v6.5.0 proposal#9414
Closed
dd-octo-sts[bot] wants to merge 56 commits into
Closed
Conversation
A failed settings response must leave test management, EFD, and ITR disabled.
…9133) The reference tracked an older code-transformer surface and read as a tour of every field. Two capabilities the prior version did not cover are the ones that decide instrumentation strategy: 1. A library that exposes work through a runtime-decorated handle (`app.decorate('x', fn)`) is still orchestrion-matchable when the function behind it is a named source declaration — match `functionName`, not the handle, and skip shimmer entirely. 2. `objectName` + `propertyName` pin a function assigned to a property on a named receiver (or `this`), where `expressionName` alone matches the wrong object when the property name repeats. Trims the per-field walkthrough to the parts that change a decision and keeps the verify-against-installed-source caveat. * docs(orchestrion): correct skill guidance for current wrappers The vendored Orchestrion templates still allocate wrapper state before the subscriber check, so the reference should not describe the inactive path as zero-cost. Extra module prefixes also require an explicit subscription loop today; documenting that prevents forked package integrations from silently missing events. * docs(orchestrion): correct wrapper lifecycle guidance An astQuery-only async hook silently selects the synchronous wrapper unless functionQuery keeps the operator metadata. Generated channels also never emit finish, and the duplicate iterator guide used the obsolete config field and channel suffix.
The server used an IPv6 wildcard while the tracer exported to 127.0.0.1. macOS can assign that wildcard a numeric port already held by an IPv4 listener, so trace payloads reached that process instead of the mock agent.
Finished manual test spans remained active in async-local storage, so nested tests and later work inherited a completed parent.
Collapsed list resolvers built both a dotted string and a parallel object path for the same key, repeating map lookups and allocations for every resolver. A five-item list with four fields per item dropped from 4.10-4.16 us to 3.68-3.69 us per bookkeeping pass (10.1-11.2%) on Node v24.18.0 / V8 13.6.233.17-node.50.
In OTel bridge mode, Next.js renames its root request span to `${method} ${route}` before ending it. The bridge mapped that value to the Datadog operation name, producing route-bearing operation names and leaving the resource as the bare method.
Apply the correction before the DD span is finished and serialized, preserving Next's route/RSC resource name while selecting the operation name from the active service-naming schema.
Fixes: #4003
Node can hang when native coverage resolves a large ESM source-map cache during isolate teardown. Resolve maps as scripts load so the final V8 snapshot retains all execution counters and foreign coverage directories remain untouched. Refs: nodejs/node#49344 * test(coverage): disconnect source-map observer before teardown Drain the last queued URLs and disconnect the Debugger session from the JavaScript exit event before Node runs native coverage serialization. This keeps late exit-time maps while avoiding a live observer during isolate teardown. * test(coverage): avoid renderer and exit-time source-map lookups Electron renderers lack a usable Node inspector, so connecting a Session prevents renderer preload and IPC instrumentation from starting. Explicit process.exit skips the scheduled warm-up, moving the full source-map backlog into the exit event where Node's teardown can hang. Skip only renderer observers and drain pending maps before explicit exit; the exit hook now only disconnects.
Next.js standalone builds using pnpm omitted the OpenFeature provider because the shared optional-peer wrapper was invisible to nft, leaving tracer.openfeature as the no-op provider at runtime. Keep the bundler escape hatch while exposing a file-traceable fallback entrypoint for tools that cannot recognize the wrapper. Also document CommonJS and ESM entrypoints. Fixes: #8635
…9289) Hardcoded CPU bounds fail when scheduler contention shifts system time, while wide static tolerances can hide conversion errors. Bracket the collector's reads with independent process CPU and monotonic-clock samples to keep the real native and fallback paths while deriving the accepted range from the observed interval.
