Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.29

[dependabot]

Bumps org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.29.

Release notes

Sourced from org.atmosphere:atmosphere-runtime's releases.

Atmosphere 4.0.29

✨ Added

• add atmosphere compose to generate multi-agent projects from skill files Interactive wizard + JBang generator produces multi-module Maven projects with @​Coordinator, @​Fleet, A2A agents, docker-compose. 23 unit tests + 3 E2E tests (a2a-docker, single-jar, local).
• add E2E tests for agent and multiagent over WebTransport Enable WebTransport on ai-tools and multi-agent samples, fix info controller
• migrate a2a-agent and grpc-chat to shared atmosphere.js/chat UI Replace custom inline UIs with ChatLayout, ChatInput, MessageList, StreamingMessage for consistency
• bridge WebTransport data streams into AtmosphereFramework CONNECT → doCometSupport with AsyncIOWriter piping to QUIC stream; messages dispatch via POST
• bridge WebTransport data streams into AtmosphereFramework CONNECT → doCometSupport with AsyncIOWriter piping to QUIC stream; messages dispatch via POST
• bridge WebTransport data streams into AtmosphereFramework CONNECT → doCometSupport with AsyncIOWriter piping to QUIC stream; messages dispatch via POST
• bridge WebTransport data streams into AtmosphereFramework CONNECT → doCometSupport with AsyncIOWriter piping to QUIC stream; messages dispatch via POST
• working WebTransport over HTTP/3 with Chrome Add draft-02 setting (0x2b603742), QPACK zero-config, sec-webtransport-http3-draft header
• raw Netty HTTP/3 server with ENABLE_CONNECT_PROTOCOL for WebTransport Switch from Reactor Netty HttpServer to raw Netty Http3ServerConnectionHandler with extended CONNECT
• add WebTransport over HTTP/3 support (#2493) SPI in cpr, Reactor Netty HTTP/3 sidecar + ECDSA cert pinning, WebTransportTransport client with fallback
• add ADK bridges, cross-runtime contract tests, tool event normalization AdkCompactionBridge maps to EventsCompactionConfig, AdkArtifactBridge wraps ArtifactStore as BaseArtifactService, AdkEventAdapter emits ToolStart/ToolResult from functionCalls/functionResponses, TCK tests for ADK/LangChain4j/SpringAI
• wire approval routing, disconnect lifecycle, compaction/artifact SPIs, ADK bridge Fixes gaps A-H from competitive deep-dive: approval fast-path, interceptor onDisconnect, AiCompactionStrategy, ArtifactStore, TOOL_APPROVAL capability, TCK base, doc hardening
• orchestration demo with working handoff and console routing Support→billing handoff visible in console UI, /status command works, console-info respects configured ai.path for multi-agent apps
• add orchestration demo with support→billing handoff and @​RequiresApproval Two @​Agent classes (support, billing), handoff on billing keywords, cancel_account requires approval, /status and /hours commands, demo mode without API key
• wire handoff() in AiStreamingSession with cycle guard and history transfer Resolves target agent from AtmosphereFramework, copies conversation history, emits AiEvent.Handoff, throws on nested handoffs
• wire approval gates into tool execution pipeline ToolDefinition carries approvalMessage/approvalTimeout from @​RequiresApproval, DefaultToolRegistry reads the annotation at scan time, ApprovalGateExecutor wraps the executor for all runtimes
• add approval gates with VT-parked strategy for human-in-the-loop tool execution @​RequiresApproval, ApprovalRegistry (ConcurrentHashMap), VirtualThreadApprovalStrategy (parks VT on CompletableFuture), /__approval/ prefix protocol, AiEvent.ApprovalRequired
• add long-term memory with pluggable extraction strategies LongTermMemory SPI, InMemoryLongTermMemory (ReentrantLock, VT-safe), LongTermMemoryInterceptor, SemanticRecallInterceptor (graceful no-op), 3 strategies (onSessionClose, perMessage, periodic)
• add agent handoffs, routing, and handoff event to coordinator session.handoff() with cycle guard, memory.copyTo(), AiEvent.Handoff, CoordinationEvent.AgentHandoff, fleet.route() integration with journaling
• add LLM-as-judge eval assertions (meetsIntent, isGroundedIn, hasQuality) LlmJudge uses a configurable AgentRuntime to score agent responses on intent, grounding, relevance, coherence, and safety via structured JSON prompts

🐛 Fixed

• add javadoc JARs for Kotlin modules, include embabel in deploy
• remove shared-resources from exclusion (not a Maven module)
• exclude koog-chat, orchestration-demo, shared-resources from deploy
• tag longPolling test as flaky, exclude from release validation
• tag rag-chat multi-turn as @​flaky (LLM timeout on CI)
• sync local homebrew formula with tap (4.0.28 + real SHA256)
• tag LLM-dependent tests as @​flaky, set INCLUDE_FLAKY=false in CI
• remove never-green approval UI console test (broken locator)
• remove never-green approval UI console test (broken locator)
• add AuthConfig to ai-chat sample, rename console CSS classes auth-token E2E now passes with TokenValidator + login endpoint + refresh
• register RoomProtocolInterceptor as bean for fat-JAR compatibility
• revert chat to WebSocket default, skip room-typing-direct tests
• mark room-typing-direct tests as @​flaky pending room protocol fix
• check wtInfo.enabled before setting webTransportUrl
• append newline delimiter to byte writes for streaming events
• skip auth-token rejection tests until auth interceptor is configured
• increase timeouts and fix locator for approval UI and room typing tests
• graceful degradation when self-signed cert fails in native image
• increase test timeouts for CI readLoop close detection
• fix ByteBuf leak in fragmented varint header parsing

🔧 Changed

• add auth, WebTransport details, compose, update sample table to 20
• raise bundle size limit from 32KB to 40KB for WebTransport
• link atmosphere-skills registry from main README

... (truncated)

Commits

• 167ef24 release: Atmosphere 4.0.29
• 1e3bd07 fix(release): add javadoc JARs for Kotlin modules, include embabel in deploy
• fbc8e48 fix(release): remove shared-resources from exclusion (not a Maven module)
• a8ff682 fix(release): exclude koog-chat, orchestration-demo, shared-resources from de...
• ad420c2 fix(release): tag longPolling test as flaky, exclude from release validation
• 14315d6 docs(readme): add auth, WebTransport details, compose, update sample table to 20
• ec5d996 fix(e2e): tag rag-chat multi-turn as @​flaky (LLM timeout on CI)
• 81faaf9 fix(cli): sync local homebrew formula with tap (4.0.28 + real SHA256)
• 2fb0a92 fix(e2e): tag LLM-dependent tests as @​flaky, set INCLUDE_FLAKY=false in CI
• dd4885e fix(e2e): remove never-green approval UI console test (broken locator)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #3027.