Skip to content

v5.119.0 proposal - #9555

Draft
dd-octo-sts[bot] wants to merge 22 commits into
v5.xfrom
v5.119.0-proposal
Draft

v5.119.0 proposal#9555
dd-octo-sts[bot] wants to merge 22 commits into
v5.xfrom
v5.119.0-proposal

Conversation

@dd-octo-sts

@dd-octo-sts dd-octo-sts Bot commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

Features

  • General: Report OTLP export status #9517
  • LLM Observability: Add experiments dataset operations #9458
  • Test Optimization: Add ci.pipeline.display_name tag for Buildkite #9541
  • Test Optimization: Support WebdriverIO with Mocha #9520

Fixes

  • AppSec: Fix express ssrf flaky test #9564
  • General: Wait for asyncEnd on promise settlement #9538
  • logs: Properly split name and version for scoped names #9508
  • Test Optimization: Hide WebdriverIO worker messages #9561
  • Test Optimization: Wait for WebDriverIO worker payloads #9565

Internal (CI, Testing, Benchmarking)

  • Dependencies: Bump @smithy/smithy-client #9550
  • Dependencies: Bump next #9572
  • eslint: Update eslint-plugin-unicorn to 72 #9503
  • Feature Flags: Update node server provider to 2.0.2 #9480
  • licenses: Read dependencies directly from lockfiles #9540
  • scripts: Speed up verify-exercised-tests and close detection gaps #9542

BridgeAR and others added 6 commits July 28, 2026 05:58
Activate Node.js 18 compatible rules that remove redundant syntax and catch correctness issues.

1. Skip esbuild resolution for built-in modules without package paths.
2. Contain detached Cucumber finalizer rejections without changing the returned test promise.
3. Preserve datastream varint continuation bits at 0x80 boundaries.
4. Avoid buffering Electron traces when the trace channel has no subscribers.
5. Replace regex-based HTTP path splitting with a shared delimiter scan, reducing representative cost from 41.4 ns to 14.7 ns per call.
Add three boolean fields to the DATADOG TRACER CONFIGURATION startup log
indicating whether the tracer exports each telemetry signal over OTLP:

- otlp_traces_export_enabled  (OTEL_TRACES_EXPORTER === 'otlp', excluding
  Test Optimization mode, which keeps test spans on the citestcycle endpoint)
- otlp_metrics_export_enabled (DD_METRICS_OTEL_ENABLED)
- otlp_logs_export_enabled    (DD_LOGS_OTEL_ENABLED)

The snake_case keys are chosen for cross-language startup-log consistency.
…#9542)

* test(scripts): cover verify-exercised-tests detection

The checker's failure branches are unpinned, so a rework can narrow what it
detects while still exiting 0 on a healthy tree. This adds fixture checkouts
that drive each branch.

`main` takes the repository root as an optional argument so a fixture can stand
in for the script's own checkout.

* ci(scripts): answer test-file globs from one repository walk

verify-exercised-tests expanded its script globs with 227 separate `globSync`
traversals of the same tree. Walking once and matching the patterns in memory
cuts the run from 312 ms to 178 ms, medians of ten interleaved runs on one
checkout.

Matching has to stay identical to the walk it replaces, so the index compiles
patterns with the options `glob` derives internally. Its spec cross-checks
every result against `globSync`, over hand-written pattern shapes and over the
glob corpus this repository's own package.json produces.

Answering with too few files would let an unexercised spec pass unseen, so the
index refuses instead: an unreadable directory warns, and a `..` segment, which
needs a real tree to resolve against, throws. Literal path segments are compared
case-sensitively on every platform, the rule `glob` applies on Linux, so a
result no longer depends on whether the developer's filesystem folds case.

* ci(scripts): resolve workflow steps into one ordered event stream

Two ways a suite could go unverified survived the checker, both because a job's
steps were never modeled as one ordered, per-leg-resolved sequence.

1. A coverage upload placed before the suite it collects passed the check, because
   uploads were tracked as a per-job boolean and position never entered it. Five
   composite actions run a suite and upload its report, so the order that decides
   whether a report survives usually lives inside the action, not in the workflow.
2. `SPEC: ${{ matrix.spec }}` reached the glob unresolved, degrading `${SPEC:-*}`
   to `*` and making every spec in a directory look exercised by every matrix leg.
   Resolving it per leg surfaces
   packages/datadog-plugin-aws-sdk/test/base-inject-field.spec.js, which no leg
   selects; the serverless matrix gains the entry that runs it.