* Add dd-octo-sts chainguard policy files Add 5 policy files under .github/chainguard/ declaring the issuer, subject, event, and permission constraints for every workflow that will be migrated from secrets.GITHUB_TOKEN to DataDog/dd-octo-sts-action. These policies must be on the default branch before the corresponding workflow changes can use them. * ci(chainguard): rescope self.* octo-sts policies to current master master already migrated project.yml (package-size-report) and part of update-3rdparty-licenses.yml (auto-commit-licenses job) to octo-sts, under a bare policy naming convention, since this PR was opened. Drop the duplicate self.package-size-report and self.check-licenses policies added here for those now-covered workflows. Also fix self.release-validate: its claim_pattern matched a pull_request/refs/pull/.../merge trigger, but release-validate.yml triggers on push to v*.*.*-proposal branches. The policy would never have matched a real token request. * ci(chainguard): add self.check-licenses policy for license regen step The check-licenses job's 'Regenerate LICENSE-3rdparty.csv' step still uses secrets.GITHUB_TOKEN on master; only the separate auto-commit-licenses job was migrated to octo-sts (policy: update-3rdparty-licenses), which is actor-restricted to dependabot/dd-octo-sts and grants contents:write for the commit-back. check-licenses runs for any PR touching the license-relevant paths, not just bot PRs, and only needs read access to generate the SBOM CSV, so it needs its own unrestricted, read-only policy rather than reusing update-3rdparty-licenses. Isolated in its own commit: revert this alone if it turns out redundant or conflicts with follow-up work on that workflow. --------- Co-authored-by: Ruben Bridgewater <ruben@bridgewater.de>
#9316) * test(plugins): retry versions install to survive transient CDN 5xx The generated versions/ workspaces download large prebuilt binaries at postinstall time (e.g. Electron pulls one archive per major from GitHub's release CDN), which intermittently fail with 502/504 gateway errors. The previous single, immediate retry fired back-to-back, so both attempts landed in the same brief outage window and the job failed anyway. Wrap the install in a small backoff-retry helper (4 attempts, 5s/10s/20s) so a transient outage no longer fails the job. This benefits every plugin's version install, not just Electron. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * ci(electron): retry apt-get in the electron job The electron job installs xvfb via apt, whose package mirrors occasionally return transient 5xx/invalid-data errors and fail the job. Retry the update+install with backoff before giving up. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * test(electron): guard IPC teardown against a closed channel The afterEach teardown sent {name:'quit'} unconditionally. If the Electron child had already exited (e.g. an app crash mid-test), sending on the closed IPC channel emits an unhandled ERR_IPC_CHANNEL_CLOSED 'error' that masks the real failure and, because it throws inside the hook, aborts the rest of the suite. Only quit a still-connected child and pass a send callback so a channel that races closed is absorbed instead of emitting 'error'. A genuine crash still fails its own test via the trace-assertion timeout. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
* Add dd-octo-sts chainguard policy files Add 5 policy files under .github/chainguard/ declaring the issuer, subject, event, and permission constraints for every workflow that will be migrated from secrets.GITHUB_TOKEN to DataDog/dd-octo-sts-action. These policies must be on the default branch before the corresponding workflow changes can use them. * Replace secrets.GITHUB_TOKEN with dd-octo-sts Migrate the remaining secrets.GITHUB_TOKEN references in 6 GitHub Actions workflows to OIDC tokens minted by DataDog/dd-octo-sts-action. The token exchange is auditable and governed by chainguard policy files that explicitly declare which workflow, event, and ref pattern may request which permissions. For release.yml the three publish jobs already had an octo-sts step; move the GITHUB_TOKEN env from job level (where step outputs are not yet available) to step level on the release-notes script, using GH_TOKEN which the gh CLI and the notes script both recognise. For the other 5 workflows add a new dd-octo-sts step and a matching chainguard policy file. * ci(chainguard): rescope self.* octo-sts policies to current master master already migrated project.yml (package-size-report) and part of update-3rdparty-licenses.yml (auto-commit-licenses job) to octo-sts, under a bare policy naming convention, since this PR was opened. Drop the duplicate self.package-size-report and self.check-licenses policies added here for those now-covered workflows. Also fix self.release-validate: its claim_pattern matched a pull_request/refs/pull/.../merge trigger, but release-validate.yml triggers on push to v*.*.*-proposal branches. The policy would never have matched a real token request. * ci(chainguard): add self.check-licenses policy for license regen step The check-licenses job's 'Regenerate LICENSE-3rdparty.csv' step still uses secrets.GITHUB_TOKEN on master; only the separate auto-commit-licenses job was migrated to octo-sts (policy: update-3rdparty-licenses), which is actor-restricted to dependabot/dd-octo-sts and grants contents:write for the commit-back. check-licenses runs for any PR touching the license-relevant paths, not just bot PRs, and only needs read access to generate the SBOM CSV, so it needs its own unrestricted, read-only policy rather than reusing update-3rdparty-licenses. Isolated in its own commit: revert this alone if it turns out redundant or conflicts with follow-up work on that workflow. * ci(workflows): migrate check-licenses regen step to dd-octo-sts The 'Regenerate LICENSE-3rdparty.csv' step in check-licenses still used secrets.GITHUB_TOKEN; only the separate auto-commit-licenses job was migrated to octo-sts on master. Wire it to the self.check-licenses policy added alongside this (read-only, unrestricted actor, since any PR touching license-relevant paths runs this job). Isolated in its own commit, paired with the self.check-licenses chainguard policy: revert this alone if it turns out redundant or conflicts with follow-up work on that workflow. --------- Co-authored-by: Ruben Bridgewater <ruben@bridgewater.de> Co-authored-by: Roch Devost <roch.devost@datadoghq.com>
