Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.46

[dependabot]

Bumps org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.46.

Release notes

Sourced from org.atmosphere:atmosphere-runtime's releases.

Atmosphere 4.0.46

Added

• Spring AI Alibaba: unconditional TOOL_CALLING / TOOL_APPROVAL / TOKEN_USAGE (534317f03d) — UsageCapturingChatModel wraps the configured Spring AI ChatModel bean at auto-configuration time; per-thread accumulator captures ChatResponseMetadata.getUsage() across every step of the ReAct graph and emits a single session.usage(TokenUsage) after each dispatch. Tool calling is no longer gated on staticChatModel != null — SpringAiAlibabaToolBridge is wired on every dispatch with tools, and the runtime fails fast with configurationHint() if ChatModel is missing. Closes the last conditional capability gap from the runtime parity push (62a9b7e6af).
• RAG vector-store matrix expanded with three direct connectors (31d6455a75): PgVectorContextProvider (Postgres + pgvector via JDBC), QdrantContextProvider (Qdrant REST over java.net.http.HttpClient), and PineconeContextProvider (Pinecone REST). Each connector embeds the user query through EmbeddingRuntime, validates caller-controlled identifiers at construction time per Boundary-Safety invariant, and ships with a Mockito-backed unit-test suite. modules/rag/README.md adds a reachability matrix showing the six direct providers plus the Spring AI / LangChain4j bridges covering the long tail (Weaviate, Milvus, Chroma, Elasticsearch, Redis Stack, MongoDB Atlas, OpenSearch, Cassandra).
• Workflow authoring inside the admin control plane (81ff454177) — WorkflowManifest JSON record, WorkflowStore SPI with InMemoryWorkflowStore default and optimistic-concurrency version conflict detection, WorkflowController with ControlAuthorizer gating plus audit-log entries on every save / delete, Spring Boot endpoint exposes GET/POST/DELETE /api/admin/workflow, and /atmosphere/admin/workflow.html ships a vanilla-JS authoring UI that lists / creates / edits manifests against the REST surface.
• Eval dashboard inside the admin control plane (38e2a45920) — EvalRun JSON record, EvalRunStore SPI with bounded-ring-buffer InMemoryEvalRunStore default (500 runs per baseline, oldest-evicted), EvalController aggregates pass-rate per baseline, Spring Boot endpoint exposes GET/POST/DELETE /api/admin/evals/{runs,baselines}, and /atmosphere/admin/evals.html surfaces pass-rate meters + recent-run table with auto-refresh. CI submits a JSON body per LLM-as-judge run and the dashboard surfaces the trend without leaving the control plane.
• atmosphere-admin-bundle enterprise console aggregator (eaad0df089) — single Maven pom-packaging artifact that transitively pulls in atmosphere-spring-boot-starter, atmosphere-admin, atmosphere-ai, atmosphere-coordinator, atmosphere-agent, atmosphere-rag, atmosphere-checkpoint, atmosphere-durable-sessions, and

... (truncated)

Changelog

Sourced from org.atmosphere:atmosphere-runtime's changelog.

[4.0.46] - 2026-05-16

Added

• Spring AI Alibaba: unconditional TOOL_CALLING / TOOL_APPROVAL / TOKEN_USAGE (534317f03d) — UsageCapturingChatModel wraps the configured Spring AI ChatModel bean at auto-configuration time; per-thread accumulator captures ChatResponseMetadata.getUsage() across every step of the ReAct graph and emits a single session.usage(TokenUsage) after each dispatch. Tool calling is no longer gated on staticChatModel != null — SpringAiAlibabaToolBridge is wired on every dispatch with tools, and the runtime fails fast with configurationHint() if ChatModel is missing. Closes the last conditional capability gap from the runtime parity push (62a9b7e6af).
• RAG vector-store matrix expanded with three direct connectors (31d6455a75): PgVectorContextProvider (Postgres + pgvector via JDBC), QdrantContextProvider (Qdrant REST over java.net.http.HttpClient), and PineconeContextProvider (Pinecone REST). Each connector embeds the user query through EmbeddingRuntime, validates caller-controlled identifiers at construction time per Boundary-Safety invariant, and ships with a Mockito-backed unit-test suite. modules/rag/README.md adds a reachability matrix showing the six direct providers plus the Spring AI / LangChain4j bridges covering the long tail (Weaviate, Milvus, Chroma, Elasticsearch, Redis Stack, MongoDB Atlas, OpenSearch, Cassandra).
• Workflow authoring inside the admin control plane (81ff454177) — WorkflowManifest JSON record, WorkflowStore SPI with InMemoryWorkflowStore default and optimistic-concurrency version conflict detection, WorkflowController with ControlAuthorizer gating plus audit-log entries on every save / delete, Spring Boot endpoint exposes GET/POST/DELETE /api/admin/workflow, and /atmosphere/admin/workflow.html ships a vanilla-JS authoring UI that lists / creates / edits manifests against the REST surface.
• Eval dashboard inside the admin control plane (38e2a45920) — EvalRun JSON record, EvalRunStore SPI with bounded-ring-buffer InMemoryEvalRunStore default (500 runs per baseline, oldest-evicted), EvalController aggregates pass-rate per baseline, Spring Boot endpoint exposes GET/POST/DELETE /api/admin/evals/{runs,baselines}, and /atmosphere/admin/evals.html surfaces pass-rate meters + recent-run table with auto-refresh. CI submits a JSON body per LLM-as-judge run and the dashboard surfaces the trend without leaving the control plane.
• atmosphere-admin-bundle enterprise console aggregator (eaad0df089) — single Maven pom-packaging artifact that transitively pulls in atmosphere-spring-boot-starter, atmosphere-admin, atmosphere-ai, atmosphere-coordinator, atmosphere-agent, atmosphere-rag, atmosphere-checkpoint, atmosphere-durable-sessions, and

... (truncated)

Commits

• ca3de50 release: Atmosphere 4.0.46
• e022c29 fix(quarkus-chat): inherit opentelemetry-api version from parent BOM
• f39d99b revert: move mirroir-pilot sample authoring to mirroir-skills repo
• d92649e fix(deps): close Dependabot alerts (OTel, spring-ai, spring-fw, reactor-netty...
• b5a9b23 ci(mirroir-pilot): matrix-extend to 4 samples (Phase A + Phase B chat-streaming)
• 2bbf2f0 feat(samples): Phase B — SAMPLE.md + scenarios for spring-boot-chat, quarkus-...
• 58c6599 fix(mirroir-pilot): widen boot scope + warm plugins + bump timeout to 240s
• cafaa09 ci(mirroir-pilot): always rebuild runner from pinned branch — cache deps only
• 8391f19 ci(mirroir-pilot): pin runner clone to feature/runner-cli-smoke + canonical URL
• c3aad86 docs(harness): drift-log #38 — LLM_MODE=demo wasn't real; runtime takes 'fake'
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)