1.5.0

Changelog

🚀 Features

• ac7e943 adding flow and dependency tab
• e42d715 starter: let the browser enforce the page's own promises
• b76accd ui: make the workflow diagram reachable from the keyboard
• ebb98e5 starter: reconcile declared workflows against the running planner
• 8e739c5 ui: accessibility, an agent filter, and readable edge labels
• 4c6fc0a starter: serve the UI from the controller on a configurable base path
• bc7906c upgrade to Spring Boot 4.1 and Embabel 1.5.0, cover remaining annotations
• 5c2aa73 upgrade to Embabel 1.0.0 GA and visualize new 1.0.0 features

🐛 Fixes

• caaef34 deps: raise the libraries Boot 4.1.0 manages at a vulnerable version
• c266469 ui: stop the legend promising an edge the diagram never draws
• 3e204a5 starter: read the bean a FactoryBean publishes, not the factory
• dddaffc ui: re-fit a diagram when its container changes size
• 1ffbe00 ui: stop announcing a node as a button it cannot behave like
• 51b6ad3 ui: collect edge labels by equality, not by containment
• 59a9748 ui: draw only the type edges the data actually supports
• 53e1f58 ui: stop a revision loop emptying the columns it skips
• e99ee2b ui: stop the header printing an actuator path it cannot know
• e204481 starter: tell an empty platform apart from an absent one
• 4706148 starter: decode the array types a runtime binding names
• 9ef4d83 starter: reach a @State the way Embabel reaches it
• d1197db ui: give the light theme a palette its own background can carry
• d0a7c76 ui: stop the filter reaching for a notice a render never built
• f22ada4 starter: stop a name collision from mis-assigning what runs
• 8dac0d9 starter: stop letting reflection decide what a step is called
• 5c52858 starter: stop re-scanning every bean on every request
• b1c9817 ui: stop a diagram from swallowing the page scroll
• b91f849 starter: document the properties properly and ship the licence
• 7320e9f ui: use the fallback height the measurement code already declared
• afa050b starter: stop reporting a version the agent author never declared
• b3fbc55 starter: keep the visualizer off when it is switched off
• d71ed32 starter: never create a bean while scanning, and stop silent misses
• e65ee6a starter: only report an output binding the author actually declared
• c362710 starter: resolve bean types without instantiating beans
• ce43900 starter: report steps an agent inherits from base classes and interfaces
• c88f258 starter: stop shipping application.properties in the library jar
• ed956b3 eliminate build warnings from clean install
• 44f88e0 tests: update Spring Boot 4.1 servlet/MVC auto-configuration imports

🔄️ Changes

• 843d8a5 starter: split the catalog scan along the seams it already had
• fc61131 starter: derive a step instead of retyping all thirty-nine of it
• 5014128 starter: compute the workflow catalog once per context
• c6a6e55 starter: extract the annotation-reflection plumbing
• 567c89b starter: build workflow models through typed builders
• 888bb16 rejoin split javadoc inline tags and sort pom
• b2d1942 tidy reflective agent workflow discovery and catalog classes

🧪 Tests

• d04bfc4 starter: pin the promise that reading the catalog creates nothing
• 43cc44e starter: cover the 1.0.x constructors nothing else calls
• 7b1022f ui: keep every untrusted value on the escaped path
• a2f41bb starter: pin why runtime steps are matched by name alone
• 0349924 starter: lock down what a @State routing step really reports
• b594d4f starter: raise the coverage floor to the numbers we actually reach
• 9fc2529 ci: remove obsolete MVC auto-config imports for Boot 4

🧰 Tasks

• fd63691 normalize line endings of Windows wrapper scripts
• bfd8966 chore(deps-dev)(deps-dev): bump org.codehaus.mojo:flatten-maven-plugin
• bb9ea61 track .vscode/settings.json to disable Java format-on-save
• 6e7d9d0 bump version to 0.4.0-SNAPSHOT for next development cycle
• be33ca5 chore(deps-dev)(deps-dev): bump com.embabel.agent:embabel-agent-api
• 88467a2 chore(deps)(deps): bump com.embabel.agent:embabel-agent-dependencies
• 23814c1 deps: bump github/codeql-action/upload-sarif
• a7f793f deps: bump actions/setup-java from 5.5.0 to 5.6.0
• 1bb4955 deps: bump actions/github-script from 8.0.0 to 9.0.0
• 310fdd0 ci: consolidate dependabot automation and workflow hardening changes
• 43cd30b deps: bump com.embabel.agent:embabel-agent-dependencies
• 1dcaa19 deps-dev: bump org.jreleaser:jreleaser-maven-plugin
• da4bcc5 deps-dev: bump com.embabel.agent:embabel-agent-api

