1.5.0

Changelog

🚀 Features

• ac7e943 adding flow and dependency tab
• e42d715 starter: let the browser enforce the page's own promises
• b76accd ui: make the workflow diagram reachable from the keyboard
• ebb98e5 starter: reconcile declared workflows against the running planner
• 8e739c5 ui: accessibility, an agent filter, and readable edge labels
• 4c6fc0a starter: serve the UI from the controller on a configurable base path
• bc7906c upgrade to Spring Boot 4.1 and Embabel 1.5.0, cover remaining annotations
• 5c2aa73 upgrade to Embabel 1.0.0 GA and visualize new 1.0.0 features

🐛 Fixes

• caaef34 deps: raise the libraries Boot 4.1.0 manages at a vulnerable version
• c266469 ui: stop the legend promising an edge the diagram never draws
• 3e204a5 starter: read the bean a FactoryBean publishes, not the factory
• dddaffc ui: re-fit a diagram when its container changes size
• 1ffbe00 ui: stop announcing a node as a button it cannot behave like
• 51b6ad3 ui: collect edge labels by equality, not by containment
• 59a9748 ui: draw only the type edges the data actually supports
• 53e1f58 ui: stop a revision loop emptying the columns it skips
• e99ee2b ui: stop the header printing an actuator path it cannot know
• e204481 starter: tell an empty platform apart from an absent one
• 4706148 starter: decode the array types a runtime binding names
• 9ef4d83 starter: reach a @State the way Embabel reaches it
• d1197db ui: give the light theme a palette its own background can carry
• d0a7c76 ui: stop the filter reaching for a notice a render never built
• f22ada4 starter: stop a name collision from mis-assigning what runs
• 8dac0d9 starter: stop letting reflection decide what a step is called
• 5c52858 starter: stop re-scanning every bean on every request
• b1c9817 ui: stop a diagram from swallowing the page scroll
• b91f849 starter: document the properties properly and ship the licence
• 7320e9f ui: use the fallback height the measurement code already declared
• afa050b starter: stop reporting a version the agent author never declared
• b3fbc55 starter: keep the visualizer off when it is switched off
• d71ed32 starter: never create a bean while scanning, and stop silent misses
• e65ee6a starter: only report an output binding the author actually declared
• c362710 starter: resolve bean types without instantiating beans
• ce43900 starter: report steps an agent inherits from base classes and interfaces
• c88f258 starter: stop shipping application.properties in the library jar
• ed956b3 eliminate build warnings from clean install
• 44f88e0 tests: update Spring Boot 4.1 servlet/MVC auto-configuration imports

🔄️ Changes

• 843d8a5 starter: split the catalog scan along the seams it already had
• fc61131 starter: derive a step instead of retyping all thirty-nine of it
• 5014128 starter: compute the workflow catalog once per context
• c6a6e55 starter: extract the annotation-reflection plumbing
• 567c89b starter: build workflow models through typed builders
• 888bb16 rejoin split javadoc inline tags and sort pom
• b2d1942 tidy reflective agent workflow discovery and catalog classes

🧪 Tests

• d04bfc4 starter: pin the promise that reading the catalog creates nothing
• 43cc44e starter: cover the 1.0.x constructors nothing else calls
• 7b1022f ui: keep every untrusted value on the escaped path
• a2f41bb starter: pin why runtime steps are matched by name alone
• 0349924 starter: lock down what a @State routing step really reports
• b594d4f starter: raise the coverage floor to the numbers we actually reach
• 9fc2529 ci: remove obsolete MVC auto-config imports for Boot 4

🧰 Tasks

• fd63691 normalize line endings of Windows wrapper scripts
• bfd8966 chore(deps-dev)(deps-dev): bump org.codehaus.mojo:flatten-maven-plugin
• bb9ea61 track .vscode/settings.json to disable Java format-on-save
• 6e7d9d0 bump version to 0.4.0-SNAPSHOT for next development cycle
• be33ca5 chore(deps-dev)(deps-dev): bump com.embabel.agent:embabel-agent-api
• 88467a2 chore(deps)(deps): bump com.embabel.agent:embabel-agent-dependencies
• 23814c1 deps: bump github/codeql-action/upload-sarif
• a7f793f deps: bump actions/setup-java from 5.5.0 to 5.6.0
• 1bb4955 deps: bump actions/github-script from 8.0.0 to 9.0.0
• 310fdd0 ci: consolidate dependabot automation and workflow hardening changes
• 43cd30b deps: bump com.embabel.agent:embabel-agent-dependencies
• 1dcaa19 deps-dev: bump org.jreleaser:jreleaser-maven-plugin
• da4bcc5 deps-dev: bump com.embabel.agent:embabel-agent-api