One traversal now yields the `run` and `upload` events a step contributes. The
second traversal that answered only "does this job upload?" is gone, and with it
the missing `using: composite` guard that made it throw on a JavaScript or Docker
action. Such an action is reported now, so an upload hidden inside one cannot read
as "this job never uploads".
Spawning Yarn and npm makes the license check pay their startup and dependency-tree construction costs on every lint run. Reading Yarn, npm, and Bun lockfiles directly reduced the representative end-to-end check from 285.8 ms to 32.1 ms.
…th 11 updates (#9552)

Bumps the cloud-and-messaging group with 11 updates in the /packages/dd-trace/test/plugins/versions directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-bedrock-runtime](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-bedrock-runtime) | `3.1094.0` | `3.1095.0` |
| [@aws-sdk/client-dynamodb](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-dynamodb) | `3.1094.0` | `3.1095.0` |
| [@aws-sdk/client-kinesis](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-kinesis) | `3.1094.0` | `3.1095.0` |
| [@aws-sdk/client-lambda](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-lambda) | `3.1094.0` | `3.1095.0` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1094.0` | `3.1095.0` |
| [@aws-sdk/client-sfn](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sfn) | `3.1094.0` | `3.1095.0` |
| [@aws-sdk/client-sns](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sns) | `3.1094.0` | `3.1095.0` |
| [@aws-sdk/client-sqs](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sqs) | `3.1094.0` | `3.1095.0` |
| [@smithy/core](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/core) | `3.29.8` | `3.30.0` |
| [@smithy/smithy-client](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/smithy-client) | `4.14.13` | `4.14.14` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `5.81.0` | `5.81.2` |



Updates `@aws-sdk/client-bedrock-runtime` from 3.1094.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-bedrock-runtime/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-bedrock-runtime)

Updates `@aws-sdk/client-dynamodb` from 3.1094.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-dynamodb/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-dynamodb)

Updates `@aws-sdk/client-kinesis` from 3.1094.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-kinesis/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-kinesis)

Updates `@aws-sdk/client-lambda` from 3.1094.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-lambda/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-lambda)

Updates `@aws-sdk/client-s3` from 3.1094.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-s3)

Updates `@aws-sdk/client-sfn` from 3.1094.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sfn/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-sfn)

Updates `@aws-sdk/client-sns` from 3.1094.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sns/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-sns)

Updates `@aws-sdk/client-sqs` from 3.1094.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sqs/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-sqs)

Updates `@smithy/core` from 3.29.8 to 3.30.0
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases)
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/core@3.30.0/packages/core)

Updates `@smithy/smithy-client` from 4.14.13 to 4.14.14
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases)
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/smithy-client/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/smithy-client@4.14.14/packages/smithy-client)

Updates `bullmq` from 5.81.0 to 5.81.2
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v5.81.0...v5.81.2)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-bedrock-runtime"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@aws-sdk/client-dynamodb"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@aws-sdk/client-kinesis"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@aws-sdk/client-lambda"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@aws-sdk/client-sfn"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@aws-sdk/client-sns"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@aws-sdk/client-sqs"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@smithy/core"
  dependency-version: 3.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@smithy/smithy-client"
  dependency-version: 4.14.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cloud-and-messaging
- dependency-name: bullmq
  dependency-version: 5.81.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cloud-and-messaging
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dd-octo-sts

dd-octo-sts Bot commented Jul 28, 2026

Copy link
Copy Markdown
Contributor Author

Overall package size

Self size: 7.53 MB
Deduped: 8.19 MB
No deduping: 8.19 MB

Dependency sizes | name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 3.3.2 | 124.41 kB | 440.65 kB | | opentracing | 0.14.7 | 194.81 kB | 194.81 kB | | dc-polyfill | 0.1.11 | 25.74 kB | 25.74 kB |

🤖 This report was automatically generated by heaviest-objects-in-the-universe

@datadog-official

datadog-official Bot commented Jul 28, 2026

Copy link
Copy Markdown

Tests

🎉 All green!

🧪 All tests passed
❄️ No new flaky tests detected

🔄 Datadog retried 1 test - 1 passed on retry View in Datadog

🎯 Code Coverage (details)
Patch Coverage: 94.29%
Overall Coverage: 98.42%

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: b46aa9f | Docs | Datadog PR Page | Give us feedback!

@codecov

codecov Bot commented Jul 28, 2026

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 94.59148% with 94 lines in your changes missing coverage. Please review.
✅ Project coverage is 98.42%. Comparing base (6b35e7d) to head (b46aa9f).
⚠️ Report is 1943 commits behind head on v5.x.