🛠 Build

• 0caef9c deps: bump the codeql-action group with 3 updates
• 7af1178 deps: bump ossf/scorecard-action from 2.4.4 to 2.5.0
• a6db1b4 deps: bump actions/setup-java from 6.0.1 to 6.1.0
• b54d5a6 deps: bump embabel-agent.version from 1.5.2 to 1.5.3
• 42d2d4b deps: bump the codeql-action group with 3 updates
• 49fd9e7 deps: bump actions/upload-artifact from 7.0.1 to 7.0.2
• 3ed5cf8 deps: bump org.apache.maven:apache-maven from 3.9.16 to 3.10.0
• 8a35316 deps: bump the codeql-action group with 3 updates
• de48893 deps: bump the codeql-action group with 3 updates
• c4be35b deps: bump embabel-agent.version from 1.5.1 to 1.5.2
• d46b869 deps: group codeql-action updates
• a26bcdb standardize Dependabot auto-merge workflow
• b9162d4 deps: bump github/codeql-action/analyze from 4.37.9 to 4.38.0
• 6bf9688 deps: bump github/codeql-action/init from 4.37.9 to 4.38.0
• 9d1844d deps: bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0
• 79ec68c deps: bump actions/setup-java from 6.0.0 to 6.0.1
• f75cfb8 centralise dependency versions and drop overrides Boot 4.1.1 manages
• edc4b9d deps: bump actions/setup-java from 5.7.0 to 6.0.0
• dd7ebd8 deps: bump github/codeql-action/init from 4.37.8 to 4.37.9
• cb7d264 deps: bump github/codeql-action/analyze from 4.37.8 to 4.37.9
• 3f9f958 deps: bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9
• 0861dea deps: bump com.embabel.agent:embabel-agent-dependencies
• dec4203 deps-dev: bump com.embabel.agent:embabel-agent-api
• 35d0578 deps: bump github/codeql-action/init from 4.37.7 to 4.37.8
• 79b6e9f deps: bump github/codeql-action/analyze from 4.37.7 to 4.37.8
• eeba4b4 deps: bump org.springframework.boot:spring-boot-starter-parent
• 5404e51 deps-dev: bump io.spring.javaformat:spring-javaformat-maven-plugin
• a28fa60 deps: bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.8
• aa47690 deps: bump github/codeql-action/init from 4.37.6 to 4.37.7
• 32694da deps: bump github/codeql-action/analyze from 4.37.6 to 4.37.7
• f3893a5 deps: bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7
• 4dc8b3f deps: bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15
• 2af0b57 deps-dev: bump org.apache.maven.plugins:maven-enforcer-plugin
• 1418753 deps: stop Dependabot writing titles the changelog cannot parse
• e12a2b2 scope every write token to the job that actually needs it
• 54c8d41 attest what a release publishes, and stop gating it on coverage
• ca3f4ff stop publishing SCM coordinates that do not resolve
• c129a32 drop the credential the release job never uses
• 145419f bound every job, drop credentials no job uses, and check the promise
• 043747a verify the build timestamp was bumped, the way the version already is
• b1196b8 keep major dependency bumps out of auto-merge
• e0cfe6a stop verifying every pull request twice
• 686d7fa enforce the build environment, lint javadoc, and make jars reproducible
• 52a7b6d verify pull requests as strictly as main, and gate on coverage
• 883a0b6 ci(deps)(deps): bump github/codeql-action/init from 4.37.4 to 4.37.6
• d9dc3af ci(deps)(deps): bump github/codeql-action/analyze from 4.37.4 to 4.37.6
• ab74c4a ci(deps)(deps): bump github/codeql-action/upload-sarif
• c9c0eb0 ci(deps)(deps): bump github/codeql-action/init from 4.37.3 to 4.37.4
• 8bfce43 ci(deps)(deps): bump github/codeql-action/analyze from 4.37.3 to 4.37.4
• 900853c ci(deps)(deps): bump actions/setup-java from 5.6.0 to 5.7.0
• 8b30760 ci(deps)(deps): bump github/codeql-action/upload-sarif
• ef78d08 ci(deps)(deps): bump github/codeql-action/upload-sarif
• 92addae ci(deps)(deps): bump github/codeql-action/init from 4.37.1 to 4.37.3
• 370e506 ci(deps)(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.3
• 1858a28 ci(deps)(deps): bump actions/checkout from 7.0.0 to 7.0.1
• 4045408 ci(deps)(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4
• b07289e grant checks/statuses read to auto-merge workflow
• 7dd3467 quote Dependabot schedule time to satisfy config schema
• c339b47 pin all GitHub Actions to latest release commit SHAs
• 23feb3f fix Dependabot auto-merge (wait for checks + merge without branch protection; surface blocks)

