dependabot[bot] opened a new pull request, #3621: URL: https://github.com/apache/cxf/pull/3621
Bumps [org.atmosphere:atmosphere-runtime](https://github.com/Atmosphere/atmosphere) from 3.1.0 to 4.0.75. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Atmosphere/atmosphere/releases";>org.atmosphere:atmosphere-runtime's releases</a>.</em></p> <blockquote> <h2>Atmosphere 4.0.75</h2> <h3>Added</h3> <ul> <li>every member of a broadcastReply room sees the prompts the others type</li> <li>a page reloaded mid-answer reattaches to its AI run</li> <li>name the timeout cancel reason in the client type and the Console</li> <li>add a cancellable model call to the reattach harness</li> <li>produce the application's AiEnvironment as a CDI bean</li> </ul> <h3>Fixed</h3> <ul> <li>a Clear before the first token discards this client's room turn, not another member's</li> <li>a room prompt is echoed only from the admission of the turn that streams it</li> <li>a reattached run streams like a turn the page started</li> <li>Expo classroom derives the streamed reply instead of copying it per token</li> <li>a handler a failed registration leaves unregistered lets go of its sweeper and timer holds</li> <li>endpoints hold the sweeper and grace timer from construction; none restarts unheld</li> <li>every way a reattached client stops listening decides for the run, once</li> <li>an endpoint's destroy cancels only the reattach graces of the runs it started</li> <li>an endpoint's destroy ends its own left-open runs and stops the sweeper only when unheld</li> <li>a reattached connection departing ends the run only once the one it started on is gone</li> <li>bound runs left open after their <a href="https://github.com/Prompt";><code>@Prompt</code></a> returns and reach them after a reattach</li> <li>a run whose <a href="https://github.com/Prompt";><code>@Prompt</code></a> returns with its session open ends with that session</li> <li>a room run ends for the room when its prompter leaves, its grace expires or the run ends</li> <li>show the working tabs and no chat when the app serves no chat endpoint</li> <li>redirect an unserved GET / to the Console with or without AI</li> <li>log an absent actuator on one DEBUG line, stack at TRACE</li> <li>advertise a chat endpoint only when a handler serves it</li> <li>warn once per provider about a missing VectorStore, then log at DEBUG</li> <li>a room member's reattach replays only the run events before it rejoined</li> <li>the same user reattaching under a new tracking id owns its room run</li> <li>a broadcastReply room run keeps broadcasting after its prompter's connection goes</li> <li>a room run remembers as many replay positions as the room takes members</li> <li>a refused run reattach warns once per run and tracking id, then logs at DEBUG</li> <li>a WebSocket or SSE room member reconnecting with the run id gets each later frame once</li> <li>only a room run's own client restarts or holds off its reattach grace</li> <li>a broadcastReply room member's waiting run-id poll holds the reattach grace off again</li> <li>a broadcastReply room member's run-id poll no longer waits on the run</li> <li>room members' long-polling replies never make a run forget a client that polled with its id</li> <li>a long-polling client's run replay keeps the frames it missed before a later one reached it</li> <li>long-polling room replies under shared listeners; own replies end the run replay</li> <li>route the 15 s dashboard tick through the same no-overlap refresh</li> <li>give every Console form field an id and a name</li> <li>label lone tool calls as Tool Calls; name the model in connect status</li> <li>report a WebTransport sample ready only once its HTTP/3 server started</li> <li>wait for a WebTransport sidecar that is still starting instead of staying on WebSocket</li> <li>join rooms and topics with the suspended connection, not a per-frame resource</li> <li>serve the agent card at agent-card.json with absolute interface URLs</li> <li>name SendMessage in the unauthenticated-endpoint warning</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Atmosphere/atmosphere/blob/main/CHANGELOG.md";>org.atmosphere:atmosphere-runtime's changelog</a>.</em></p> <blockquote> <h2>[4.0.75] - 2026-10-17</h2> <h3>Added</h3> <ul> <li>every member of a broadcastReply room sees the prompts the others type</li> <li>a page reloaded mid-answer reattaches to its AI run</li> <li>name the timeout cancel reason in the client type and the Console</li> <li>add a cancellable model call to the reattach harness</li> <li>produce the application's AiEnvironment as a CDI bean</li> </ul> <h3>Fixed</h3> <ul> <li>a Clear before the first token discards this client's room turn, not another member's</li> <li>a room prompt is echoed only from the admission of the turn that streams it</li> <li>a reattached run streams like a turn the page started</li> <li>Expo classroom derives the streamed reply instead of copying it per token</li> <li>a handler a failed registration leaves unregistered lets go of its sweeper and timer