Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.62

[dependabot]

Bumps org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.62.

Release notes

Sourced from org.atmosphere:atmosphere-runtime's releases.

Atmosphere 4.0.62

Added

• session-tape replay — reconstruct a run and a multi-agent coordination tree TapeReplay reconstruct/reconstructTree (no model) + parentRunId linkage (withParentRun→A2A metadata) + tool-agent dispatch tape; gated /api/admin/tape/runs/{id}/replay + Console Replay tab; fixes A2A metadata-inherit and Resilient/Intercepting proxy propagation; docs (tutorial 36 + reference/tape + READMEs)
• Tape tab — browse recorded session tapes in the Atmosphere Console Adds gated /api/admin/tape read endpoints (runs + steps, content-read-auth per Inv#6) + hasTape runtime-truth flag + a Vue Tape tab (runs list + step detail) in the spring-boot-starter console
• tape → training data — self-contained tape + TapeTrainingExtractor Record the input prompt as a tape step on both dispatch paths so the tape is a (prompt→completion) record; TapeTrainingExtractor folds runs to chat-JSONL, TapeDatasetCli emits it; spring-boot-ai-chat demos the durable tape
• session tape — durable typed AiEvent stream, resume, admin read Records the AiEndpointHandler + AiPipeline session seams to SQLite/in-memory TapeStore; late-bound runId, crash-resume segments, atmosphere_read_tape gated REQUIRE_PRINCIPAL; opt-in (atmosphere.ai.tape.enabled) across both Spring starters + Quarkus
• opt-in security-headers filter for app routes; mcp-server consumes it
• in-process sandboxed eval tool (Rhino) — deepagents eval parity Container-free 'eval' JS tool: sandboxed Rhino scope (deny-all ClassShutter, no java/Packages bridge, interpreted-mode instruction + wall-clock budget, fresh scope per call), default-off and runtime-truth gated via an optional dependency, registered at the shared agent/endpoint tool site. Closes the last deepagents capability gap; 14 tests pin the sandbox.
• add delete + rename file tools — deepagents file-tool parity The built-in filesystem floor grows from six to eight tools: delete (ToolKind.DELETE, approval-gateable) and rename, both bounds/traversal-guarded over the conversation-scoped AgentFileSystem, closing the delete gap vs LangChain deepagents. Updates every count/phrasing across code, tests, READMEs (six→eight), and the e2e tool-count pins (dentist + orchestration now log tools: 11 = 2 user + 9 harness) — both verified empirically from a booted sample.
• wire governance decision log to Postgres/Kafka audit sinks Config-gated auto-config installs JdbcAuditSink/KafkaAuditSink so admit+deny persist
• thread inbound image input onto the model request (vision)
• discover Cedar/Rego PolicyParser SPIs on the governance reload path
• wire configurable backpressure drop-policy into the broadcaster write path
• install path for the 5 missing governance admission stages PERMISSIONS.md now wires all 7 stages (rate-limit, concurrency, message-length, time-window, kill-switch)
• one-dependency streaming @​Agent chat sample proving the blog claim Add spring-boot-one-dep-agent; make atmosphere-ai-spring-boot-starter pull the web server non-optionally so one dependency boots a running streaming chat app.
• add Checkpoints tab to admin Console over durable-run store

Fixed

• isolate optional tape types from always-active admin/console signatures Direct atmosphere-ai tape refs were force-loaded by Spring getDeclaredMethods, crashing non-AI samples at startup; reads move to TapeAdminSupport + reflective hasTape probe
• protect WEB-INF/META-INF in embedded-jetty chat sample
• honor SERVER_PORT env in kotlin-dsl-chat + embedded-jetty-websocket-chat
• nonce-based strict CSP for the console + harden mcp-server root SPA
• harden CORS credentials, console headers, A2A JSON charset, error disclosure
• map spring-boot-one-dep-agent into the release-gate smoke shard Unmapped sample tripped the no-silent-caps gate; smoke tier (boot jar + GET /atmosphere/console/ == 200) verified locally
• keep ai-chat content-read secure by default; opt out only in the real-LLM demo run
• ms-governance-chat opts out content-read-auth so its Decisions tab renders token-less
• reject SSRF to internal targets in push-notification webhooks Deny loopback/private/link-local/metadata by default (delivery-time re-check for DNS rebinding); opt in via org.atmosphere.a2a.pushAllowPrivateTargets on trusted networks
• ai-chat opts out content-read-auth so the console Decisions tab renders token-less
• auth the governance/decisions poll (read-plane fail-close regression)
• bump rhino 1.7.15 to 1.7.15.1 (CVE-2025-66453)
• pin logback 1.5.37 in sample poms (CVE-2026-10532) samples re-import the Spring Boot BOM (logback 1.5.34); a direct version pin forces the patched line
• bump logback 1.5.33 to 1.5.37 (CVE-2026-10532 object injection)
• patch DoS vulns in test deps + pin org.json (Dependabot) ws 8.19→8.21 (CVE-2026-48779), @​grpc/grpc-js 1.14.3→1.14.4 (GHSA-5375-pq7m-f5r2), org.json pinned 20250517
• add justified unrestricted @​AgentScope to one-dep ChatAgent
• require auth for recorded-content admin reads by default governance/decisions, audit, journal expose prompt/response + coordination content — default-deny, Spring+Quarkus parity, opt-out content-read-auth-required
• sync capability skillcards + README to the 22-capability set