📝 Documentation

• e54df70 keep the coverage gate out of a local install
• 63aefaf security: secure the actuator endpoint the example left open
• 5f447ad say why running the sample needs the starter installed first
• 2de6d6a add a code of conduct, and correct the metadata a release publishes
• 6ebe871 bring the README in line with how the starter now behaves
• 70ac571 add the community health files an OSS project is judged on
• 09f28a9 fix dependency-review badge (drop branch=main so it shows status)

---

• d77d186 Release 1.5.0
• c468859 Prepare 1.2.0-SNAPSHOT
• b1388f7 Release 1.1.0
• 0f0b353 Prepare 1.1.0-SNAPSHOT
• f98f745 Release 1.0.0
• 173272a Downgrade Spring Boot to 3.5.16 and align sample app with parent

Contributors

We'd like to thank the following people for their contributions:

• Patrick Baumgartner (@patbaumgartner)
• dependabot[bot] (@dependabot[bot])
• github-a ...

1.1.0

Changelog

🚀 Features

• 5488c56 starter: let the browser enforce the page's own promises
• 34ae172 ui: make the workflow diagram reachable from the keyboard
• 6299b89 starter: reconcile declared workflows against the running planner
• 1d62556 ui: accessibility, an agent filter, and readable edge labels
• 64206a1 starter: serve the UI from the controller on a configurable base path

🐛 Fixes

• 2d4f8e8 deps: raise the libraries Boot 4.1.0 manages at a vulnerable version
• e740bd9 ui: stop the legend promising an edge the diagram never draws
• bb7555b starter: read the bean a FactoryBean publishes, not the factory
• 27c4aba ui: re-fit a diagram when its container changes size
• 47afe33 ui: stop announcing a node as a button it cannot behave like
• c62b240 ui: collect edge labels by equality, not by containment
• 659d855 ui: draw only the type edges the data actually supports
• b22db00 ui: stop a revision loop emptying the columns it skips
• c1fa8df ui: stop the header printing an actuator path it cannot know
• fb416c7 starter: tell an empty platform apart from an absent one
• c903924 starter: decode the array types a runtime binding names
• 89dba1c starter: reach a @State the way Embabel reaches it
• 04c73df ui: give the light theme a palette its own background can carry
• 293b608 ui: stop the filter reaching for a notice a render never built
• 98ea720 starter: stop a name collision from mis-assigning what runs
• f652ced starter: stop letting reflection decide what a step is called
• d3cfdd5 starter: stop re-scanning every bean on every request
• ead65f3 ui: stop a diagram from swallowing the page scroll
• 5de3c8c starter: document the properties properly and ship the licence
• 1db8707 ui: use the fallback height the measurement code already declared
• 71db6c3 starter: stop reporting a version the agent author never declared
• c29a5d6 starter: keep the visualizer off when it is switched off
• b398693 starter: never create a bean while scanning, and stop silent misses
• 7a86378 starter: only report an output binding the author actually declared
• 4c31ced starter: resolve bean types without instantiating beans
• bbb616e starter: report steps an agent inherits from base classes and interfaces
• 3a6bf30 starter: stop shipping application.properties in the library jar

🔄️ Changes

• fa36039 starter: split the catalog scan along the seams it already had
• da8dd7e starter: derive a step instead of retyping all thirty-nine of it
• 5121c65 starter: compute the workflow catalog once per context
• 7378dce starter: extract the annotation-reflection plumbing
• 1b7ddb2 starter: build workflow models through typed builders

