Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.33

[dependabot]

Bumps org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.33.

Release notes

Sourced from org.atmosphere:atmosphere-runtime's releases.

Atmosphere 4.0.33

🐛 Fixed

• rename release.yml back to release-4x.yml (NPM OIDC path-sensitive)

🔧 Changed

• bump version to 4.0.32
• prepare for next development iteration 4.0.33-SNAPSHOT

Full Changelog: Atmosphere/atmosphere@atmosphere-4.0.32...atmosphere-4.0.33

Atmosphere 4.0.32

✨ Added

• add JettyHttp3AsyncSupport — native HTTP/3 via Jetty 12 QUIC connector
• support container-managed executor injection via atmosphereExecutor bean
• full Quarkus auto-configuration for admin control plane JAX-RS AdminResource with all REST endpoints, CDI AdminProducer for AtmosphereAdmin bean, admin dashboard HTML, and build step for reflection and bean registration
• port admin auto-config to SB4 starter (default) Admin dashboard, REST API, metrics, and event stream now work with atmosphere-spring-boot-starter without -Pspring-boot3
• add Observability tab with Micrometer metrics dashboard MetricsController queries MeterRegistry for atmosphere. metrics; new /api/admin/metrics endpoint; Observability tab shows connections, broadcasts, latency, cache, backpressure, and AI/LLM metrics*
• enable atmosphere-admin in ai-chat and multi-agent samples Adds atmosphere-admin dependency for /atmosphere/admin/ dashboard and /api/admin/ REST endpoints*
• add admin dashboard UI and Quarkus dependency (Phase 5+6) Self-contained HTML dashboard at /atmosphere/admin/ with live event feed; Quarkus runtime gets optional admin dep
• add MCP tools bridge and WebSocket event stream (Phase 3+4) AdminMcpBridge registers read/write tools via McpRegistry; AdminEventHandler streams events at /atmosphere/admin/events
• add session tracking, write operations, and task cancel (Phase 2) AgentSessionRegistry tracks active sessions; POST/DELETE endpoints for broadcast, disconnect, resume, destroy, and cancel
• add atmosphere-admin control plane module (Phase 1) Read-only REST APIs at /api/admin/ for broadcasters, agents, coordinators, tasks, runtimes, and MCP registries*
• add JMH + load benchmarks with regression CI
• add atmosphere-checkpoint module with HITL sample + CLI

🐛 Fixed

• isolate Micrometer wiring in ConditionalOnClass inner class (TypeNotPresentException)
• restore SmartLifecycle for sidecar startup, keep AsyncSupport for detection
• gate sidecar on atmosphere.http3.enabled init param
• restore Jetty HTTP/3 test with CI-compatible page content check
• remove lsof/stdout checks from Jetty HTTP/3 tests (CI-incompatible)
• apply admin SmartLifecycle fix to spring-boot3-starter, use OTel API-only for native
• add quarkus-opentelemetry to quarkus-chat for MCP native image linking
• full project install + all admin deps in quarkus-chat for native image
• install all modules for Native Image CI (admin has many transitive deps)
• add quarkus-admin-extension to Samples CI, add micrometer to quarkus-chat
• use reflection for Jetty APIs in JettyHttp3AsyncSupport (GraalVM native)
• load HTTP/3 AsyncSupport by name to avoid NoClassDefFoundError in native image
• include quarkus-admin-extension in Native Image install step
• defer event handler to SmartLifecycle (BroadcasterFactory null at bean time)
• use keytool for HTTP/3 self-signed cert, add jetty-http3 to embedded sample
• null-guard AtmosphereAdmin when framework is unavailable Prevents NPE in FrameworkController/AgentController/AtmosphereHealth when framework is null (Quarkus fallback)
• fix Quarkus admin classloading and static resource serving Non-optional admin dep for Quarkus classloader compatibility; dashboard at /admin/ to avoid Atmosphere servlet conflict; retry-loop in CDI producer for framework init timing
• bundle servlet-api in uber JAR for Broadcaster benchmark
• discover headless agents and @​Coordinator metadata in agents tab Scans MCP sub-paths to find headless agents without base handlers; checks both @​Agent and @​Coordinator annotations

🔧 Changed

• rename workflows to categorized format (CI/Deploy/Release/Security)

... (truncated)

Commits

• a1a3201 release: Atmosphere 4.0.33
• b63db9c fix(ci): rename release.yml back to release-4x.yml (NPM OIDC path-sensitive)
• 633cc30 chore(cli): bump version to 4.0.32
• a210ef5 chore: prepare for next development iteration 4.0.33-SNAPSHOT
• 4d3760b release: Atmosphere 4.0.32
• 2030d15 fix(security): bump MCP SDK to 1.0.0 (CVE-2026-35568), fix Vite in all frontends
• 45ac317 fix(admin): isolate Micrometer wiring in ConditionalOnClass inner class (Type...
• f152d24 fix(webtransport): restore SmartLifecycle for sidecar startup, keep AsyncSupp...
• 7a040aa chore(ci): rename workflows to categorized format (CI/Deploy/Release/Security)
• 437d112 perf(ci): split E2E tests from 8 to 16 parallel groups for faster feedback
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #3032.