🛠 Build

• 0caef9c deps: bump the codeql-action group with 3 updates
• 7af1178 deps: bump ossf/scorecard-action from 2.4.4 to 2.5.0
• a6db1b4 deps: bump actions/setup-java from 6.0.1 to 6.1.0
• b54d5a6 deps: bump embabel-agent.version from 1.5.2 to 1.5.3
• 42d2d4b deps: bump the codeql-action group with 3 updates
• 49fd9e7 deps: bump actions/upload-artifact from 7.0.1 to 7.0.2
• 3ed5cf8 deps: bump org.apache.maven:apache-maven from 3.9.16 to 3.10.0
• 8a35316 deps: bump the codeql-action group with 3 updates
• de48893 deps: bump the codeql-action group with 3 updates
• c4be35b deps: bump embabel-agent.version from 1.5.1 to 1.5.2
• d46b869 deps: group codeql-action updates
• a26bcdb standardize Dependabot auto-merge workflow
• b9162d4 deps: bump github/codeql-action/analyze from 4.37.9 to 4.38.0
• 6bf9688 deps: bump github/codeql-action/init from 4.37.9 to 4.38.0
• 9d1844d deps: bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0
• 79ec68c deps: bump actions/setup-java from 6.0.0 to 6.0.1
• f75cfb8 centralise dependency versions and drop overrides Boot 4.1.1 manages
• edc4b9d deps: bump actions/setup-java from 5.7.0 to 6.0.0
• dd7ebd8 deps: bump github/codeql-action/init from 4.37.8 to 4.37.9
• cb7d264 deps: bump github/codeql-action/analyze from 4.37.8 to 4.37.9
• 3f9f958 deps: bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9
• 0861dea deps: bump com.embabel.agent:embabel-agent-dependencies
• dec4203 deps-dev: bump com.embabel.agent:embabel-agent-api
• 35d0578 deps: bump github/codeql-action/init from 4.37.7 to 4.37.8
• 79b6e9f deps: bump github/codeql-action/analyze from 4.37.7 to 4.37.8
• eeba4b4 deps: bump org.springframework.boot:spring-boot-starter-parent
• 5404e51 deps-dev: bump io.spring.javaformat:spring-javaformat-maven-plugin
• a28fa60 deps: bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.8
• aa47690 deps: bump github/codeql-action/init from 4.37.6 to 4.37.7
• 32694da deps: bump github/codeql-action/analyze from 4.37.6 to 4.37.7
• f3893a5 deps: bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7
• 4dc8b3f deps: bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15
• 2af0b57 deps-dev: bump org.apache.maven.plugins:maven-enforcer-plugin
• 1418753 deps: stop Dependabot writing titles the changelog cannot parse
• e12a2b2 scope every write token to the job that actually needs it
• 54c8d41 attest what a release publishes, and stop gating it on coverage
• ca3f4ff stop publishing SCM coordinates that do not resolve
• c129a32 drop the credential the release job never uses
• 145419f bound every job, drop credentials no job uses, and check the promise
• 043747a verify the build timestamp was bumped, the way the version already is
• b1196b8 keep major dependency bumps out of auto-merge
• e0cfe6a stop verifying every pull request twice
• 686d7fa enforce the build environment, lint javadoc, and make jars reproducible
• 52a7b6d verify pull requests as strictly as main, and gate on coverage
• 883a0b6 ci(deps)(deps): bump github/codeql-action/init from 4.37.4 to 4.37.6
• d9dc3af ci(deps)(deps): bump github/codeql-action/analyze from 4.37.4 to 4.37.6
• ab74c4a ci(deps)(deps): bump github/codeql-action/upload-sarif
• c9c0eb0 ci(deps)(deps): bump github/codeql-action/init from 4.37.3 to 4.37.4
• 8bfce43 ci(deps)(deps): bump github/codeql-action/analyze from 4.37.3 to 4.37.4
• 900853c ci(deps)(deps): bump actions/setup-java from 5.6.0 to 5.7.0
• 8b30760 ci(deps)(deps): bump github/codeql-action/upload-sarif
• ef78d08 ci(deps)(deps): bump github/codeql-action/upload-sarif
• 92addae ci(deps)(deps): bump github/codeql-action/init from 4.37.1 to 4.37.3
• 370e506 ci(deps)(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.3
• 1858a28 ci(deps)(deps): bump actions/checkout from 7.0.0 to 7.0.1
• 4045408 ci(deps)(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4
• b07289e grant checks/statuses read to auto-merge workflow
• 7dd3467 quote Dependabot schedule time to satisfy config schema
• c339b47 pin all GitHub Actions to latest release commit SHAs
• 23feb3f fix Dependabot auto-merge (wait for checks + merge without branch protection; surface blocks)

📝 Documentation

• e54df70 keep the coverage gate out of a local install
• 63aefaf security: secure the actuator endpoint the example left open
• 5f447ad say why running the sample needs the starter installed first
• 2de6d6a add a code of conduct, and correct the metadata a release publishes
• 6ebe871 bring the README in line with how the starter now behaves
• 70ac571 add the community health files an OSS project is judged on
• 09f28a9 fix dependency-review badge (drop branch=main so it shows status)

---

• d77d186 Release 1.5.0
• c468859 Prepare 1.2.0-SNAPSHOT
• b1388f7 Release 1.1.0
• 0f0b353 Prepare 1.1.0-SNAPSHOT
• f98f745 Release 1.0.0
• 173272a Downgrade Spring Boot to 3.5.16 and align sample app with parent

Contributors

We'd like to thank the following people for their contributions:

• Patrick Baumgartner (@patbaumgartner)
• dependabot[bot] (@dependabot[bot])
• github-a ...