…th 8 updates (#9411) Bumps the cloud-and-messaging group with 8 updates in the /packages/dd-trace/test/plugins/versions directory: | Package | From | To | | --- | --- | --- | | [@aws-sdk/client-bedrock-runtime](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-bedrock-runtime) | `3.1085.0` | `3.1086.0` | | [@aws-sdk/client-dynamodb](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-dynamodb) | `3.1085.0` | `3.1086.0` | | [@aws-sdk/client-kinesis](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-kinesis) | `3.1085.0` | `3.1086.0` | | [@aws-sdk/client-lambda](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-lambda) | `3.1085.0` | `3.1086.0` | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1085.0` | `3.1086.0` | | [@aws-sdk/client-sfn](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sfn) | `3.1085.0` | `3.1086.0` | | [@aws-sdk/client-sns](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sns) | `3.1085.0` | `3.1086.0` | | [@aws-sdk/client-sqs](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sqs) | `3.1085.0` | `3.1086.0` | Updates `@aws-sdk/client-bedrock-runtime` from 3.1085.0 to 3.1086.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-bedrock-runtime/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1086.0/clients/client-bedrock-runtime) Updates `@aws-sdk/client-dynamodb` from 3.1085.0 to 3.1086.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-dynamodb/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1086.0/clients/client-dynamodb) Updates `@aws-sdk/client-kinesis` from 3.1085.0 to 3.1086.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-kinesis/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1086.0/clients/client-kinesis) Updates `@aws-sdk/client-lambda` from 3.1085.0 to 3.1086.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-lambda/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1086.0/clients/client-lambda) Updates `@aws-sdk/client-s3` from 3.1085.0 to 3.1086.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1086.0/clients/client-s3) Updates `@aws-sdk/client-sfn` from 3.1085.0 to 3.1086.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sfn/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1086.0/clients/client-sfn) Updates `@aws-sdk/client-sns` from 3.1085.0 to 3.1086.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sns/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1086.0/clients/client-sns) Updates `@aws-sdk/client-sqs` from 3.1085.0 to 3.1086.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sqs/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1086.0/clients/client-sqs) --- updated-dependencies: - dependency-name: "@aws-sdk/client-bedrock-runtime" dependency-version: 3.1086.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cloud-and-messaging - dependency-name: "@aws-sdk/client-dynamodb" dependency-version: 3.1086.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cloud-and-messaging - dependency-name: "@aws-sdk/client-kinesis" dependency-version: 3.1086.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cloud-and-messaging - dependency-name: "@aws-sdk/client-lambda" dependency-version: 3.1086.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cloud-and-messaging - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1086.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cloud-and-messaging - dependency-name: "@aws-sdk/client-sfn" dependency-version: 3.1086.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cloud-and-messaging - dependency-name: "@aws-sdk/client-sns" dependency-version: 3.1086.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cloud-and-messaging - dependency-name: "@aws-sdk/client-sqs" dependency-version: 3.1086.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cloud-and-messaging ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…tes (#9410) Bumps the ai-and-llm group with 8 updates in the /packages/dd-trace/test/plugins/versions directory: | Package | From | To | | --- | --- | --- | | [@ai-sdk/amazon-bedrock](https://github.com/vercel/ai/tree/HEAD/packages/amazon-bedrock) | `5.0.16` | `5.0.20` | | [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `4.0.11` | `4.0.14` | | [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `4.0.11` | `4.0.14` | | [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `4.0.11` | `4.0.13` | | [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.110.0` | `0.111.0` | | [@openai/agents](https://github.com/openai/openai-agents-js) | `0.13.1` | `0.13.3` | | [@openai/agents-core](https://github.com/openai/openai-agents-js) | `0.13.1` | `0.13.3` | | [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.19` | `7.0.26` | Updates `@ai-sdk/amazon-bedrock` from 5.0.16 to 5.0.20 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/amazon-bedrock/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/amazon-bedrock@5.0.20/packages/amazon-bedrock) Updates `@ai-sdk/anthropic` from 4.0.11 to 4.0.14 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/anthropic/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@4.0.14/packages/anthropic) Updates `@ai-sdk/google` from 4.0.11 to 4.0.14 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/google/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@4.0.14/packages/google) Updates `@ai-sdk/openai` from 4.0.11 to 4.0.13 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.13/packages/openai) Updates `@anthropic-ai/sdk` from 0.110.0 to 0.111.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.110.0...sdk-v0.111.0) Updates `@openai/agents` from 0.13.1 to 0.13.3 - [Release notes](https://github.com/openai/openai-agents-js/releases) - [Commits](openai/openai-agents-js@v0.13.1...v0.13.3) Updates `@openai/agents-core` from 0.13.1 to 0.13.3 - [Release notes](https://github.com/openai/openai-agents-js/releases) - [Commits](openai/openai-agents-js@v0.13.1...v0.13.3) Updates `ai` from 7.0.19 to 7.0.26 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/ai@7.0.26/packages/ai) --- updated-dependencies: - dependency-name: "@ai-sdk/amazon-bedrock" dependency-version: 5.0.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-and-llm - dependency-name: "@ai-sdk/anthropic" dependency-version: 4.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-and-llm - dependency-name: "@ai-sdk/google" dependency-version: 4.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-and-llm - dependency-name: "@ai-sdk/openai" dependency-version: 4.0.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-and-llm - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.111.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-and-llm - dependency-name: "@openai/agents" dependency-version: 0.13.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-and-llm - dependency-name: "@openai/agents-core" dependency-version: 0.13.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-and-llm - dependency-name: ai dependency-version: 7.0.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-and-llm ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Contributor
Author
Overall package sizeSelf size: 7.51 MB Dependency sizes| name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 3.3.2 | 124.41 kB | 440.65 kB | | opentracing | 0.14.7 | 194.81 kB | 194.81 kB | | dc-polyfill | 0.1.11 | 25.74 kB | 25.74 kB |🤖 This report was automatically generated by heaviest-objects-in-the-universe |
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## v6.x #9414 +/- ##
=======================================
Coverage ? 98.43%
=======================================
Files ? 943
Lines ? 127257
Branches ? 10872
=======================================
Hits ? 125262
Misses ? 1995
Partials ? 0 Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
BenchmarksBenchmark execution time: 2026-07-22 06:15:11 Comparing candidate commit 5d7f54d in PR branch Found 0 performance improvements and 0 performance regressions! Performance is the same for 2318 metrics, 40 unstable metrics.