🧪 Tests

• 6e13a99 starter: pin the promise that reading the catalog creates nothing
• 610ce19 starter: cover the 1.0.x constructors nothing else calls
• ca19c80 ui: keep every untrusted value on the escaped path
• 6a2e4d5 starter: pin why runtime steps are matched by name alone
• fd0b636 starter: lock down what a @State routing step really reports
• f275ca3 starter: raise the coverage floor to the numbers we actually reach

🛠 Build

• 2718252 centralise dependency versions and drop overrides Boot 4.1.1 manages
• 35f0a5c deps: bump actions/setup-java from 5.7.0 to 6.0.0
• d661499 deps: bump github/codeql-action/init from 4.37.8 to 4.37.9
• e76980d deps: bump github/codeql-action/analyze from 4.37.8 to 4.37.9
• 4e6dbc1 deps: bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9
• 68efded deps: bump com.embabel.agent:embabel-agent-dependencies
• 77baabf deps-dev: bump com.embabel.agent:embabel-agent-api
• 8e6b5b0 deps: bump github/codeql-action/init from 4.37.7 to 4.37.8
• 4fe114d deps: bump github/codeql-action/analyze from 4.37.7 to 4.37.8
• d34821f deps: bump org.springframework.boot:spring-boot-starter-parent
• fa48cbd deps-dev: bump io.spring.javaformat:spring-javaformat-maven-plugin
• 3872cfa deps: bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.8
• 690616f deps: bump github/codeql-action/init from 4.37.6 to 4.37.7
• a747555 deps: bump github/codeql-action/analyze from 4.37.6 to 4.37.7
• 161cdc4 deps: bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7
• 3a1fc02 deps: bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15
• 354dc40 deps-dev: bump org.apache.maven.plugins:maven-enforcer-plugin
• 59437eb deps: stop Dependabot writing titles the changelog cannot parse
• 592bcbc scope every write token to the job that actually needs it
• 2aed39e attest what a release publishes, and stop gating it on coverage
• 974bf39 stop publishing SCM coordinates that do not resolve
• d42c6bc drop the credential the release job never uses
• ecc4f04 bound every job, drop credentials no job uses, and check the promise
• cf509a0 verify the build timestamp was bumped, the way the version already is
• b809eef keep major dependency bumps out of auto-merge
• 6f3e7c0 stop verifying every pull request twice
• 3636752 enforce the build environment, lint javadoc, and make jars reproducible
• 7d5a237 verify pull requests as strictly as main, and gate on coverage
• 51f6611 ci(deps)(deps): bump github/codeql-action/init from 4.37.4 to 4.37.6
• 6afcd0d ci(deps)(deps): bump github/codeql-action/analyze from 4.37.4 to 4.37.6

📝 Documentation

• fc250bb keep the coverage gate out of a local install
• 90e0156 security: secure the actuator endpoint the example left open
• f3a346c say why running the sample needs the starter installed first
• 1c49010 add a code of conduct, and correct the metadata a release publishes
• 708e75e bring the README in line with how the starter now behaves
• 048f045 add the community health files an OSS project is judged on

---

• 1818bbe Release 1.1.0
• c598e60 Prepare 1.1.0-SNAPSHOT

Contributors

We'd like to thank the following people for their contributions:

• Patrick Baumgartner (@patbaumgartner)
• dependabot[bot] (@dependabot[bot])
• github-actions[bot] (@github-actions[bot])

1.0.0

Changelog

🚀 Features

• 5a910ee upgrade to Spring Boot 4.1 and Embabel 1.5.0, cover remaining annotations

🐛 Fixes

• 743ab94 eliminate build warnings from clean install

🔄️ Changes

• 8399ed7 rejoin split javadoc inline tags and sort pom

🧰 Tasks

• 419558b chore(deps-dev)(deps-dev): bump org.codehaus.mojo:flatten-maven-plugin
• 0cc34ce track .vscode/settings.json to disable Java format-on-save
• 56a1a33 bump version to 0.4.0-SNAPSHOT for next development cycle