holds</li> <li>endpoints hold the sweeper and grace timer from construction; none restarts unheld</li> <li>every way a reattached client stops listening decides for the run, once</li> <li>an endpoint's destroy cancels only the reattach graces of the runs it started</li> <li>an endpoint's destroy ends its own left-open runs and stops the sweeper only when unheld</li> <li>a reattached connection departing ends the run only once the one it started on is gone</li> <li>bound runs left open after their <a href="https://github.com/Prompt";><code>@Prompt</code></a> returns and reach them after a reattach</li> <li>a run whose <a href="https://github.com/Prompt";><code>@Prompt</code></a> returns with its session open ends with that session</li> <li>a room run ends for the room when its prompter leaves, its grace expires or the run ends</li> <li>show the working tabs and no chat when the app serves no chat endpoint</li> <li>redirect an unserved GET / to the Console with or without AI</li> <li>log an absent actuator on one DEBUG line, stack at TRACE</li> <li>advertise a chat endpoint only when a handler serves it</li> <li>warn once per provider about a missing VectorStore, then log at DEBUG</li> <li>a room member's reattach replays only the run events before it rejoined</li> <li>the same user reattaching under a new tracking id owns its room run</li> <li>a broadcastReply room run keeps broadcasting after its prompter's connection goes</li> <li>a room run remembers as many replay positions as the room takes members</li> <li>a refused run reattach warns once per run and tracking id, then logs at DEBUG</li> <li>a WebSocket or SSE room member reconnecting with the run id gets each later frame once</li> <li>only a room run's own client restarts or holds off its reattach grace</li> <li>a broadcastReply room member's waiting run-id poll holds the reattach grace off again</li> <li>a broadcastReply room member's run-id poll no longer waits on the run</li> <li>room members' long-polling replies never make a run forget a client that polled with its id</li> <li>a long-polling client's run replay keeps the frames it missed before a later one reached it</li> <li>long-polling room replies under shared listeners; own replies end the run replay</li> <li>route the 15 s dashboard tick through the same no-overlap refresh</li> <li>give every Console form field an id and a name</li> <li>label lone tool calls as Tool Calls; name the model in connect status</li> <li>report a WebTransport sample ready only once its HTTP/3 server started</li> <li>wait for a WebTransport sidecar that is still starting instead of staying on WebSocket</li> <li>join rooms and topics with the suspended connection, not a per-frame resource</li> <li>serve the agent card at agent-card.json with absolute interface URLs</li> <li>name SendMessage in the unauthenticated-endpoint warning</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Atmosphere/atmosphere/commit/c5801b6325f5410a5fb507e987b6e9f8c1c44719";><code>c5801b6</code></a> release: Atmosphere 4.0.75</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/670b139d5e21a826e6337cda564a82b6b833355d";><code>670b139</code></a> ci(release): publish atmosphere.js only after the Maven release, unless the r...</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/1817621f5d4c0e8da4e5a199bd98d73bd6e9d2da";><code>1817621</code></a> test(ai): wait for the room member to receive the frame an <a href="https://github.com/Prompt";><code>@Prompt</code></a> sent befor...</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/1c5410bd172a43185ef8808715b051312537ec33";><code>1c5410b</code></a> chore(js): prepare next development version 5.0.51</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/d98fe2f0519b95ee1c025d68d9154fa84c1102ee";><code>d98fe2f</code></a> fix(console): a Clear before the first token discards this client's room turn...</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/aa72a34ca5aa732cb51efac8bcd534ff6a80ebb7";><code>aa72a34</code></a> fix(ai): a room prompt is echoed only from the admission of the turn that str...</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/8e202dc40b67b131f63e90e7b8ff45e685cda693";><code>8e202dc</code></a> feat(ai): every member of a broadcastReply room sees the prompts the others type</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/6343fe8aebbe8945ca733b9f348c7e0d0690a970";><code>6343fe8</code></a> ci: a dotted library key is not a Maven goal; atmosphere.js core cap 56KB</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/f0b7ffe300151f39433c518c2267f5986e2253ca";><code>f0b7ffe</code></a> fix(console): a reattached run streams like a turn the page started</li> <li><a href="https://github.com/Atmosphere/atmosphere/commit/0d521ea2e3877085ecaec025e013df4566320c07";><code>0d521ea</code></a> test(atmosphere.js): clear sessionStorage before each test</li> <li>Additional commits viewable in <a href="https://github.com/Atmosphere/atmosphere/compare/atmosphere-project-3.1.0...atmosphere-4.0.75";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