|
…sts (#9409) The fetch, request and utility-request tests asserted traces with the 1000ms default while the IPC tests already used 10s. A freshly-spawned Electron app's first traced operation pays cold-start cost, so the first version's fetch consistently exceeded 1000ms on loaded CI runners (both attempts of a run failed on it while the 10s IPC tests passed) — cold-start latency, not trace loss (flushInterval is 0, other versions' fetch passes, and the same cold app's IPC tests deliver within 10s). Use a shared TRACE_TIMEOUT_MS for every trace assertion. They still resolve the instant the matching trace arrives, so passing runs are unaffected. Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
…ateway inferred spans (#9089) * adding PoC azure application gateway inferred span * fixing implementation to prevent overwriting of timestamps * refactoring gateway implementation to support azure frontdoor * fixing linting issues -- adding new test case against azure proxies with no timestamp * cleaning up logic * cleaning up spacing * Fixing variable * Fixing variables * Linting * adding a check to ensure that original code path still works * clean up * Update packages/dd-trace/src/plugins/util/inferred_proxy.js Co-authored-by: Ruben Bridgewater <ruben@bridgewater.de> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * reduce logging if no proxy header is defined * fixing lint issues * linting * Fixing issue with timestamp logic * ensuring paths have slashs if there is a path present * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * fixing test typo Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * fixing suggested commit and relinted * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Fixing tests Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Revert "Fixing tests" This reverts commit 665c9f7. * Revert "Potential fix for pull request finding" This reverts commit e58b225. * fixing complex logic * fixing stray space --------- Co-authored-by: Ruben Bridgewater <ruben@bridgewater.de> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
…th 12 updates (#9428) Bumps the cloud-and-messaging group with 12 updates in the /packages/dd-trace/test/plugins/versions directory: | Package | From | To | | --- | --- | --- | | [@aws-sdk/client-bedrock-runtime](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-bedrock-runtime) | `3.1086.0` | `3.1089.0` | | [@aws-sdk/client-dynamodb](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-dynamodb) | `3.1086.0` | `3.1089.0` | | [@aws-sdk/client-kinesis](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-kinesis) | `3.1086.0` | `3.1089.0` | | [@aws-sdk/client-lambda](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-lambda) | `3.1086.0` | `3.1089.0` | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1086.0` | `3.1089.0` | | [@aws-sdk/client-sfn](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sfn) | `3.1086.0` | `3.1089.0` | | [@aws-sdk/client-sns](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sns) | `3.1086.0` | `3.1089.0` | | [@aws-sdk/client-sqs](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sqs) | `3.1086.0` | `3.1089.0` | | [@smithy/core](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/core) | `3.29.3` | `3.29.5` | | [@smithy/smithy-client](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/smithy-client) | `4.14.8` | `4.14.10` | | [bullmq](https://github.com/taskforcesh/bullmq) | `5.80.2` | `5.80.6` | | [durable-functions](https://github.com/Azure/azure-functions-durable-js) | `3.4.0` | `3.5.0` | Updates `@aws-sdk/client-bedrock-runtime` from 3.1086.0 to 3.1089.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-bedrock-runtime/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1089.0/clients/client-bedrock-runtime) Updates `@aws-sdk/client-dynamodb` from 3.1086.0 to 3.1089.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-dynamodb/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1089.0/clients/client-dynamodb) Updates `@aws-sdk/client-kinesis` from 3.1086.0 to 3.1089.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-kinesis/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1089.0/clients/client-kinesis) Updates `@aws-sdk/client-lambda` from 3.1086.0 to 3.1089.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-lambda/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1089.0/clients/client-lambda) Updates `@aws-sdk/client-s3` from 3.1086.0 to 3.1089.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1089.0/clients/client-s3) Updates `@aws-sdk/client-sfn` from 3.1086.0 to 3.1089.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sfn/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1089.0/clients/client-sfn) Updates `@aws-sdk/client-sns` from 3.1086.0 to 3.1089.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sns/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1089.0/clients/client-sns) Updates `@aws-sdk/client-sqs` from 3.1086.0 to 3.1089.