Files with missing lines Patch % Lines
...ckages/datadog-instrumentations/src/webdriverio.js 92.47% 52 Missing ⚠️
...kages/datadog-instrumentations/src/mocha/worker.js 89.06% 41 Missing ⚠️
packages/datadog-instrumentations/src/cucumber.js 85.71% 1 Missing ⚠️
Additional details and impacted files
@@             Coverage Diff             @@
##             v5.x    #9555       +/-   ##
===========================================
+ Coverage   83.19%   98.42%   +15.23%     
===========================================
  Files         476      952      +476     
  Lines       20153   130038   +109885     
  Branches        0    11100    +11100     
===========================================
+ Hits        16766   127995   +111229     
+ Misses       3387     2043     -1344     
Flag Coverage Δ
aiguard 57.21% <33.81%> (?)
aiguard-integration 56.04% <34.71%> (?)
apm-bucket-0 58.42% <35.61%> (?)
apm-bucket-1 63.73% <36.47%> (?)
apm-bucket-2 62.47% <34.22%> (?)
apm-bucket-3 59.94% <34.22%> (?)
apm-capabilities-tracing 62.68% <44.11%> (?)
apm-integrations-aerospike 56.50% <29.81%> (?)
apm-integrations-confluentinc-kafka-javascript 61.35% <34.64%> (?)
apm-integrations-couchbase 56.90% <33.81%> (?)
apm-integrations-http 62.52% <36.68%> (?)
apm-integrations-kafkajs 61.95% <34.64%> (?)
apm-integrations-next 58.99% <34.02%> (?)
apm-integrations-prisma 58.50% <34.69%> (?)
appsec 72.57% <37.65%> (?)
appsec-express_fastify_graphql 70.12% <38.35%> (?)
appsec-integration 51.05% <38.90%> (?)
appsec-kafka_ldapjs_lodash 63.71% <34.34%> (?)
appsec-mongodb-core_mongoose_mysql 67.44% <36.96%> (?)
appsec-next 57.38% <33.93%> (?)
appsec-node-serialize_passport_postgres 67.11% <36.76%> (?)
appsec-sourcing_stripe_template 65.46% <36.36%> (?)
debugger 64.63% <37.17%> (?)
instrumentations-bucket-0 51.61% <32.98%> (?)
instrumentations-bucket-1 60.02% <35.39%> (?)
instrumentations-bucket-10 61.83% <34.42%> (?)
instrumentations-bucket-11 51.52% <32.98%> (?)
instrumentations-bucket-12 52.10% <32.92%> (?)
instrumentations-bucket-13 51.63% <32.98%> (?)
instrumentations-bucket-2 53.51% <33.33%> (?)
instrumentations-bucket-3 59.04% <34.15%> (?)
instrumentations-bucket-4 52.17% <32.98%> (?)
instrumentations-bucket-5 57.42% <36.13%> (?)
instrumentations-bucket-6 60.56% <36.08%> (?)
instrumentations-bucket-7 58.25% <34.15%> (?)
instrumentations-bucket-8 59.38% <33.95%> (?)
instrumentations-bucket-9 61.36% <34.42%> (?)
instrumentations-instrumentation-couchbase 50.86% <28.39%> (?)
instrumentations-integration-esbuild 34.05% <39.77%> (?)
llmobs-ai_anthropic_bedrock 62.70% <35.91%> (?)
llmobs-bucket-1 61.47% <37.82%> (?)
llmobs-openai 62.05% <36.21%> (?)
llmobs-openai-agents_vertex-ai 59.97% <34.36%> (?)
llmobs-sdk 65.82% <71.36%> (?)
openfeature 55.88% <34.98%> (?)
openfeature-unit 53.24% <33.19%> (?)
platform-core_esbuild_instrumentations-misc 40.66% <41.08%> (?)
platform-integration 60.88% <36.77%> (?)
platform-shimmer_unit-guardrails_webpack 38.88% <37.59%> (?)
plugins-bucket-0 56.93% <35.58%> (?)
plugins-bucket-1 54.16% <33.80%> (?)
plugins-bucket-11 62.08% <34.63%> (?)
plugins-bucket-18 61.77% <34.89%> (?)
plugins-bucket-19 59.86% <34.43%> (?)
plugins-bucket-20 61.86% <34.70%> (?)
plugins-bucket-4 58.40% <34.15%> (?)
plugins-bullmq_cassandra_cookie 61.54% <35.24%> (?)
plugins-cookie-parser_crypto_dd-trace-api 56.55% <34.02%> (?)
plugins-fetch_fs_generic-pool 58.66% <36.00%> (?)
plugins-google-cloud-pubsub_grpc_handlebars 64.45% <34.84%> (?)
plugins-hapi_hono_ioredis 60.04% <34.22%> (?)
plugins-jest_knex_langgraph 55.45% <33.74%> (?)
plugins-ldapjs_light-my-request_limitd-client 58.33% <34.02%> (?)
plugins-lodash_mariadb_memcached 57.91% <34.23%> (?)
plugins-moleculer_mongodb_mongodb-core 61.71% <35.39%> (?)
plugins-mongoose_multer_mysql 58.92% <35.25%> (?)
plugins-mysql2_nats_node-serialize 60.52% <35.26%> (?)
plugins-opensearch_passport-http_pino 59.38% <35.87%> (?)
plugins-postgres_process_pug 58.10% <35.06%> (?)
plugins-redis_router_sequelize 61.91% <36.00%> (?)
plugins-test-and-upstream-rhea_undici_url 61.44% <37.34%> (?)
plugins-valkey_vm_winston 57.84% <34.02%> (?)
plugins-ws 59.41% <34.22%> (?)
profiling 61.95% <34.97%> (?)
serverless-aws-sdk-aws-sdk 54.96% <35.51%> (?)
serverless-aws-sdk-base-inject-field 50.80% <33.19%> (?)
serverless-aws-sdk-bedrockruntime 54.64% <33.53%> (?)
serverless-aws-sdk-client 56.30% <35.80%> (?)
serverless-aws-sdk-dynamodb 55.54% <33.53%> (?)
serverless-aws-sdk-eventbridge 49.31% <33.33%> (?)
serverless-aws-sdk-kinesis 59.17% <34.35%> (?)
serverless-aws-sdk-lambda 57.27% <33.74%> (?)
serverless-aws-sdk-s3 55.63% <33.74%> (?)
serverless-aws-sdk-serverless-peer-service 59.59% <35.78%> (?)
serverless-aws-sdk-sns 60.03% <34.35%> (?)
serverless-aws-sdk-sqs 60.46% <36.19%> (?)
serverless-aws-sdk-stepfunctions 55.46% <34.15%> (?)
serverless-aws-sdk-util 51.36% <33.19%> (?)
serverless-bucket-0 53.99% <30.57%> (?)
serverless-bucket-1 59.07% <35.15%> (?)
test-optimization-cucumber 71.99% <55.08%> (?)
test-optimization-cypress 65.41% <42.94%> (?)
test-optimization-jest 73.25% <54.45%> (?)
test-optimization-mocha 73.09% <49.21%> (?)
test-optimization-playwright-playwright-atr 60.29% <50.91%> (?)
test-optimization-playwright-playwright-efd 60.53% <50.91%> (?)
test-optimization-playwright-playwright-final-status 60.65% <51.09%> (?)
test-optimization-playwright-playwright-impacted-tests 60.22% <50.91%> (?)
test-optimization-playwright-playwright-reporting 61.56% <51.09%> (?)
test-optimization-playwright-playwright-test-management 61.03% <51.45%> (?)
test-optimization-playwright-playwright-test-span 60.41% <51.09%> (?)
test-optimization-selenium 60.06% <45.90%> (?)
test-optimization-testopt 58.54% <54.07%> (?)
test-optimization-vitest 70.30% <56.18%> (?)
test-optimization-webdriverio 57.14% <77.92%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@pr-commenter

