1.1.0

Changelog

🚀 Features

• 5488c56 starter: let the browser enforce the page's own promises
• 34ae172 ui: make the workflow diagram reachable from the keyboard
• 6299b89 starter: reconcile declared workflows against the running planner
• 1d62556 ui: accessibility, an agent filter, and readable edge labels
• 64206a1 starter: serve the UI from the controller on a configurable base path

🐛 Fixes

• 2d4f8e8 deps: raise the libraries Boot 4.1.0 manages at a vulnerable version
• e740bd9 ui: stop the legend promising an edge the diagram never draws
• bb7555b starter: read the bean a FactoryBean publishes, not the factory
• 27c4aba ui: re-fit a diagram when its container changes size
• 47afe33 ui: stop announcing a node as a button it cannot behave like
• c62b240 ui: collect edge labels by equality, not by containment
• 659d855 ui: draw only the type edges the data actually supports
• b22db00 ui: stop a revision loop emptying the columns it skips
• c1fa8df ui: stop the header printing an actuator path it cannot know
• fb416c7 starter: tell an empty platform apart from an absent one
• c903924 starter: decode the array types a runtime binding names
• 89dba1c starter: reach a @State the way Embabel reaches it
• 04c73df ui: give the light theme a palette its own background can carry
• 293b608 ui: stop the filter reaching for a notice a render never built
• 98ea720 starter: stop a name collision from mis-assigning what runs
• f652ced starter: stop letting reflection decide what a step is called
• d3cfdd5 starter: stop re-scanning every bean on every request
• ead65f3 ui: stop a diagram from swallowing the page scroll
• 5de3c8c starter: document the properties properly and ship the licence
• 1db8707 ui: use the fallback height the measurement code already declared
• 71db6c3 starter: stop reporting a version the agent author never declared
• c29a5d6 starter: keep the visualizer off when it is switched off
• b398693 starter: never create a bean while scanning, and stop silent misses
• 7a86378 starter: only report an output binding the author actually declared
• 4c31ced starter: resolve bean types without instantiating beans
• bbb616e starter: report steps an agent inherits from base classes and interfaces
• 3a6bf30 starter: stop shipping application.properties in the library jar

🔄️ Changes

• fa36039 starter: split the catalog scan along the seams it already had
• da8dd7e starter: derive a step instead of retyping all thirty-nine of it
• 5121c65 starter: compute the workflow catalog once per context
• 7378dce starter: extract the annotation-reflection plumbing
• 1b7ddb2 starter: build workflow models through typed builders

🧪 Tests

• 6e13a99 starter: pin the promise that reading the catalog creates nothing
• 610ce19 starter: cover the 1.0.x constructors nothing else calls
• ca19c80 ui: keep every untrusted value on the escaped path
• 6a2e4d5 starter: pin why runtime steps are matched by name alone
• fd0b636 starter: lock down what a @State routing step really reports
• f275ca3 starter: raise the coverage floor to the numbers we actually reach

🛠 Build

• 2718252 centralise dependency versions and drop overrides Boot 4.1.1 manages
• 35f0a5c deps: bump actions/setup-java from 5.7.0 to 6.0.0
• d661499 deps: bump github/codeql-action/init from 4.37.8 to 4.37.9
• e76980d deps: bump github/codeql-action/analyze from 4.37.8 to 4.37.9
• 4e6dbc1 deps: bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9
• 68efded deps: bump com.embabel.agent:embabel-agent-dependencies
• 77baabf deps-dev: bump com.embabel.agent:embabel-agent-api
• 8e6b5b0 deps: bump github/codeql-action/init from 4.37.7 to 4.37.8
• 4fe114d deps: bump github/codeql-action/analyze from 4.37.7 to 4.37.8
• d34821f deps: bump org.springframework.boot:spring-boot-starter-parent
• fa48cbd deps-dev: bump io.spring.javaformat:spring-javaformat-maven-plugin
• 3872cfa deps: bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.8
• 690616f deps: bump github/codeql-action/init from 4.37.6 to 4.37.7
• a747555 deps: bump github/codeql-action/analyze from 4.37.6 to 4.37.7
• 161cdc4 deps: bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7
• 3a1fc02 deps: bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15
• 354dc40 deps-dev: bump org.apache.maven.plugins:maven-enforcer-plugin
• 59437eb deps: stop Dependabot writing titles the changelog cannot parse
• 592bcbc scope every write token to the job that actually needs it
• 2aed39e attest what a release publishes, and stop gating it on coverage
• 974bf39 stop publishing SCM coordinates that do not resolve
• d42c6bc drop the credential the release job never uses
• ecc4f04 bound every job, drop credentials no job uses, and check the promise
• cf509a0 verify the build timestamp was bumped, the way the version already is
• b809eef keep major dependency bumps out of auto-merge
• 6f3e7c0 stop verifying every pull request twice
• 3636752 enforce the build environment, lint javadoc, and make jars reproducible
• 7d5a237 verify pull requests as strictly as main, and gate on coverage
• 51f6611 ci(deps)(deps): bump github/codeql-action/init from 4.37.4 to 4.37.6
• 6afcd0d ci(deps)(deps): bump github/codeql-action/analyze from 4.37.4 to 4.37.6

📝 Documentation

• fc250bb keep the coverage gate out of a local install
• 90e0156 security: secure the actuator endpoint the example left open
• f3a346c say why running the sample needs the starter installed first
• 1c49010 add a code of conduct, and correct the metadata a release publishes
• 708e75e bring the README in line with how the starter now behaves
• 048f045 add the community health files an OSS project is judged on

---

• 1818bbe Release 1.1.0
• c598e60 Prepare 1.1.0-SNAPSHOT

Contributors

We'd like to thank the following people for their contributions:

• Patrick Baumgartner (@patbaumgartner)
• dependabot[bot] (@dependabot[bot])
• github-actions[bot] (@github-actions[bot])