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sqs/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1089.0/clients/client-sqs) Updates `@smithy/core` from 3.29.3 to 3.29.5 - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/core/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/core@3.29.5/packages/core) Updates `@smithy/smithy-client` from 4.14.8 to 4.14.10 - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/smithy-client/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/smithy-client@4.14.10/packages/smithy-client) Updates `bullmq` from 5.80.2 to 5.80.6 - [Release notes](https://github.com/taskforcesh/bullmq/releases) - [Commits](taskforcesh/bullmq@v5.80.2...v5.80.6) Updates `durable-functions` from 3.4.0 to 3.5.0 - [Release notes](https://github.com/Azure/azure-functions-durable-js/releases) - [Commits](Azure/azure-functions-durable-js@v3.4.0...v3.5.0) --- updated-dependencies: - dependency-name: "@aws-sdk/client-bedrock-runtime" dependency-version: 3.1089.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cloud-and-messaging - dependency-name: "@aws-sdk/client-dynamodb" dependency-version: 3.1089.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cloud-and-messaging - dependency-name: "@aws-sdk/client-kinesis" dependency-version: 3.1089.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cloud-and-messaging - dependency-name: "@aws-sdk/client-lambda" dependency-version: 3.1089.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cloud-and-messaging - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1089.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cloud-and-messaging - dependency-name: "@aws-sdk/client-sfn" dependency-version: 3.1089.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cloud-and-messaging - dependency-name: "@aws-sdk/client-sns" dependency-version: 3.1089.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cloud-and-messaging - dependency-name: "@aws-sdk/client-sqs" dependency-version: 3.1089.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cloud-and-messaging - dependency-name: "@smithy/core" dependency-version: 3.29.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cloud-and-messaging - dependency-name: "@smithy/smithy-client" dependency-version: 4.14.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cloud-and-messaging - dependency-name: bullmq dependency-version: 5.80.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cloud-and-messaging - dependency-name: durable-functions dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cloud-and-messaging ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
dd-octo-sts
Bot
force-pushed
the
v6.5.0-proposal
branch
from
July 20, 2026 06:03
c3532db to
d896bdf
Compare
…sts (#9417) * test(appsec): deflake RASP SSRF "should not detect threat" express tests * test(appsec): disable proxy on RASP SSRF outbound "not detect threat" requests
…#9219) * feat(aiguard): evaluating anthropic calls with AI guard automatically
Coverage upload instrumentation converted rejected NYC reports into fulfilled promises, allowing the command to succeed without a report.
* fix(graphql): preserve hook error overrides The orchestrion lifecycle applied GraphQL errors after application hooks, so hooks could no longer clear expected failures. Make hooks the final span writer for result errors, synchronous throws, and rejected executor results while retaining GraphQL error events. Fixes: #9423 * fix(graphql): release execute guards before hooks The orchestrion migration kept re-entry guards active while hooks ran, so a hook starting another operation with the same context silently skipped tracing. Release the guards before handing control to application code while still finishing the span after the hook.
…pdates (#9449) * chore(deps): bump the test-versions group across 1 directory with 7 updates Bumps the test-versions group with 7 updates in the /packages/dd-trace/test/plugins/versions directory: | Package | From | To | | --- | --- | --- | | [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.207` | `0.3.214` | | [@aws/durable-execution-sdk-js](https://github.com/aws/aws-durable-execution-sdk-js/tree/HEAD/packages/aws-durable-execution-sdk-js) | `2.1.0` | `2.2.0` | | [@datadog/openfeature-node-server](https://github.com/DataDog/openfeature-js-client/tree/HEAD/packages/node-server) | `2.0.0` | `2.0.1` | | [mercurius](https://github.com/mercurius-js/mercurius) | `16.9.0` | `16.10.0` | | [pnpm](https://github.com/pnpm/pnpm/tree/HEAD/pnpm11/pnpm) | `11.12.0` | `11.15.0` | | [protobufjs](https://github.com/protobufjs/protobuf.js) | `8.7.0` | `8.7.1` | | [stripe](https://github.com/stripe/stripe-node) | `22.3.1` | `22.3.2` | Updates `@anthropic-ai/claude-agent-sdk` from 0.3.207 to 0.3.214 - [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/claude-agent-sdk-typescript@v0.3.207...v0.3.214) Updates `@aws/durable-execution-sdk-js` from 2.1.0 to 2.2.0 - [Release notes](https://github.com/aws/aws-durable-execution-sdk-js/releases) - [Changelog](https://github.com/aws/aws-durable-execution-sdk-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws/aws-durable-execution-sdk-js/commits/HEAD/packages/aws-durable-execution-sdk-js) Updates `@datadog/openfeature-node-server` from 2.0.0 to 2.0.1 - [Release notes](https://github.com/DataDog/openfeature-js-client/releases) - [Changelog](https://github.com/DataDog/openfeature-js-client/blob/main/CHANGELOG.md) - [Commits](https://github.com/DataDog/openfeature-js-client/commits/@datadog/openfeature-node-server@2.0.1/packages/node-server) Updates `mercurius` from 16.9.0 to 16.10.0 - [Release notes](https://github.com/mercurius-js/mercurius/releases) - [Commits](https://github.com/mercurius-js/mercurius/commits/v16.10.0) Updates `pnpm` from 11.12.0 to 11.15.0 - [Release notes](https://github.com/pnpm/pnpm/releases) - [Commits](https://github.com/pnpm/pnpm/commits/v11.15.0/pnpm11/pnpm) Updates `protobufjs` from 8.7.0 to 8.7.1 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v8.7.0...protobufjs-v8.7.1) Updates `stripe` from 22.3.1 to 22.3.2 - [Release notes](https://github.com/stripe/stripe-node/releases) - [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md) - [Commits](stripe/stripe-node@v22.3.1...v22.3.2) --- updated-dependencies: - dependency-name: "@anthropic-ai/claude-agent-sdk" dependency-version: 0.3.214 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: test-versions - dependency-name: "@aws/durable-execution-sdk-js" dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: "@datadog/openfeature-node-server" dependency-version: 2.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: test-versions - dependency-name: mercurius dependency-version: 16.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: pnpm dependency-version: 11.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: protobufjs dependency-version: 8.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: test-versions - dependency-name: stripe dependency-version: 22.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: test-versions ... Signed-off-by: dependabot[bot] <support@github.com> * @aws/durable-execution-sdk-js@2.2.0 renames getNextStepId() to peekStepId() --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Thomas Hunter II <tlhunter@datadog.com>
… updates (#9425) Bumps the web-frameworks group with 21 updates in the /packages/dd-trace/test/plugins/versions directory: | Package | From | To | | --- | --- | --- | | [@apollo/gateway](https://github.com/apollographql/federation/tree/HEAD/gateway-js) | `2.14.0` | `2.14.2` | | [@apollo/subgraph](https://github.com/apollographql/federation/tree/HEAD/subgraph-js) | `2.14.0` | `2.14.2` | | [@fastify/cookie](https://github.com/fastify/fastify-cookie) | `11.1.1` | `11.1.2` | | [@fastify/multipart](https://github.com/fastify/fastify-multipart) | `10.0.0` | `10.1.0` | | [@graphql-tools/executor](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/executor) | `1.5.3` | `1.5.7` | | [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.14.3` | `1.14.4` | | [@hono/node-server](https://github.com/honojs/node-server) | `2.0.3` | `2.0.10` | | [@koa/router](https://github.com/koajs/router) | `15.5.0` | `15.7.0` | | [axios](https://github.com/axios/axios) | `1.16.1` | `1.18.1` | | [body-parser](https://github.com/expressjs/body-parser) | `2.2.2` | `2.3.0` | | [ejs](https://github.com/mde/ejs) | `5.0.2` | `6.0.1` | | [fastify](https://github.com/fastify/fastify) | `5.8.5` | `5.10.0` | | [graphql](https://github.com/graphql/graphql-js) | `16.14.0` | `16.14.2` | | [graphql-tag](https://github.com/apollographql/graphql-tag) | `2.12.6` | `2.12.7` | | [graphql-tools](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/graphql-tools) | `9.0.28` | `9.0.33` | | [graphql-yoga](https://github.com/graphql-hive/graphql-yoga/tree/HEAD/packages/graphql-yoga) | `5.21.0` | `5.21.2` | | [hono](https://github.com/honojs/hono) | `4.12.19` | `4.12.30` | | [koa](https://github.com/koajs/koa) | `3.2.0` | `3.2.1` | | [multer](https://github.com/expressjs/multer) | `2.1.1` | `2.2.0` | | [undici](https://github.com/nodejs/undici) | `8.3.0` | `8.7.0` | | [ws](https://github.com/websockets/ws) | `8.20.1` | `8.21.1` | Updates `@apollo/gateway` from 2.14.0 to 2.14.2 - [Release notes](https://github.com/apollographql/federation/releases) - [Changelog](https://github.com/apollographql/federation/blob/main/gateway-js/CHANGELOG.md) - [Commits](https://github.com/apollographql/federation/commits/@apollo/gateway@2.14.2/gateway-js) Updates `@apollo/subgraph` from 2.14.0 to 2.14.2 - [Release notes](https://github.com/apollographql/federation/releases) - [Changelog](https://github.com/apollographql/federation/blob/main/subgraph-js/CHANGELOG.md) - [Commits](https://github.com/apollographql/federation/commits/@apollo/subgraph@2.14.2/subgraph-js) Updates `@fastify/cookie` from 11.1.1 to 11.1.2 - [Release notes](https://github.com/fastify/fastify-cookie/releases) - [Commits](fastify/fastify-cookie@v11.1.1...v11.1.2) Updates `@fastify/multipart` from 10.0.0 to 10.1.0 - [Release notes](https://github.com/fastify/fastify-multipart/releases) - [Commits](fastify/fastify-multipart@v10.0.0...v10.1.0) Updates `@graphql-tools/executor` from 1.5.3 to 1.5.7 - [Release notes](https://github.com/ardatan/graphql-tools/releases) - [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/executor/CHANGELOG.md) - [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/executor@1.5.7/packages/executor) Updates `@grpc/grpc-js` from 1.14.3 to 1.14.4 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.14.3...