Release Notes

The auto-off is held by the engine instead of the browser: chaos switches itself off at the deadline even when the Dev UI is closed, and a pending auto-off survives a dev-mode live reload. The delay is bounded to 24 hours, and deactivating chaos (master toggle or kill switch) cancels it, while a configuration reset leaves it pending.

New JSON-RPC methods startAutoOff(minutes) and cancelAutoOff(); getStatus exposes the time left in autoOffRemainingMs.

A profile other than NONE also turns the response body assault off and resets the messages of the assaults it enables (INTERMITTENT answers Internal Server Error (Goblin chaos)). The client-side assaults and the armed layers stay untouched.

An application producing an anonymous, local or non-static inner class (for example a MeterFilter returned by a producer method) no longer fails to start: the SERVICE layer only weaves its binding onto classes that can be CDI beans, and never onto constructors.

DATABASE exceptions no longer corrupt the Agroal pool: the fault now fires before a connection is checked out, instead of from the acquire interceptor, which left the connection enlisted in the transaction while back in the pool ("Closing connection in incorrect state CHECKED_IN", ever-growing agroal_active_count).

A request whose entry point sits in an exclude-packages package is no longer assaulted on the SERVICE, DATABASE, MESSAGING or HTTP_OUT layers: the layer used to be resolved before the targeting rules were checked.

Once the auto-off has fired, chaos stays off across live reloads until it is switched on again, and clicking the master toggle just as the deadline elapses no longer switches chaos back on.

A test application started by continuous testing keeps its own auto-off instead of sharing the one of the dev-mode application.

The Dev UI dashboard survives transport errors and out-of-order status replies, and always reports an auto-disable.

Multi-layer chaos assaults with per-request layer resolution (DATABASE → MESSAGING → SERVICE → HTTP_IN, HTTP_OUT rolled per outgoing call), one check-box per layer in the Dev UI, and service-layer assaults on business beans via a CDI interceptor that runs inside the Fault Tolerance machinery — so @Retry, @Fallback, @Timeout and @CircuitBreaker are exercised for real. The DATABASE layer fails or delays JDBC connection acquisition through an Agroal pool interceptor (JDBC, Hibernate ORM, Panache); the MESSAGING layer faults @Incoming consumers outside Fault Tolerance, each consumed message resolving its own layer (#54).

The source of each recorded assault, already tagged in the metrics and traces since 0.2.1 (server, rest-client, webclient), gains the service, database and messaging values, and is now also exposed in the history, the counters and the Markdown report; the Dev UI status bar counts the assaults per source.

The Markdown report describes the armed chaos layers and the client-side assaults.

Chaos no longer activates in test mode by default: set quarkus.goblin.test.enabled=true to assault your @QuarkusTest suite (or call AssaultEngine.setActive(true) from a test). Adding the extension therefore never slows down nor breaks an existing test suite.

The quarkus-goblin-metrics module now depends on the Micrometer API only (quarkus-micrometer): add the registry of your choice, e.g. quarkus-micrometer-registry-prometheus, to expose /q/metrics.

Java API: the targeting rules moved from GoblinConfig.TargetConfig to GoblinTargetingConfig (the property names are unchanged), and AssaultEngine.setStaticConfig is removed.

Every configuration key except the quarkus.goblin.target.include-packages / exclude-packages / exclude-annotations targeting rules is now read at runtime and can be overridden when the application starts. The targeting rules stay fixed at build time and are applied by a single implementation shared by every layer.

No chaos wiring in production builds: the service and messaging interceptor bindings, the database hook and the Dev UI JSON-RPC are only registered in dev and test.

Configuration changes (profile switch, reset, import) are published atomically, and each assault hook reads one consistent snapshot per request. A Dev UI import is staged and applied at once: a rejected payload changes nothing, and values of the wrong type are converted or skipped with a warning.

The assault history records the latency actually endured, including a delay cut short by @Timeout, on every layer.

A blocking latency is never applied on a Vert.x event-loop thread (the WebClient latency uses a timer), and latency values are bounded to 0-300000 ms.

The Dev UI keeps its toggles and forms in sync with the server (changes made from another tab or a JSON-RPC client appear within 2 seconds) and validates response header names before saving.

The Dev UI state file is written as structured JSON; files written by earlier versions are still read.

Quarkus 3.38 and every later version are accepted by the build (including the ecosystem CI snapshot).

A decision left on a worker thread by a failed HTTP request no longer leaks into a later message consumer or scheduled job.

The Dev UI "client" counter counted nothing: assaults are now counted per source.

Saving response header rules with an invalid name no longer erases every rule.

A corrupted or legacy .goblin-state.json no longer prevents the application from starting.

Assault metrics and latency histograms via Micrometer / Prometheus, in the optional quarkus-goblin-metrics module (#51).

Assault tracing via OpenTelemetry — one goblin.assault span per assault with goblin.assault.* attributes, linked to the parent request span, in the optional quarkus-goblin-opentelemetry module (#47).

The chaos engine is initialised in dev and test mode only: a packaged production application no longer reads .goblin-state.json nor activates chaos at startup, and no longer fails with a NullPointerException. In test mode the state file is ignored.

Predefined assault profiles (#35).

Turn the Assault History into a chaos testing console (#37).

Client-side assaults for outgoing REST Client calls (#38).

Client-side assaults for outgoing Vert.x WebClient calls via GoblinWebClient.enable(…​) (#31).

Response body injection assault (#40).

Response header injection assault (#42).

Chaos Dashboard overhaul with live controls and server-driven quick picks (#41).

The enabled flag now always comes from the property, never from persisted state (#39).

Dev UI dashboard with per-assault-type toggles (#10).

Factual markdown report export from the assault history (#13).

Adopt -dev naming for the dev-only extension modules (#14).

Migrate docs to the Antora structure for Quarkiverse publication (#6).

Add the Goblin icon to the extension list (#12).

Server-side assaults: latency, exception, HTTP status and dependency degradation (#1).