Prepare ACP Java SDK 0.16.0 maintenance release

Author: markpollack

CHANGELOG.md

@@ -5,6 +5,21 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.16.0] - 2026-08-24
+
+Maintenance dependency and release-tooling refresh. No protocol or public API changes: the ACP
+surface remains identical to 0.15.0.
+
+### Security
+
+- Jackson 2.21.5 → **2.22.2**, Jetty 12.0.37 → **12.1.12**, and Reactor 3.6.12 → **3.8.7**.
+- SLF4J, Logback, JUnit 5, Mockito, Maven build plugins, Central publishing, JaCoCo, and the optional
+  OWASP dependency-check profile move to their current compatible stable releases.
+
+### Changed
+
+- README installation examples now point to 0.16.0 and retain 0.15.0 in the release history.
+
 ## [0.15.0] - 2026-08-21
 
 Correctness and supply-chain hygiene. No protocol or public API changes: the ACP surface is
@@ -175,4 +190,5 @@ Protocol currency: catching up to ACP spec v0.13.6 (June 2026). Supersedes the n
 - SLF4J 2.0.16
 
 [0.9.0]: https://github.com/agentclientprotocol/java-sdk/releases/tag/v0.9.0
+[0.16.0]: https://github.com/agentclientprotocol/java-sdk/releases/tag/v0.16.0
 [0.15.0]: https://github.com/agentclientprotocol/java-sdk/releases/tag/v0.15.0

README.md

@@ -30,7 +30,7 @@ Three API styles for building agents:
 <dependency>
     <groupId>com.agentclientprotocol</groupId>
     <artifactId>acp-core</artifactId>
-    <version>0.14.0</version>
+    <version>0.16.0</version>
 </dependency>
 ```
 
@@ -39,7 +39,7 @@ For annotation-based agent development:
 <dependency>
     <groupId>com.agentclientprotocol</groupId>
     <artifactId>acp-agent-support</artifactId>
-    <version>0.14.0</version>
+    <version>0.16.0</version>
 </dependency>
 ```
 
@@ -48,11 +48,11 @@ For WebSocket server support (agents accepting WebSocket connections):
 <dependency>
     <groupId>com.agentclientprotocol</groupId>
     <artifactId>acp-websocket-jetty</artifactId>
-    <version>0.14.0</version>
+    <version>0.16.0</version>
 </dependency>
 ```
 
-For snapshot builds (unreleased features), add the snapshot repository and use `0.15.0-SNAPSHOT`:
+For snapshot builds (unreleased features), add the snapshot repository and use `0.17.0-SNAPSHOT`:
 ```xml
 <repositories>
     <repository>
@@ -465,7 +465,20 @@ If you need a stable target, pin to an exact version.
 
 ## Releases
 
-### 0.14.0 (Current — [Maven Central](https://central.sonatype.com/artifact/com.agentclientprotocol/acp-core))
+### 0.16.0 (Current — [Maven Central](https://central.sonatype.com/artifact/com.agentclientprotocol/acp-core))
+
+Maintenance release preserving the 0.15 protocol and public API surface while advancing Reactor to
+3.8.7, Jackson to 2.22.2, Jetty to 12.1.12, and the compatible stable test and release toolchain.
+It includes the notification-ordering, graceful-drain, dependency-security, license, and integration
+test corrections delivered in 0.15.0.
+
+### 0.15.0 ([Maven Central](https://central.sonatype.com/artifact/com.agentclientprotocol/acp-core))
+
+Correctness and supply-chain hygiene with no protocol or public API changes. Incoming notifications
+are delivered in order, graceful close drains queued notifications, integration tests execute, and
+published artifacts carry the verbatim Apache 2.0 license and notice.
+
+### 0.14.0 ([Maven Central](https://central.sonatype.com/artifact/com.agentclientprotocol/acp-core))
 
 Protocol currency: catching up to ACP spec v0.13.6 (June 2026). Supersedes the never-published 0.13.0.
 

pom.xml

@@ -61,27 +61,28 @@
         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
 
         <!-- Dependency versions -->
-        <reactor.version>2023.0.12</reactor.version>
-        <jackson.version>2.21.5</jackson.version>
+        <reactor.version>2025.0.7</reactor.version>
+        <jackson.version>2.22.2</jackson.version>
 
-        <slf4j.version>2.0.16</slf4j.version>
-        <jetty.version>12.0.37</jetty.version>
+        <slf4j.version>2.0.17</slf4j.version>
+        <jetty.version>12.1.12</jetty.version>
 
         <!-- Test dependency versions -->
-        <junit.version>5.11.0</junit.version>
+        <junit.version>5.14.4</junit.version>
         <assertj.version>3.27.7</assertj.version>
-        <mockito.version>5.8.0</mockito.version>
-        <logback.version>1.5.12</logback.version>
+        <mockito.version>5.23.0</mockito.version>
+        <logback.version>1.6.3</logback.version>
 
         <!-- Plugin versions -->
-        <maven-compiler-plugin.version>3.13.0</maven-compiler-plugin.version>
-        <maven-surefire-plugin.version>3.1.2</maven-surefire-plugin.version>
-        <maven-failsafe-plugin.version>3.1.2</maven-failsafe-plugin.version>
-        <maven-source-plugin.version>3.3.0</maven-source-plugin.version>
-        <maven-javadoc-plugin.version>3.6.0</maven-javadoc-plugin.version>
-        <maven-gpg-plugin.version>3.2.7</maven-gpg-plugin.version>
-        <central-publishing-maven-plugin.version>0.9.0</central-publishing-maven-plugin.version>
-        <jacoco-maven-plugin.version>0.8.12</jacoco-maven-plugin.version>
+        <maven-compiler-plugin.version>3.15.0</maven-compiler-plugin.version>
+        <maven-surefire-plugin.version>3.5.6</maven-surefire-plugin.version>
+        <maven-failsafe-plugin.version>3.5.6</maven-failsafe-plugin.version>
+        <maven-source-plugin.version>3.4.0</maven-source-plugin.version>
+        <maven-javadoc-plugin.version>3.12.0</maven-javadoc-plugin.version>
+        <maven-gpg-plugin.version>3.2.8</maven-gpg-plugin.version>
+        <central-publishing-maven-plugin.version>0.11.0</central-publishing-maven-plugin.version>
+        <jacoco-maven-plugin.version>0.8.15</jacoco-maven-plugin.version>
+        <owasp.version>13.0.0</owasp.version>
     </properties>
 
     <dependencyManagement>
@@ -318,7 +319,7 @@
                     <plugin>
                         <groupId>org.owasp</groupId>
                         <artifactId>dependency-check-maven</artifactId>
-                        <version>12.1.0</version>
+                        <version>${owasp.version}</version>
                         <configuration>
                             <failBuildOnCVSS>7.0</failBuildOnCVSS>
                             <ossindexAnalyzerEnabled>false</ossindexAnalyzerEnabled>