AgentWorks BOM

​

Overview

​

Maven

<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>io.github.markpollack</groupId>
            <artifactId>agentworks-bom</artifactId>
            <version>1.15.0</version>
            <type>pom</type>
            <scope>import</scope>
        </dependency>
    </dependencies>
</dependencyManagement>

<!-- Then just: -->
<dependency>
    <groupId>io.github.markpollack</groupId>
    <artifactId>experiment-core</artifactId>
    <!-- version managed by BOM -->
</dependency>

​

What’s new in 1.15.0

• 1.15.0: repins the Agent Client family to 0.25.0 — fixes Spring Boot auto-configuration for all providers. The org migration had left the auto-config registration files (.imports/spring.factories) pointing at the old org.springaicommunity package, so the starters failed to auto-configure (ClassNotFoundException) at boot. All other members unchanged.
• 1.14.0: repins the Agent Client family to 0.24.0 — a compatibility fix so agent-claude builds against agent-journal 1.6.0. journal 1.5.0 had relocated TraceContentMode, which broke Claude trace-wiring for Spring Boot consumers on 1.12.0/1.13.0 (NoClassDefFoundError). All other members unchanged.
• 1.13.0: repins Agent Journal to 1.6.0 — first-class journal-capture primitives (slice 1), a cost-metering correction (the headline LLMCallEvent.tokenUsage is now the cost-bearing Σ-per-turn aggregate, fixing a ~2× long-run under-count), and a per-file schema-version header on the jsonl logs. Additive on the frozen capture contract; a 1.5.0 consumer keeps working.
• 1.12.0: repins Agent Journal to 1.5.0 and adds the new gemini-cli-capture managed member — agent runs from Claude and Gemini now capture into one portable trace + cost format.
• 1.9.0 was the security cut: converged on Spring AI 2.0.0 GA and cleared four CVEs — Spring Boot CVE-2026-40976 (CRITICAL) and CVE-2026-40973, Spring AI CVE-2026-41712, and Jackson CVE-2026-29062. Added tools.jackson:jackson-bom 3.1.4 and reactor-core 3.8.6 to converge transitive dependencies, all verified by the bom-verification gate.
• 1.10.0 / 1.11.0: repinned the source-fixed members to lock in the CVE remediation (claude-code-sdk 1.4.0, workflow 0.10.0, Spring AI BOM 2.0.0 backstop).
• 1.8.0: bumped the acp-java family to 0.14.0, clearing the deferred 0.13.0 cut.

​

Managed Artifacts

​

Agent Engineering (io.github.markpollack)

​

Agent Client Protocol (com.agentclientprotocol)

​

Source