Changed

• make compose-with-native-frameworks layering explicit across READMEs
• tempest campaign coverage overstated — ~8/32 genuinely tested, not 21
• document the unauthenticated channel posture and production hardening
• log drift — swept setup-java hardening on a stale local tree Enumerated verify-signature targets before rebasing onto origin/main; gate is fetch+rebase then re-enumerate before any push-bound sweep.
• GPG-verify Temurin JDK archives across all setup-java steps Fan out the dependency-submission verify-signature pilot; Oracle JDK 26 matrix leg gated off, graalvm skipped (both unsupported).
• run the coverage-map gate on push/PR, not just nightly A new samples/ dir missing its release-gate map entry now fails the introducing PR (build-free --list check) instead of the next nightly run
• bump the maven group across 26 directories with 1 update (#2712)
• bump testcontainers.version from 1.20.6 to 1.21.4 (#2702)

... (truncated)

Changelog

Sourced from org.atmosphere:atmosphere-runtime's changelog.

[4.0.62] - 2026-07-14

Added

• session-tape replay — reconstruct a run and a multi-agent coordination tree TapeReplay reconstruct/reconstructTree (no model) + parentRunId linkage (withParentRun→A2A metadata) + tool-agent dispatch tape; gated /api/admin/tape/runs/{id}/replay + Console Replay tab; fixes A2A metadata-inherit and Resilient/Intercepting proxy propagation; docs (tutorial 36 + reference/tape + READMEs)
• Tape tab — browse recorded session tapes in the Atmosphere Console Adds gated /api/admin/tape read endpoints (runs + steps, content-read-auth per Inv#6) + hasTape runtime-truth flag + a Vue Tape tab (runs list + step detail) in the spring-boot-starter console
• tape → training data — self-contained tape + TapeTrainingExtractor Record the input prompt as a tape step on both dispatch paths so the tape is a (prompt→completion) record; TapeTrainingExtractor folds runs to chat-JSONL, TapeDatasetCli emits it; spring-boot-ai-chat demos the durable tape
• session tape — durable typed AiEvent stream, resume, admin read Records the AiEndpointHandler + AiPipeline session seams to SQLite/in-memory TapeStore; late-bound runId, crash-resume segments, atmosphere_read_tape gated REQUIRE_PRINCIPAL; opt-in (atmosphere.ai.tape.enabled) across both Spring starters + Quarkus
• opt-in security-headers filter for app routes; mcp-server consumes it
• in-process sandboxed eval tool (Rhino) — deepagents eval parity Container-free 'eval' JS tool: sandboxed Rhino scope (deny-all ClassShutter, no java/Packages bridge, interpreted-mode instruction + wall-clock budget, fresh scope per call), default-off and runtime-truth gated via an optional dependency, registered at the shared agent/endpoint tool site. Closes the last deepagents capability gap; 14 tests pin the sandbox.
• add delete + rename file tools — deepagents file-tool parity The built-in filesystem floor grows from six to eight tools: delete (ToolKind.DELETE, approval-gateable) and rename, both bounds/traversal-guarded over the conversation-scoped AgentFileSystem, closing the delete gap vs LangChain deepagents. Updates every count/phrasing across code, tests, READMEs (six→eight), and the e2e tool-count pins (dentist + orchestration now log tools: 11 = 2 user + 9 harness) — both verified empirically from a booted sample.
• wire governance decision log to Postgres/Kafka audit sinks Config-gated auto-config installs JdbcAuditSink/KafkaAuditSink so admit+deny persist
• thread inbound image input onto the model request (vision)
• discover Cedar/Rego PolicyParser SPIs on the governance reload path
• wire configurable backpressure drop-policy into the broadcaster write path
• install path for the 5 missing governance admission stages PERMISSIONS.md now wires all 7 stages (rate-limit, concurrency, message-length, time-window, kill-switch)
• one-dependency streaming @​Agent chat sample proving the blog claim Add spring-boot-one-dep-agent; make atmosphere-ai-spring-boot-starter pull the web server non-optionally so one dependency boots a running streaming chat app.
• add Checkpoints tab to admin Console over durable-run store

