Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.51

[dependabot]

Bumps org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.51.

Release notes

Sourced from org.atmosphere:atmosphere-runtime's releases.

Atmosphere 4.0.51

Added

• MCP 2026-07-28 release candidate — the largest MCP revision since launch, implemented as a stateless dialect that coexists with the session-based protocol (2024-11-05 through 2025-11-25). The dialect is selected per request (the client carries the protocol version in params._meta or calls server/discover), so existing clients are unaffected. Stateless core has no Mcp-Session-Id and no initialize handshake, so the server runs behind a plain round-robin load balancer with no session affinity.
• MCP operability — Mcp-Method / Mcp-Name routing headers (validated against the body), ttlMs + cacheScope cache metadata on tools/list / resources/list / resources/read, and W3C Trace Context (traceparent / tracestate / baggage) read from _meta and bridged into the OpenTelemetry span.
• MCP Tasks extension (io.modelcontextprotocol/tasks) and multi-round-trip input — @McpTool(longRunning = true) returns a task handle polled via tasks/get, and the stateless dialect can return InputRequiredResult with a base64 requestState to request more input mid-call and resume on any instance.
• JSON Schema 2020-12 dialect ($schema) on generated tool input schemas, and a standardized resource-not-found error (-32602) on the stateless dialect.
• MCP Apps (SEP-1865) — @McpTool(uiResource = "ui://…") plus a text/html;profile=mcp-app resource makes a tool an MCP App. The Atmosphere console is a working host: it renders the app in a sandboxed iframe, runs a bidirectional App Bridge (apps call server tools through the host under the policy gateway; the host lists and calls the app's own appCapabilities.tools), and uses a separate-origin sandbox proxy for isolation (atmosphere.mcp-sandbox-origin, with a localhost↔ 127.0.0.1 dev fallback, otherwise an opaque-origin direct sandbox).
• MCP authorization — the server acts as an OAuth 2.0 Resource Server: RFC 9728 protected-resource metadata at /.well-known/oauth-protected-resource and a 401 + WWW-Authenticate challenge for unauthenticated requests. Token validation is delegated to the host framework (Spring Security resource server / quarkus-oidc); opt in via the org.atmosphere.mcp.auth.* init parameters.

Atmosphere 4.0.50

Removed

• Pruned dead/unwired internal classes found during a release-readiness audit — none was documented, advertised, or reachable from a user code path: McpWebSocketHandler (superseded by McpHandler's direct WebSocket-frame handling), AgUiSession (superseded by ResourceAgUiStreamingSession), AiCoalescingBroadcasterCache (a delegate-only BroadcasterCache that the no-arg reflective cache-wiring path cannot instantiate), AdkArtifactBridge, AdkCompactionBridge, AtmosphereRequestBridge, AtmosphereResponseBridge, the channels AuditLoggingFilter (never registered as a bean, so it never reached the filter chain), the unwired GrpcProtocolBridge, and the A2A ListTaskPushNotificationConfigsResponse DTO (the ListTaskPushNotificationConfigs method returns ERROR_PUSH_NOT_SUPPORTED, so the response type was never constructed).

... (truncated)

Changelog

Sourced from org.atmosphere:atmosphere-runtime's changelog.

[4.0.51] - 2026-06-06

Added

• MCP 2026-07-28 release candidate — the largest MCP revision since launch, implemented as a stateless dialect that coexists with the session-based protocol (2024-11-05 through 2025-11-25). The dialect is selected per request (the client carries the protocol version in params._meta or calls server/discover), so existing clients are unaffected. Stateless core has no Mcp-Session-Id and no initialize handshake, so the server runs behind a plain round-robin load balancer with no session affinity.
• MCP operability — Mcp-Method / Mcp-Name routing headers (validated against the body), ttlMs + cacheScope cache metadata on tools/list / resources/list / resources/read, and W3C Trace Context (traceparent / tracestate / baggage) read from _meta and bridged into the OpenTelemetry span.
• MCP Tasks extension (io.modelcontextprotocol/tasks) and multi-round-trip input — @McpTool(longRunning = true) returns a task handle polled via tasks/get, and the stateless dialect can return InputRequiredResult with a base64 requestState to request more input mid-call and resume on any instance.
• JSON Schema 2020-12 dialect ($schema) on generated tool input schemas, and a standardized resource-not-found error (-32602) on the stateless dialect.
• MCP Apps (SEP-1865) — @McpTool(uiResource = "ui://…") plus a text/html;profile=mcp-app resource makes a tool an MCP App. The Atmosphere console is a working host: it renders the app in a sandboxed iframe, runs a bidirectional App Bridge (apps call server tools through the host under the policy gateway; the host lists and calls the app's own appCapabilities.tools), and uses a separate-origin sandbox proxy for isolation (atmosphere.mcp-sandbox-origin, with a localhost↔ 127.0.0.1 dev fallback, otherwise an opaque-origin direct sandbox).
• MCP authorization (protocol glue) — the server acts as an OAuth 2.0 Resource Server: RFC 9728 protected-resource metadata at /.well-known/oauth-protected-resource and a 401 + WWW-Authenticate challenge for unauthenticated requests; opt in via the org.atmosphere.mcp.auth.* init parameters. This release shipped the protocol glue only; bearer-token validation was wired end-to-end in 4.0.52 (see Unreleased).

[4.0.50] - 2026-06-05

Removed

• Pruned dead/unwired internal classes found during a release-readiness audit — none was documented, advertised, or reachable from a user code path: McpWebSocketHandler (superseded by McpHandler's direct WebSocket-frame handling), AgUiSession (superseded by ResourceAgUiStreamingSession), AiCoalescingBroadcasterCache (a delegate-only BroadcasterCache that the no-arg reflective cache-wiring path cannot instantiate), AdkArtifactBridge, AdkCompactionBridge, AtmosphereRequestBridge, AtmosphereResponseBridge, the channels AuditLoggingFilter (never registered as a bean, so it never reached the filter chain), the unwired GrpcProtocolBridge, and the A2A ListTaskPushNotificationConfigsResponse DTO (the ListTaskPushNotificationConfigs method returns ERROR_PUSH_NOT_SUPPORTED, so the response type was never constructed).

... (truncated)

Commits

• 4013828 release: Atmosphere 4.0.51
• d9fda32 docs(mcp): advertise the 2026-07-28 RC support across README, module docs, CH...
• 49fad33 feat(mcp): render MCP Apps through a separate-origin sandbox proxy
• d30c98b feat(mcp): let the console host list and call app-registered tools (Host->App)
• 4f8af53 feat(mcp): add MCP Apps App Bridge so apps call server tools via the console ...
• 972e905 feat(mcp): add MCP Apps (SEP-1865) with a sandboxed-iframe console host
• 185d43d feat(mcp): add OAuth resource-server glue (RFC 9728 metadata + WWW-Authenticate)
• 4b51fd7 feat(mcp): declare JSON Schema 2020-12 dialect and standardize resource-not-f...
• e6c4f1b feat(mcp): resume input_required tasks via tasks/update on the stateless dialect
• c03863e feat(mcp): add SEP-2322 multi-round-trip input to stateless tool calls
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #3217.