Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.70

[dependabot]

Bumps org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.70.

Release notes

Sourced from org.atmosphere:atmosphere-runtime's releases.

Atmosphere 4.0.70

Fixed

• keep the personal-assistant transport open while keying memory on the token
• stop compose hanging without a TTY and warn on an inherited LLM_BASE_URL
• resolve the run owner from the AuthInterceptor principal
• key personal-assistant memory on the authenticated principal
• track Boot 3.5.15's Tomcat 10.1.55 in the spring-boot3 profile pin
• close 72 of the 74 open Dependabot alerts across nine packages

Changed

• pin the parity trail in save order, not as a sorted multiset
• log the blog-audit drift entries
• cite the shipping rate limits in the OWASP A09 evidence
• move to Jetty 12.1.12 and port HTTP/3 to the relocated QUIC API
• type-check the Console on TypeScript 7 and make .d.cts reachable
• move atmosphere.js and the e2e suite to TypeScript 7
• take the sample-frontend group bumps, holding TypeScript at 6
• cite Quarkus 3.36.3's real netty baseline in the five BOM pins

Atmosphere 4.0.69

Added

• add the classic-rooms template and gate the two template maps in lockstep
• add spring-boot-low-level-handlers, the layer under @​ManagedService
• add spring-boot-team-rooms, a classic-annotation multi-room chat

Fixed

• stop the personal assistant overwriting an upstream-resolved ai.userId
• skip cross-session recall when the resolved runtime is the demo fallback
• reattach two Javadoc comments orphaned by the owner-reclaim insert
• stop the CHANGELOG generator crediting reverted commits
• keep the run owner across a recycled request so fact extraction still runs
• make the classic-annotation samples work at runtime, not just in tests
• resolve templated endpoint paths on WebTransport, not just requestURI
• fail a fixture boot as soon as the process dies, not after the timeout
• fail the coverage map on entries for samples that no longer exist
• resolve e2e coverage entries to real specs, projects and CI legs
• resolve @​PathParam on @​RoomService and add it to the servlet scan

Changed

• require evidence in the four matrix rows that certified without it
• log the offline-maven CI regression and the CDI annotation false positive
• register the two classic-annotation samples across every gate and doc
• log the fabricated container-ledger blog claim and the relayed RAG negative grep

... (truncated)

Changelog

Sourced from org.atmosphere:atmosphere-runtime's changelog.

[4.0.70] - 2026-09-01

Fixed

• keep the personal-assistant transport open while keying memory on the token
• stop compose hanging without a TTY and warn on an inherited LLM_BASE_URL
• resolve the run owner from the AuthInterceptor principal
• key personal-assistant memory on the authenticated principal
• track Boot 3.5.15's Tomcat 10.1.55 in the spring-boot3 profile pin
• close 72 of the 74 open Dependabot alerts across nine packages

Changed

• pin the parity trail in save order, not as a sorted multiset
• log the blog-audit drift entries
• cite the shipping rate limits in the OWASP A09 evidence
• move to Jetty 12.1.12 and port HTTP/3 to the relocated QUIC API
• type-check the Console on TypeScript 7 and make .d.cts reachable
• move atmosphere.js and the e2e suite to TypeScript 7
• take the sample-frontend group bumps, holding TypeScript at 6
• cite Quarkus 3.36.3's real netty baseline in the five BOM pins

[4.0.69] - 2026-08-30

Added

• add the classic-rooms template and gate the two template maps in lockstep
• add spring-boot-low-level-handlers, the layer under @​ManagedService
• add spring-boot-team-rooms, a classic-annotation multi-room chat

Fixed

• stop the personal assistant overwriting an upstream-resolved ai.userId
• skip cross-session recall when the resolved runtime is the demo fallback
• reattach two Javadoc comments orphaned by the owner-reclaim insert
• stop the CHANGELOG generator crediting reverted commits
• keep the run owner across a recycled request so fact extraction still runs
• make the classic-annotation samples work at runtime, not just in tests
• resolve templated endpoint paths on WebTransport, not just requestURI
• fail a fixture boot as soon as the process dies, not after the timeout
• fail the coverage map on entries for samples that no longer exist
• resolve e2e coverage entries to real specs, projects and CI legs
• resolve @​PathParam on @​RoomService and add it to the servlet scan

Changed

• require evidence in the four matrix rows that certified without it
• log the offline-maven CI regression and the CDI annotation false positive
• register the two classic-annotation samples across every gate and doc
• log the fabricated container-ledger blog claim and the relayed RAG negative grep

... (truncated)

Commits

• 796020e release: Atmosphere 4.0.70
• 6e9d23e test(checkpoint-temporal): pin the parity trail in save order, not as a sorte...
• 219136b fix(samples): keep the personal-assistant transport open while keying memory ...
• 04488b2 docs(harness): log the blog-audit drift entries
• 9862e7d docs(security): cite the shipping rate limits in the OWASP A09 evidence
• e11ade9 fix(cli): stop compose hanging without a TTY and warn on an inherited LLM_BAS...
• 53e4b9f fix(ai): resolve the run owner from the AuthInterceptor principal
• 528ec98 fix(samples): key personal-assistant memory on the authenticated principal
• c80dbc7 build(deps): move to Jetty 12.1.12 and port HTTP/3 to the relocated QUIC API
• da0def8 build(js): type-check the Console on TypeScript 7 and make .d.cts reachable
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)