Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.31

[dependabot]

Bumps org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.31.

Release notes

Sourced from org.atmosphere:atmosphere-runtime's releases.

Atmosphere 4.0.31

✨ Added

• migrate to JReleaser for Maven Central deploys

🔧 Changed

• add 19 Playwright E2E specs from gap analysis
• bump version to 4.0.30
• prepare next development version 5.0.22
• prepare for next development iteration 4.0.31-SNAPSHOT

Full Changelog: Atmosphere/atmosphere@atmosphere-4.0.30...atmosphere-4.0.31

Atmosphere 4.0.30

🐛 Fixed

• skip javadoc for Quarkus extension (broken module descriptors)
• replace flaky setTimeout waits with vi.waitFor in WebTransport tests
• add metadata and flatten plugin to Quarkus extension POMs
• remaining concurrency audit items (M2,M7,M8,M12,L1,L3,L10)
• thread safety audit across all modules

🔧 Changed

• modernize Java 21 patterns and add unit tests
• bump version to 4.0.29
• prepare next development version 5.0.21
• prepare for next development iteration 4.0.30-SNAPSHOT

Full Changelog: Atmosphere/atmosphere@atmosphere-4.0.29...atmosphere-4.0.30

Atmosphere 4.0.29

✨ Added

• add atmosphere compose to generate multi-agent projects from skill files Interactive wizard + JBang generator produces multi-module Maven projects with @​Coordinator, @​Fleet, A2A agents, docker-compose. 23 unit tests + 3 E2E tests (a2a-docker, single-jar, local).
• add E2E tests for agent and multiagent over WebTransport Enable WebTransport on ai-tools and multi-agent samples, fix info controller
• migrate a2a-agent and grpc-chat to shared atmosphere.js/chat UI Replace custom inline UIs with ChatLayout, ChatInput, MessageList, StreamingMessage for consistency
• bridge WebTransport data streams into AtmosphereFramework CONNECT → doCometSupport with AsyncIOWriter piping to QUIC stream; messages dispatch via POST
• bridge WebTransport data streams into AtmosphereFramework CONNECT → doCometSupport with AsyncIOWriter piping to QUIC stream; messages dispatch via POST
• bridge WebTransport data streams into AtmosphereFramework CONNECT → doCometSupport with AsyncIOWriter piping to QUIC stream; messages dispatch via POST
• bridge WebTransport data streams into AtmosphereFramework CONNECT → doCometSupport with AsyncIOWriter piping to QUIC stream; messages dispatch via POST
• working WebTransport over HTTP/3 with Chrome Add draft-02 setting (0x2b603742), QPACK zero-config, sec-webtransport-http3-draft header
• raw Netty HTTP/3 server with ENABLE_CONNECT_PROTOCOL for WebTransport Switch from Reactor Netty HttpServer to raw Netty Http3ServerConnectionHandler with extended CONNECT
• add WebTransport over HTTP/3 support (#2493) SPI in cpr, Reactor Netty HTTP/3 sidecar + ECDSA cert pinning, WebTransportTransport client with fallback
• add ADK bridges, cross-runtime contract tests, tool event normalization AdkCompactionBridge maps to EventsCompactionConfig, AdkArtifactBridge wraps ArtifactStore as BaseArtifactService, AdkEventAdapter emits ToolStart/ToolResult from functionCalls/functionResponses, TCK tests for ADK/LangChain4j/SpringAI
• wire approval routing, disconnect lifecycle, compaction/artifact SPIs, ADK bridge Fixes gaps A-H from competitive deep-dive: approval fast-path, interceptor onDisconnect, AiCompactionStrategy, ArtifactStore, TOOL_APPROVAL capability, TCK base, doc hardening
• orchestration demo with working handoff and console routing Support→billing handoff visible in console UI, /status command works, console-info respects configured ai.path for multi-agent apps
• add orchestration demo with support→billing handoff and @​RequiresApproval Two @​Agent classes (support, billing), handoff on billing keywords, cancel_account requires approval, /status and /hours commands, demo mode without API key
• wire handoff() in AiStreamingSession with cycle guard and history transfer Resolves target agent from AtmosphereFramework, copies conversation history, emits AiEvent.Handoff, throws on nested handoffs
• wire approval gates into tool execution pipeline ToolDefinition carries approvalMessage/approvalTimeout from @​RequiresApproval, DefaultToolRegistry reads the annotation at scan time, ApprovalGateExecutor wraps the executor for all runtimes
• add approval gates with VT-parked strategy for human-in-the-loop tool execution @​RequiresApproval, ApprovalRegistry (ConcurrentHashMap), VirtualThreadApprovalStrategy (parks VT on CompletableFuture), /__approval/ prefix protocol, AiEvent.ApprovalRequired

... (truncated)

Commits

• 6dcddad release: Atmosphere 4.0.31
• d2511d1 feat(release): migrate to JReleaser for Maven Central deploys
• c32aa21 test(e2e): add 19 Playwright E2E specs from gap analysis
• b0c9a89 chore(cli): bump version to 4.0.30
• 9343e0e chore(js): prepare next development version 5.0.22
• fd5ade4 chore: prepare for next development iteration 4.0.31-SNAPSHOT
• fb39ca6 release: Atmosphere 4.0.30
• 743e564 fix(release): skip javadoc for Quarkus extension (broken module descriptors)
• c31ca58 fix(js): replace flaky setTimeout waits with vi.waitFor in WebTransport tests
• 9f12a77 fix(release): add metadata and flatten plugin to Quarkus extension POMs
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)