Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.38

[dependabot]

Bumps org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.38.

Release notes

Sourced from org.atmosphere:atmosphere-runtime's releases.

Atmosphere 4.0.38

✨ Added

• reinstate PromptCacheDemoChat now that 4.0.37 is on Central

🐛 Fixed

• port CoordinationJournal bridge auto-config
• LocalAgentTransport resolves agents lazily to avoid startup race Candidate paths walked on every call; checkpoint-agent sample pulls atmosphere-a2a so @​Agent handlers land at a resolvable A2A path.
• stop processor-owned journals on framework shutdown
• propagate coordinator name as JournalingAgentFleet.coordinationId Canonical id replaces UUID so REST filter ?coordination=dispatch matches snapshots.
• bridge Spring CoordinationJournal beans into the processor CoordinatorProcessor.resolveJournal now reads framework properties first so spring-boot-starter can wire @​Bean journals; bridged journals are externally managed (no double start) and a new auto-config closes the durable HITL gap.

🔧 Changed

• coverage sweep round 3 — ~1,650 new unit tests across cpr/ai/a2a/mcp/channels 179 files / 23k lines targeting previously-untested records, interceptors, handlers, protocols, utility classes.
• use hashFiles for Playwright cache key to avoid ordering bug Previous node -p require(...) resolver needed node_modules which only exists after npm ci; every leg failed at Resolve Playwright version.
• cache Playwright browsers + unmap broken specs surfaced by split Cache eliminates Microsoft CDN 403 install flake (~12min on random legs). ai-cancel/semantic-kernel-chat/admin-coverage/orchestration-primitives stay unmapped until their latent bugs are fixed; checkpoint-agent moves under gap-coordinator.
• split slow matrix groups and map unmapped Playwright projects Long pole drops from 15.6min (gap-admin SB3) to ~8min; ai-cancel, checkpoint-agent, semantic-kernel-chat, orchestration-primitives, admin-coverage now run in CI.
• add 15 unit tests for A2A types, Task, AgentCard, listener adapter
• add 36 unit tests for memory strategies, cache, budget, interceptors
• add 65 unit tests for AiEvent, AiCapability, McpMethod, McpMessage, ToolCall
• add 77 unit tests for util, interceptor, websocket, and core adapters
• add 26 unit tests for inject package providers and adapter
• add 66 unit tests for A2A types, WebSocket protocol, and handler
• add 54 unit tests for MCP protocol, registry, handlers, interceptors
• add 118 unit tests for 8 untested core classes
• use forks pool to isolate test file module state Threads pool reuse allowed polyfill singletons to leak across files; forks eliminates the webtransport.test.ts order-dependent flake.
• add tests for StringEscapeUtils, QueryStringDecoder, HeartbeatInterceptor
• add semantic-kernel-chat spec and register projects

Full Changelog: Atmosphere/atmosphere@atmosphere-4.0.37...atmosphere-4.0.38

Atmosphere 4.0.37

✨ Added

• 4.0.36 e2e coverage sweep + framework fixes from audit Ten gap specs, two samples, five framework fixes (checkpoint/cache/binary/capability/HITL).
• rewrite cloned sample pom.xml for standalone compile Drops relativePath so atmosphere-project parent resolves from Maven Central, pins SNAPSHOT to release, skips repo-local checkstyle/pmd.
• runtime capability honesty pass — 7 runtimes declare honest capabilities
• clone samples for 'atmosphere new' instead of mustache templates Deletes AtmosphereInit.java + handler mustache + bash fallback; compose generator untouched.

🐛 Fixed

• drop PromptCacheDemoChat (requires 4.0.37-SNAPSHOT APIs) Sample demo used AiPipeline.setDefaultCachePolicy which is 4.0.37-only; sparse-clone against 4.0.36 parent broke ai-chat standalone compile. Framework cache-hit signal stays tested in ai-cache.spec.ts.
• await broadcaster subscribers in WAsync long-polling test Replaces brittle 10x5s retry loop with a subscriber-count precondition to eliminate the CI flake on slow runners.
• drop setDefaultCachePolicy from cloned ai-chat sample Method is 4.0.37-SNAPSHOT-only; sparse-clone compile against 4.0.36 parent fails at step 6.
• drop standalone-compile assertions from e2e runtime tests Clone-from-sample pom.xml inherits from the reactor parent; assert structure only. Also fix stale a2a-agent→agent template reference.
• align test-cli.sh + npx wrapper with sample-clone 'atmosphere new' Rewrites sections 12/12b/13 for the sparse-clone path; npx becomes a thin delegating shim.
• LC4j drops post-cancel errors; Settable records first-writer terminal reason RetryPolicy.isInheritSentinel formalises DEFAULT-as-inheritance contract
• use repository-dispatch + SITE_DISPATCH_TOKEN for docs sync Rewrites the atmosphere.github.io sync step to mirror the existing trigger-site-rebuild.yml pattern: fire a repository_dispatch event with the version in client_payload, let the sibling repo's own sync-version.yml workflow run its update script with its own GITHUB_TOKEN. No cross-repo cloning, no new token — reuses SITE_DISPATCH_TOKEN which already has dispatch scope on atmosphere.github.io.
• sync atmosphere.github.io sibling repo after Maven Central push New step in release-maven job clones atmosphere.github.io with DOCS_SITE_TOKEN, runs its own scripts/update-doc-versions.sh, and pushes. The sibling repo shipped 4.0.36 with 23 stale SNAPSHOT references and a 6-runtime Hero stat because the release workflow never touched it — this closes the cross-repo automation gap. When DOCS_SITE_TOKEN is unset the step emits a ::warning:: and exits 0 so missing auth is visible in CI instead of silent.
• catch two stale version patterns the doc-version script missed README.md "Current release: `X.Y.Z`" inline-code pattern and cli/sdkman/SUBMISSION.md "publish.sh X.Y.Z" example command both slipped past the tag-only and json-key regexes — 4.0.36 shipped with 4.0.36-SNAPSHOT and 4.0.35 respectively in these files. Adds two new sections to update-doc-versions.sh so the release-4x.yml workflow catches them next release, and backfills the current state to 4.0.36.
• paid nightly real-LLM workflow must build integration-tests module Same ClassNotFoundException on AiFeatureTestServer as the Ollama workflow had — the -pl target only installed modules/ai and modules/ai-test, but the Playwright fixture spawns exec:java inside modules/integration-tests which needs its own classes compiled. Mirror the Ollama workflow fix: -pl modules/integration-tests with -am pulls all transitive dependencies.

... (truncated)

Commits

• 2fdfe98 release: Atmosphere 4.0.38
• 632e716 test: coverage sweep round 3 — ~1,650 new unit tests across cpr/ai/a2a/mcp/ch...
• 223b315 ci(e2e): use hashFiles for Playwright cache key to avoid ordering bug
• ece4a16 ci(e2e): cache Playwright browsers + unmap broken specs surfaced by split
• 52916fc ci(e2e): split slow matrix groups and map unmapped Playwright projects
• a1237ec test(a2a,cpr): add 15 unit tests for A2A types, Task, AgentCard, listener ada...
• 74c50b0 test(ai,cpr): add 36 unit tests for memory strategies, cache, budget, interce...
• 6f0f6df test(ai,mcp): add 65 unit tests for AiEvent, AiCapability, McpMethod, McpMess...
• 0598e11 test(cpr): add 77 unit tests for util, interceptor, websocket, and core adapters
• 8b511aa test(cpr): add 26 unit tests for inject package providers and adapter
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #3058.