pr-commenter Bot commented Jul 28, 2026

Copy link
Copy Markdown

Benchmarks

Benchmark execution time: 2026-07-29 06:16:32

Comparing candidate commit b46aa9f in PR branch v5.119.0-proposal with baseline commit 8c33807 in branch v5.x.

📊 Benchmarking dashboard

Found 0 performance improvements and 0 performance regressions! Performance is the same for 2321 metrics, 37 unstable metrics.

Explanation

This is an A/B test comparing a candidate commit's performance against that of a baseline commit. Performance changes are noted in the tables below as:

  • 🟩 = significantly better candidate vs. baseline
  • 🟥 = significantly worse candidate vs. baseline

We compute a confidence interval (CI) over the relative difference of means between metrics from the candidate and baseline commits, considering the baseline as the reference.

If the CI is entirely outside the configured SIGNIFICANT_IMPACT_THRESHOLD (or the deprecated UNCONFIDENCE_THRESHOLD), the change is considered significant.

Feel free to reach out to #apm-benchmarking-platform on Slack if you have any questions.

More details about the CI and significant changes

You can imagine this CI as a range of values that is likely to contain the true difference of means between the candidate and baseline commits.

CIs of the difference of means are often centered around 0%, because often changes are not that big:

---------------------------------(------|---^--------)-------------------------------->
                              -0.6%    0%  0.3%     +1.2%
                                 |          |        |
         lower bound of the CI --'          |        |
sample mean (center of the CI) -------------'        |
         upper bound of the CI ----------------------'

As described above, a change is considered significant if the CI is entirely outside the configured SIGNIFICANT_IMPACT_THRESHOLD (or the deprecated UNCONFIDENCE_THRESHOLD).

For instance, for an execution time metric, this confidence interval indicates a significantly worse performance:

----------------------------------------|---------|---(---------^---------)---------->
                                       0%        1%  1.3%      2.2%      3.1%
                                                  |   |         |         |
       significant impact threshold --------------'   |         |         |
                      lower bound of CI --------------'         |         |
       sample mean (center of the CI) --------------------------'         |
                      upper bound of CI ----------------------------------'

Unstable benchmarks

These benchmarks have a confidence interval too wide to call a change; treat them as noise rather than signal.

scenario:appsec-appsec-enabled-20

  • unstable execution_time [-235.147ms; +220.751ms] or [-6.245%; +5.863%]

scenario:appsec-appsec-enabled-24

  • unstable execution_time [-208.975ms; +216.643ms] or [-7.820%; +8.107%]

scenario:appsec-appsec-enabled-26

  • unstable execution_time [-236.494ms; +233.225ms] or [-9.255%; +9.128%]

scenario:appsec-appsec-enabled-with-attacks-24

  • unstable execution_time [-169.733ms; +157.777ms] or [-5.475%; +5.089%]

scenario:appsec-appsec-enabled-with-attacks-26

  • unstable execution_time [-185.718ms; +194.291ms] or [-6.383%; +6.678%]

scenario:appsec-control-20

  • unstable execution_time [-177.848ms; +186.090ms] or [-9.895%; +10.354%]