🛠 Build

• 35e8945 ci(deps)(deps): bump github/codeql-action/upload-sarif
• 5293fe9 ci(deps)(deps): bump github/codeql-action/init from 4.37.3 to 4.37.4
• 9eccc9b ci(deps)(deps): bump github/codeql-action/analyze from 4.37.3 to 4.37.4
• 816dee6 ci(deps)(deps): bump actions/setup-java from 5.6.0 to 5.7.0
• 52e79f2 ci(deps)(deps): bump github/codeql-action/upload-sarif
• ba0be86 ci(deps)(deps): bump github/codeql-action/upload-sarif
• ad3cdaa ci(deps)(deps): bump github/codeql-action/init from 4.37.1 to 4.37.3
• c9e2b1d ci(deps)(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.3
• 3eae7ba ci(deps)(deps): bump actions/checkout from 7.0.0 to 7.0.1
• f1a7839 ci(deps)(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4

---

• 05d5bb5 Release 1.0.0

Contributors

We'd like to thank the following people for their contributions:

• Patrick Baumgartner (@patbaumgartner)
• dependabot[bot] (@dependabot[bot])
• github-actions[bot] (@github-actions[bot])

0.3.0

Changelog

🚀 Features

• 1f03f4b upgrade to Embabel 1.0.0 GA and visualize new 1.0.0 features

🐛 Fixes

• df1c0d0 tests: update Spring Boot 4.1 servlet/MVC auto-configuration imports

🔄️ Changes

• 9a37dd9 tidy reflective agent workflow discovery and catalog classes

🧪 Tests

• a27dd83 ci: remove obsolete MVC auto-config imports for Boot 4

🧰 Tasks

• 29eb0b7 chore(deps-dev)(deps-dev): bump com.embabel.agent:embabel-agent-api
• d56ac61 chore(deps)(deps): bump com.embabel.agent:embabel-agent-dependencies
• 8245881 deps: bump github/codeql-action/upload-sarif
• 44204b5 deps: bump actions/setup-java from 5.5.0 to 5.6.0
• 8e2ef64 deps: bump actions/github-script from 8.0.0 to 9.0.0
• e5092b3 ci: consolidate dependabot automation and workflow hardening changes
• d76ddfc deps: bump com.embabel.agent:embabel-agent-dependencies
• aa573d6 deps-dev: bump org.jreleaser:jreleaser-maven-plugin
• ca2447a deps-dev: bump com.embabel.agent:embabel-agent-api
• f147b7f deps: bump org.springframework.boot:spring-boot-starter-web
• 51f740c deps: bump org.springframework.boot:spring-boot-starter-parent
• 796a653 deps: bump actions/checkout from 6 to 7
• 0f538b8 modernize jreleaser config

🛠 Build

• 43a1dcc grant checks/statuses read to auto-merge workflow
• dab3224 quote Dependabot schedule time to satisfy config schema
• 4943477 pin all GitHub Actions to latest release commit SHAs
• 41d8d8c fix Dependabot auto-merge (wait for checks + merge without branch protection; surface blocks)

📝 Documentation

• a8234c8 fix dependency-review badge (drop branch=main so it shows status)

---

• bdcd65c Downgrade Spring Boot to 3.5.16 and align sample app with parent
• 9792b47 Prepare 0.3.0-SNAPSHOT

Contributors

We'd like to thank the following people for their contributions:

• Patrick Baumgartner (@patbaumgartner)
• dependabot[bot] (@dependabot[bot])
• github-actions[bot] (@github-actions[bot])

0.2.0

Changelog

🔀 Merge

• efad633 Merge pull request #9 from patbaumgartner/dependabot/maven/org.codehaus.mojo-flatten-maven-plugin-1.7.3, closes #9

🚀 Features

• 9499379 surface static cost/value, goal value, and MCP export in visualizer

🧰 Tasks

• 3cc7ac7 deps-dev: bump com.embabel.agent:embabel-agent-api (#10), closes #10
• 8af631b deps: bump com.embabel.agent:embabel-agent-dependencies (#11), closes #11
• a2795c0 deps-dev: bump org.codehaus.mojo:flatten-maven-plugin
• fbb6d60 align workflow and starter configuration updates
• b9fc161 update project versions
• 13e7762 update git attributes and ignore rules

---

• e71df46 Release 0.2.0
• bcaa346 activate embabel-dev profile for starter verify

Contributors

We'd like to thank the following people for their contributions:

• GitHub
• Patrick Baumgartner (@patbaumgartner)
• dependabot[bot] (@dependabot[bot])

0.1.1

Changelog

• 1af76a4 Initial commit

Contributors

We'd like to thank the following people for their contributions:

• Patrick Baumgartner (@patbaumgartner)