a> test(ai,cpr): add 36 unit tests for memory strategies, cache, budget, interce...</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/6f0f6dfbc9d18c1082d6e854a22e5b0a1e59d6e1";><code>6f0f6df</code></a> test(ai,mcp): add 65 unit tests for AiEvent, AiCapability, McpMethod, McpMess...</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/0598e11ea09c7418e971bcbeb496d7c04d49d659";><code>0598e11</code></a> test(cpr): add 77 unit tests for util, interceptor, websocket, and core adapters</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/8b511aa45c3694f4c5f0131bda7de07f2e35871e";><code>8b511aa</code></a> test(cpr): add 26 unit tests for inject package providers and adapter</li> <li>Additional commits viewable in <a href="https://github.com/Atmosphere/atmosphere/compare/atmosphere-project-3.1.0...atmosphere-4.0.38";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