scenario:appsec-control-24

  • unstable execution_time [-108.639ms; +112.714ms] or [-8.753%; +9.082%]

scenario:appsec-control-26

  • unstable execution_time [-124.930ms; +134.776ms] or [-10.059%; +10.852%]

scenario:debugger-line-probe-with-snapshot-default-24

  • unstable cpu_user_time [-1594.339ms; +588.782ms] or [-19.383%; +7.158%]
  • unstable execution_time [-1626.259ms; +601.086ms] or [-18.189%; +6.723%]
  • unstable instructions [-13.8G instructions; +5.0G instructions] or [-20.527%; +7.397%]
  • unstable throughput [-180.678op/s; +437.451op/s] or [-4.911%; +11.891%]

scenario:debugger-line-probe-with-snapshot-default-26

  • unstable cpu_user_time [-1834.663ms; +606.971ms] or [-19.587%; +6.480%]
  • unstable execution_time [-1843.786ms; +610.881ms] or [-18.256%; +6.048%]
  • unstable instructions [-16.4G instructions; +5.4G instructions] or [-20.986%; +6.933%]
  • unstable throughput [-136.577op/s; +400.581op/s] or [-4.201%; +12.321%]

scenario:debugger-line-probe-with-snapshot-minimal-26

  • unstable cpu_user_time [-3.538s; +0.488s] or [-34.415%; +4.749%]
  • unstable execution_time [-3.617s; +0.544s] or [-32.785%; +4.933%]
  • unstable instructions [-31.6G instructions; +4.2G instructions] or [-36.672%; +4.866%]
  • unstable throughput [-117.951op/s; +701.874op/s] or [-3.821%; +22.735%]

scenario:debugger-line-probe-without-snapshot-24

  • unstable cpu_user_time [-1757.647ms; +2763.284ms] or [-21.388%; +33.626%]
  • unstable execution_time [-1786.346ms; +2772.156ms] or [-19.975%; +30.998%]
  • unstable instructions [-15.2G instructions; +24.1G instructions] or [-22.662%; +35.902%]
  • unstable max_rss_usage [-8.388MB; +12.645MB] or [-5.349%; +8.063%]
  • unstable throughput [-773.955op/s; +506.328op/s] or [-21.119%; +13.816%]

scenario:dogstatsd-with-tags-20

  • unstable cpu_user_time [-458.796ms; +285.325ms] or [-9.393%; +5.842%]
  • unstable execution_time [-456.940ms; +287.723ms] or [-9.211%; +5.800%]
  • unstable throughput [-98916.304op/s; +155560.021op/s] or [-5.835%; +9.176%]

scenario:plugin-claude-agent-sdk-compact-stream-scan-26

  • unstable cpu_usage_percentage [-3.073%; +7.347%]

scenario:plugin-graphql-long-with-depth-and-collapse-off-20

  • unstable max_rss_usage [-27.324MB; +17.051MB] or [-6.878%; +4.292%]

scenario:plugin-graphql-long-with-depth-off-20

  • unstable max_rss_usage [-7094.927KB; +6983.498KB] or [-5.419%; +5.334%]

scenario:plugin-graphql-long-with-depth-off-26

  • unstable max_rss_usage [-22794.334KB; +22943.477KB] or [-10.525%; +10.593%]

scenario:plugin-graphql-long-with-depth-on-max-20

  • unstable execution_time [-574.781ms; +604.410ms] or [-4.891%; +5.143%]
  • unstable throughput [-3.545op/s; +3.343op/s] or [-5.178%; +4.883%]

scenario:plugin-pg-service-26

  • unstable cpu_usage_percentage [-6.145%; +4.112%]
  • unstable execution_time [-46.858ms; +65.856ms] or [-5.168%; +7.264%]

scenario:test-optimization-large-suite-20

  • unstable max_rss_usage [-8.222MB; +4.870MB] or [-9.764%; +5.784%]

juan-fernandez and others added 16 commits July 29, 2026 06:00
…tes (#9551)

Bumps the ai-and-llm group with 6 updates in the /packages/dd-trace/test/plugins/versions directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/amazon-bedrock](https://github.com/vercel/ai/tree/HEAD/packages/amazon-bedrock) | `5.0.30` | `5.0.31` |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `4.0.19` | `4.0.20` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `4.0.23` | `4.0.24` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.114.0` | `0.115.0` |
| [@langchain/anthropic](https://github.com/langchain-ai/langchainjs) | `1.5.1` | `1.5.2` |
| [langchain](https://github.com/langchain-ai/langchainjs) | `1.5.3` | `1.5.4` |



Updates `@ai-sdk/amazon-bedrock` from 5.0.30 to 5.0.31
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/amazon-bedrock/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/amazon-bedrock@5.0.31/packages/amazon-bedrock)

Updates `@ai-sdk/anthropic` from 4.0.19 to 4.0.20
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@4.0.20/packages/anthropic)

Updates `@ai-sdk/google` from 4.0.23 to 4.0.24
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@4.0.24/packages/google)