Fixed

• isolate optional tape types from always-active admin/console signatures Direct atmosphere-ai tape refs were force-loaded by Spring getDeclaredMethods, crashing non-AI samples at startup; reads move to TapeAdminSupport + reflective hasTape probe
• protect WEB-INF/META-INF in embedded-jetty chat sample
• honor SERVER_PORT env in kotlin-dsl-chat + embedded-jetty-websocket-chat
• nonce-based strict CSP for the console + harden mcp-server root SPA
• harden CORS credentials, console headers, A2A JSON charset, error disclosure
• map spring-boot-one-dep-agent into the release-gate smoke shard Unmapped sample tripped the no-silent-caps gate; smoke tier (boot jar + GET /atmosphere/console/ == 200) verified locally
• keep ai-chat content-read secure by default; opt out only in the real-LLM demo run
• ms-governance-chat opts out content-read-auth so its Decisions tab renders token-less
• reject SSRF to internal targets in push-notification webhooks Deny loopback/private/link-local/metadata by default (delivery-time re-check for DNS rebinding); opt in via org.atmosphere.a2a.pushAllowPrivateTargets on trusted networks
• ai-chat opts out content-read-auth so the console Decisions tab renders token-less
• auth the governance/decisions poll (read-plane fail-close regression)
• bump rhino 1.7.15 to 1.7.15.1 (CVE-2025-66453)
• pin logback 1.5.37 in sample poms (CVE-2026-10532) samples re-import the Spring Boot BOM (logback 1.5.34); a direct version pin forces the patched line
• bump logback 1.5.33 to 1.5.37 (CVE-2026-10532 object injection)
• patch DoS vulns in test deps + pin org.json (Dependabot) ws 8.19→8.21 (CVE-2026-48779), @​grpc/grpc-js 1.14.3→1.14.4 (GHSA-5375-pq7m-f5r2), org.json pinned 20250517
• add justified unrestricted @​AgentScope to one-dep ChatAgent
• require auth for recorded-content admin reads by default governance/decisions, audit, journal expose prompt/response + coordination content — default-deny, Spring+Quarkus parity, opt-out content-read-auth-required
• sync capability skillcards + README to the 22-capability set

Changed

• make compose-with-native-frameworks layering explicit across READMEs
• tempest campaign coverage overstated — ~8/32 genuinely tested, not 21
• document the unauthenticated channel posture and production hardening
• log drift — swept setup-java hardening on a stale local tree Enumerated verify-signature targets before rebasing onto origin/main; gate is fetch+rebase then re-enumerate before any push-bound sweep.
• GPG-verify Temurin JDK archives across all setup-java steps Fan out the dependency-submission verify-signature pilot; Oracle JDK 26 matrix leg gated off, graalvm skipped (both unsupported).
• run the coverage-map gate on push/PR, not just nightly A new samples/ dir missing its release-gate map entry now fails the introducing PR (build-free --list check) instead of the next nightly run
• bump the maven group across 26 directories with 1 update (#2712)
• bump testcontainers.version from 1.20.6 to 1.21.4 (#2702)

... (truncated)

Commits

• 31bbb22 release: Atmosphere 4.0.62
• b2606da docs: make compose-with-native-frameworks layering explicit across READMEs
• 941f820 feat(ai): session-tape replay — reconstruct a run and a multi-agent coordinat...
• 1e23940 fix(spring-boot): isolate optional tape types from always-active admin/consol...
• d305e6a feat(console): Tape tab — browse recorded session tapes in the Atmosphere Con...
• 0532ae0 fix(sample): protect WEB-INF/META-INF in embedded-jetty chat sample
• 4d058cf feat(ai): tape → training data — self-contained tape + TapeTrainingExtractor
• 8db213b fix(samples): honor SERVER_PORT env in kotlin-dsl-chat + embedded-jetty-webso...
• 3d6ed5f feat(ai): session tape — durable typed AiEvent stream, resume, admin read
• b0f6deb docs(drift-log): tempest campaign coverage overstated — ~8/32 genuinely teste...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #3330.