@grpc/grpc-js@1.14.4) Updates `@hono/node-server` from 2.0.3 to 2.0.10 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v2.0.3...v2.0.10) Updates `@koa/router` from 15.5.0 to 15.7.0 - [Release notes](https://github.com/koajs/router/releases) - [Commits](koajs/router@v15.5.0...v15.7.0) Updates `axios` from 1.16.1 to 1.18.1 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.16.1...v1.18.1) Updates `body-parser` from 2.2.2 to 2.3.0 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@v2.2.2...v2.3.0) Updates `ejs` from 5.0.2 to 6.0.1 - [Release notes](https://github.com/mde/ejs/releases) - [Changelog](https://github.com/mde/ejs/blob/main/RELEASE_NOTES_v5.md) - [Commits](mde/ejs@v5.0.2...v6.0.1) Updates `fastify` from 5.8.5 to 5.10.0 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.8.5...v5.10.0) Updates `graphql` from 16.14.0 to 16.14.2 - [Release notes](https://github.com/graphql/graphql-js/releases) - [Commits](graphql/graphql-js@v16.14.0...v16.14.2) Updates `graphql-tag` from 2.12.6 to 2.12.7 - [Release notes](https://github.com/apollographql/graphql-tag/releases) - [Changelog](https://github.com/apollographql/graphql-tag/blob/main/CHANGELOG.md) - [Commits](apollographql/graphql-tag@v2.12.6...v2.12.7) Updates `graphql-tools` from 9.0.28 to 9.0.33 - [Release notes](https://github.com/ardatan/graphql-tools/releases) - [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/graphql-tools/CHANGELOG.md) - [Commits](https://github.com/ardatan/graphql-tools/commits/graphql-tools@9.0.33/packages/graphql-tools) Updates `graphql-yoga` from 5.21.0 to 5.21.2 - [Release notes](https://github.com/graphql-hive/graphql-yoga/releases) - [Changelog](https://github.com/graphql-hive/graphql-yoga/blob/main/packages/graphql-yoga/CHANGELOG.md) - [Commits](https://github.com/graphql-hive/graphql-yoga/commits/graphql-yoga@5.21.2/packages/graphql-yoga) Updates `hono` from 4.12.19 to 4.12.30 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.19...v4.12.30) Updates `koa` from 3.2.0 to 3.2.1 - [Release notes](https://github.com/koajs/koa/releases) - [Changelog](https://github.com/koajs/koa/blob/master/History.md) - [Commits](koajs/koa@v3.2.0...v3.2.1) Updates `multer` from 2.1.1 to 2.2.0 - [Release notes](https://github.com/expressjs/multer/releases) - [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md) - [Commits](expressjs/multer@v2.1.1...v2.2.0) Updates `undici` from 8.3.0 to 8.7.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.3.0...v8.7.0) Updates `ws` from 8.20.1 to 8.21.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.20.1...8.21.1) --- updated-dependencies: - dependency-name: "@apollo/gateway" dependency-version: 2.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-frameworks - dependency-name: "@apollo/subgraph" dependency-version: 2.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-frameworks - dependency-name: "@fastify/cookie" dependency-version: 11.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-frameworks - dependency-name: "@fastify/multipart" dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-frameworks - dependency-name: "@graphql-tools/executor" dependency-version: 1.5.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-frameworks - dependency-name: "@grpc/grpc-js" dependency-version: 1.14.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-frameworks - dependency-name: "@hono/node-server" dependency-version: 2.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-frameworks - dependency-name: "@koa/router" dependency-version: 15.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-frameworks - dependency-name: axios dependency-version: 1.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-frameworks - dependency-name: body-parser dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-frameworks - dependency-name: ejs dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: web-frameworks - dependency-name: fastify dependency-version: 5.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-frameworks - dependency-name: graphql dependency-version: 17.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: web-frameworks - dependency-name: graphql-tag dependency-version: 2.12.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-frameworks - dependency-name: graphql-tools dependency-version: 9.0.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-frameworks - dependency-name: graphql-yoga dependency-version: 5.21.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-frameworks - dependency-name: hono dependency-version: 4.12.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-frameworks - dependency-name: koa dependency-version: 3.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: web-frameworks - dependency-name: multer dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-frameworks - dependency-name: undici dependency-version: 8.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-frameworks - dependency-name: ws dependency-version: 8.21.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: web-frameworks ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Feature flag configuration can now be delivered from the agentless endpoint while keeping startup lazy and polling cancellable. The source retains the last known-good response when polling fails and avoids assembling unrelated JSON fields during streaming responses.