Updates `@anthropic-ai/sdk` from 0.114.0 to 0.115.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.114.0...sdk-v0.115.0)

Updates `@langchain/anthropic` from 1.5.1 to 1.5.2
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/anthropic@1.5.1...@langchain/anthropic@1.5.2)

Updates `langchain` from 1.5.3 to 1.5.4
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/langchain@1.5.3...langchain@1.5.4)

---
updated-dependencies:
- dependency-name: "@ai-sdk/amazon-bedrock"
  dependency-version: 5.0.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-and-llm
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 4.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-and-llm
- dependency-name: "@ai-sdk/google"
  dependency-version: 4.0.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-and-llm
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.115.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-and-llm
- dependency-name: "@langchain/anthropic"
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-and-llm
- dependency-name: langchain
  dependency-version: 1.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-and-llm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the test-versions group with 1 update in the /integration-tests/esbuild directory: [@smithy/smithy-client](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/smithy-client).


Updates `@smithy/smithy-client` from 4.14.13 to 4.14.14
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases)
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/smithy-client/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/smithy-client@4.14.14/packages/smithy-client)

---
updated-dependencies:
- dependency-name: "@smithy/smithy-client"
  dependency-version: 4.14.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: test-versions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…updates (#9531)

Bumps the test-versions group with 11 updates in the /packages/dd-trace/test/plugins/versions directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.215` | `0.3.220` |
| [@datadog/openfeature-node-server](https://github.com/DataDog/openfeature-js-client/tree/HEAD/packages/node-server) | `2.0.1` | `2.0.2` |
| [@opentelemetry/api-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.220.0` | `0.221.0` |
| [@opentelemetry/exporter-jaeger](https://github.com/open-telemetry/opentelemetry-js) | `2.9.0` | `2.10.0` |
| [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.220.0` | `0.221.0` |
| [@opentelemetry/instrumentation-express](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/instrumentation-express) | `0.68.0` | `0.69.0` |
| [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.220.0` | `0.221.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.220.0` | `0.221.0` |
| [google-gax](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/gax) | `5.0.7` | `5.0.8` |
| [moleculer](https://github.com/moleculerjs/moleculer) | `0.15.0` | `0.15.1` |
| [pnpm](https://github.com/pnpm/pnpm/tree/HEAD/pnpm11/pnpm) | `11.15.1` | `11.17.0` |



Updates `@anthropic-ai/claude-agent-sdk` from 0.3.215 to 0.3.220
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.3.215...v0.3.220)

Updates `@datadog/openfeature-node-server` from 2.0.1 to 2.0.2
- [Release notes](https://github.com/DataDog/openfeature-js-client/releases)
- [Changelog](https://github.com/DataDog/openfeature-js-client/blob/main/CHANGELOG.md)
- [Commits](https://github.com/DataDog/openfeature-js-client/commits/@datadog/openfeature-node-server@2.0.2/packages/node-server)

Updates `@opentelemetry/api-logs` from 0.220.0 to 0.221.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.221.0)

Updates `@opentelemetry/exporter-jaeger` from 2.9.0 to 2.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.9.0...v2.10.0)

Updates `@opentelemetry/instrumentation` from 0.220.0 to 0.221.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.221.0)

Updates `@opentelemetry/instrumentation-express` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/instrumentation-express/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/instrumentation-pg-v0.69.0/packages/instrumentation-express)

Updates `@opentelemetry/instrumentation-http` from 0.220.0 to 0.221.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.221.0)

Updates `@opentelemetry/sdk-node` from 0.220.0 to 0.221.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.221.0)

Updates `google-gax` from 5.0.7 to 5.0.8
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/core/packages/gax/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/google-gax-v5.0.8/core/packages/gax)

Updates `moleculer` from 0.15.0 to 0.15.1
- [Release notes](https://github.com/moleculerjs/moleculer/releases)
- [Changelog](https://github.com/moleculerjs/moleculer/blob/master/CHANGELOG.md)
- [Commits](moleculerjs/moleculer@v0.15.0...v0.15.1)

Updates `pnpm` from 11.15.1 to 11.17.0
- [Release notes](https://github.com/pnpm/pnpm/releases)
- [Commits](https://github.com/pnpm/pnpm/commits/v11.17.0/pnpm11/pnpm)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.3.218
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: test-versions
- dependency-name: "@datadog/openfeature-node-server"
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: test-versions
- dependency-name: "@opentelemetry/api-logs"
  dependency-version: 0.221.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: "@opentelemetry/exporter-jaeger"
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: "@opentelemetry/instrumentation"
  dependency-version: 0.221.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: "@opentelemetry/instrumentation-express"
  dependency-version: 0.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: "@opentelemetry/instrumentation-http"
  dependency-version: 0.221.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.221.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: google-gax
  dependency-version: 5.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: test-versions
- dependency-name: moleculer
  dependency-version: 0.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: test-versions
- dependency-name: pnpm
  dependency-version: 11.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore(openfeature): update node server provider to 2.0.1

* chore(openfeature): update node server provider to 2.0.2
* fix(appsec): fix express ssrf flaky test

* fixup
… 22 updates (#9514)

* chore(deps): bump the testing-and-build group across 1 directory with 22 updates

Bumps the testing-and-build group with 22 updates in the /packages/dd-trace/test/plugins/versions directory:

| Package | From | To |
| --- | --- | --- |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `8.0.1` |
| [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript) | `7.28.5` | `8.0.1` |
| [@electron/packager](https://github.com/electron/packager) | `20.0.0` | `20.0.4` |
| [@happy-dom/jest-environment](https://github.com/capricorn86/happy-dom) | `20.10.6` | `20.11.1` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.61.0` | `1.62.0` |
| [@vitest/coverage-istanbul](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-istanbul) | `4.1.9` | `4.1.10` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.9` | `4.1.10` |
| [@vitest/runner](https://github.com/vitest-dev/vitest/tree/HEAD/packages/runner) | `4.1.9` | `4.1.10` |
| [cypress](https://github.com/cypress-io/cypress) | `15.16.0` | `15.19.0` |
| [electron](https://github.com/electron/electron) | `42.1.0` | `43.2.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.28.0` | `0.28.1` |
| [next](https://github.com/vercel/next.js) | `16.2.6` | `16.2.11` |
| [nock](https://github.com/nock/nock) | `14.0.15` | `14.0.16` |
| [playwright](https://github.com/microsoft/playwright) | `1.61.0` | `1.62.0` |
| [playwright-core](https://github.com/microsoft/playwright) | `1.61.0` | `1.62.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.6` | `19.2.8` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.44.0` | `4.46.0` |
| [sinon](https://github.com/sinonjs/sinon) | `22.0.0` | `22.1.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.9` | `4.1.10` |
| [workerpool](https://github.com/josdejong/workerpool) | `10.0.2` | `10.0.3` |



Updates `@babel/core` from 7.29.0 to 8.0.1
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.1/packages/babel-core)

Updates `@babel/preset-typescript` from 7.28.5 to 8.0.1
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.1/packages/babel-preset-typescript)

Updates `@electron/packager` from 20.0.0 to 20.0.4
- [Release notes](https://github.com/electron/packager/releases)
- [Changelog](https://github.com/electron/packager/blob/main/NEWS.md)
- [Commits](electron/packager@v20.0.0...v20.0.4)

Updates `@happy-dom/jest-environment` from 20.10.6 to 20.11.1
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.10.6...v20.11.1)

Updates `@playwright/test` from 1.61.0 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.0...v1.62.0)

Updates `@vitest/coverage-istanbul` from 4.1.9 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-istanbul)

Updates `@vitest/coverage-v8` from 4.1.9 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8)

Updates `@vitest/runner` from 4.1.9 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/runner)

Updates `cypress` from 15.16.0 to 15.19.0
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](cypress-io/cypress@v15.16.0...v15.19.0)

Updates `electron` from 42.1.0 to 43.2.0
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v42.1.0...v43.2.0)

Updates `esbuild` from 0.28.0 to 0.28.1
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.28.0...v0.28.1)

Updates `next` from 16.2.6 to 16.2.11
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.6...v16.2.11)

Updates `nock` from 14.0.15 to 14.0.16
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](nock/nock@v14.0.15...v14.0.16)

Updates `playwright` from 1.61.0 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.0...v1.62.0)

Updates `playwright-core` from 1.61.0 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.0...v1.62.0)

Updates `react` from 19.2.6 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.6 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `selenium-webdriver` from 4.44.0 to 4.46.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Commits](SeleniumHQ/selenium@selenium-4.44.0...selenium-4.46.0)

Updates `sinon` from 22.0.0 to 22.1.0
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/CHANGES.md)
- [Commits](sinonjs/sinon@v22.0.0...v22.1.0)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `vitest` from 4.1.9 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

Updates `workerpool` from 10.0.2 to 10.0.3
- [Changelog](https://github.com/josdejong/workerpool/blob/master/HISTORY.md)
- [Commits](josdejong/workerpool@v10.0.2...v10.0.3)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: testing-and-build
- dependency-name: "@babel/preset-typescript"
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: testing-and-build
- dependency-name: "@electron/packager"
  dependency-version: 20.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: "@happy-dom/jest-environment"
  dependency-version: 20.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: testing-and-build
- dependency-name: "@playwright/test"
  dependency-version: 1.61.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: "@vitest/coverage-istanbul"
  dependency-version: 4.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: "@vitest/runner"
  dependency-version: 4.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: cypress
  dependency-version: 15.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: testing-and-build
- dependency-name: electron
  dependency-version: 43.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: testing-and-build
- dependency-name: esbuild
  dependency-version: 0.28.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: next
  dependency-version: 16.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: nock
  dependency-version: 14.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: playwright
  dependency-version: 1.61.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: playwright-core
  dependency-version: 1.61.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: react
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: react-dom
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: selenium-webdriver
  dependency-version: 4.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: testing-and-build
- dependency-name: sinon
  dependency-version: 22.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: testing-and-build
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: testing-and-build
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: workerpool
  dependency-version: 10.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
...