dd-octo-sts
Bot
force-pushed
the
v6.5.0-proposal
branch
from
July 21, 2026 22:05
dcb0c89 to
a3be9c1
Compare
* fix(test-optimization): contain Playwright RUM correlation failures A rejected correlation-cookie write previously escaped the navigation hook because the plugin started browser I/O without awaiting it, replacing a passing browser test with an unhandled rejection. Keep browser operations behind the navigation result and expire only the Datadog cookie during cleanup. * fix(test-optimization): contain Selenium RUM correlation failures Rejected setup and cleanup operations previously shared the awaited get and quit chains, so a Datadog failure could replace navigation or prevent browser shutdown. Keep the real driver result outside those failure boundaries. * fix(test-optimization): contain Cypress RUM correlation failures A rejected queued cookie command previously failed the Datadog beforeEach hook before a rejection handler could contain it. Attach containment at synchronous command execution, and clear a reused cookie before replacement so a failed write cannot restart RUM with the prior test ID. * fix(test-optimization): share browser RUM correlation contract Playwright navigation under an active child span tagged that child instead of the test span because each browser plugin resolved RUM metadata independently. Resolve the test span through one shared contract and keep the cookie protocol in one owner across Cypress, Playwright, and Selenium. * fix(test-optimization): keep Cypress RUM support self-contained Cypress auto-instrumentation copies its browser support source into the customer project. A relative import could not resolve from the generated ESM file, leaving passing runs without test events. Carry the shared cookie name through the existing suite task boundary, and keep error reporting from replacing the contained cookie failure. * test(test-optimization): centralize browser RUM boundary tests Playwright and Selenium RUM boundary coverage used standalone instrumentation jobs while Cypress lived with its framework integration suite. Keep each framework's behavior and failure cases under its existing integration runner.
Resolver spans with the same field name and return type could not be distinguished across parent types. The schema coordinate makes `Human.name` and `Pet.name` independently queryable without changing existing resource names. Fixes: #2398 Refs: https://spec.graphql.org/draft/#sec-Schema-Coordinates
…sh (#9407) Add README.electron.md that states the package is for internal use by the Electron SDK only, and update publish-electron.js to swap it in during npm publish (same backup/restore pattern as package.json).
Removed probes stayed indexed by source location, causing later failures to reuse probe IDs that no longer existed. Bulk cleanup also split Windows drive paths at the volume separator.
dd-octo-sts
Bot
force-pushed
the
v6.5.0-proposal
branch
from
July 21, 2026 22:13
a3be9c1 to
3ba4c81
Compare
BridgeAR
previously approved these changes
Jul 21, 2026
…pdates (#9296) * chore(deps): bump the test-versions group across 1 directory with 4 updates Bumps the test-versions group with 4 updates in the /integration-tests/esbuild directory: [@koa/router](https://github.com/koajs/router), [@smithy/smithy-client](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/smithy-client), [knex](https://github.com/knex/knex) and [openai](https://github.com/openai/openai-node). Updates `@koa/router` from 15.6.0 to 15.7.0 - [Release notes](https://github.com/koajs/router/releases) - [Commits](koajs/router@v15.6.0...v15.7.0) Updates `@smithy/smithy-client` from 4.14.2 to 4.14.10 - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/smithy-client/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/smithy-client@4.14.10/packages/smithy-client) Updates `knex` from 3.2.10 to 3.3.0 - [Release notes](https://github.com/knex/knex/releases) - [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md) - [Commits](knex/knex@3.2.10...3.3.0) Updates `openai` from 6.45.0 to 6.48.0 - [Release notes](https://github.com/openai/openai-node/releases) - [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md) - [Commits](openai/openai-node@v6.45.0...v6.48.0) --- updated-dependencies: - dependency-name: "@koa/router" dependency-version: 15.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: "@smithy/smithy-client" dependency-version: 4.14.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: test-versions - dependency-name: knex dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions - dependency-name: openai dependency-version: 6.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: test-versions ... Signed-off-by: dependabot[bot] <support@github.com> * add mariadb to externals list due to knex upgrade --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Thomas Hunter II <tlhunter@datadog.com>
Bumps the test-versions group with 1 update in the /packages/dd-trace/test/plugins/versions directory: [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript). Updates `@anthropic-ai/claude-agent-sdk` from 0.3.214 to 0.3.215 - [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/claude-agent-sdk-typescript@v0.3.214...v0.3.215) --- updated-dependencies: - dependency-name: "@anthropic-ai/claude-agent-sdk" dependency-version: 0.3.215 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: test-versions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the cloud-and-messaging group with 1 update in the /packages/dd-trace/test/plugins/versions directory: [bullmq](https://github.com/taskforcesh/bullmq). Updates `bullmq` from 5.80.7 to 5.80.9 - [Release notes](https://github.com/taskforcesh/bullmq/releases) - [Commits](taskforcesh/bullmq@v5.80.7...v5.80.9) --- updated-dependencies: - dependency-name: bullmq dependency-version: 5.80.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cloud-and-messaging ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
dd-octo-sts
Bot
force-pushed
the
v6.5.0-proposal
branch
from
July 22, 2026 05:58
3ba4c81 to
37801b5
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
13 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Features
Fixes
Performance
Documentation
Internal (CI, Testing, Benchmarking)