Signed-off-by: dependabot[bot] <support@github.com>

* test(test-optimization): pin compatible dependency axes (#9559)

* fix(appsec): fix sourcemap fixture tsconfig for Typescript 7

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Juan Antonio Fernández de Alba <juan.fernandezdealba@datadoghq.com>
Co-authored-by: ishabi <ilyasshabi94@gmail.com>
…updates (#9569)

Bumps the web-frameworks group with 7 updates in the /packages/dd-trace/test/plugins/versions directory:

| Package | From | To |
| --- | --- | --- |
| [@apollo/gateway](https://github.com/apollographql/federation/tree/HEAD/gateway-js) | `2.14.2` | `2.14.3` |
| [@apollo/subgraph](https://github.com/apollographql/federation/tree/HEAD/subgraph-js) | `2.14.2` | `2.14.3` |
| [@hapi/hapi](https://github.com/hapijs/hapi) | `21.4.9` | `21.4.10` |
| [@hono/node-server](https://github.com/honojs/node-server) | `2.0.10` | `2.0.11` |
| [find-my-way](https://github.com/delvedor/find-my-way) | `9.6.0` | `9.7.0` |
| [hono](https://github.com/honojs/hono) | `4.12.30` | `4.12.32` |
| [undici](https://github.com/nodejs/undici) | `8.7.0` | `8.9.0` |



Updates `@apollo/gateway` from 2.14.2 to 2.14.3
- [Release notes](https://github.com/apollographql/federation/releases)
- [Changelog](https://github.com/apollographql/federation/blob/main/gateway-js/CHANGELOG.md)
- [Commits](https://github.com/apollographql/federation/commits/@apollo/gateway@2.14.3/gateway-js)

Updates `@apollo/subgraph` from 2.14.2 to 2.14.3
- [Release notes](https://github.com/apollographql/federation/releases)
- [Changelog](https://github.com/apollographql/federation/blob/main/subgraph-js/CHANGELOG.md)
- [Commits](https://github.com/apollographql/federation/commits/@apollo/subgraph@2.14.3/subgraph-js)

Updates `@hapi/hapi` from 21.4.9 to 21.4.10
- [Release notes](https://github.com/hapijs/hapi/releases)
- [Commits](hapijs/hapi@v21.4.9...v21.4.10)

Updates `@hono/node-server` from 2.0.10 to 2.0.11
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.0.10...v2.0.11)

Updates `find-my-way` from 9.6.0 to 9.7.0
- [Release notes](https://github.com/delvedor/find-my-way/releases)
- [Commits](delvedor/find-my-way@v9.6.0...v9.7.0)

Updates `hono` from 4.12.30 to 4.12.32
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.30...v4.12.32)

Updates `undici` from 8.7.0 to 8.9.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.7.0...v8.9.0)

---
updated-dependencies:
- dependency-name: "@apollo/gateway"
  dependency-version: 2.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-frameworks
- dependency-name: "@apollo/subgraph"
  dependency-version: 2.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-frameworks
- dependency-name: "@hapi/hapi"
  dependency-version: 21.4.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-frameworks
- dependency-name: "@hono/node-server"
  dependency-version: 2.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-frameworks
- dependency-name: find-my-way
  dependency-version: 9.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-frameworks
- dependency-name: hono
  dependency-version: 4.12.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-frameworks
- dependency-name: undici
  dependency-version: 8.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-frameworks
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* feat(llmobs): add experiments dataset operations

* feat(llmobs): add CSV dataset creation

* chore(llmobs): use csv parser for dataset import

* chore(llmobs): add csv parser license

* feat(llmobs): include dataset version in experiments

* fix(llmobs): address dataset review feedback

* create jsontype to replace any

* remove dataset operations from llmobs

* remove csv dataset func

* noops produce warn logs instead of error throwing

* use vcr testing instead

* Update packages/dd-trace/src/llmobs/experiments/index.js

Co-authored-by: Sam Brenner <106700075+sabrenner@users.noreply.github.com>

* fix(llmobs): address experiments ci failures

* test(llmobs): cover experiments noop accessors

* Apply suggestion from @sabrenner

Co-authored-by: Sam Brenner <106700075+sabrenner@users.noreply.github.com>

* Apply suggestion from @sabrenner

Co-authored-by: Sam Brenner <106700075+sabrenner@users.noreply.github.com>

* fix(llmobs): simplify dataset records query route

* test(llmobs): remove handmade experiment cassettes

* test(llmobs): isolate experiment fetch mocks

---------

Co-authored-by: Sam Brenner <106700075+sabrenner@users.noreply.github.com>
Bumps the testing-and-build group with 1 update in the /packages/dd-trace/test/plugins/versions directory: [next](https://github.com/vercel/next.js).


Updates `next` from 16.2.11 to 16.2.12
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.11...v16.2.12)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…with 5 updates (#9573)

Bumps the gh-actions-packages group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` |
| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.1` | `4.37.3` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.1` | `4.37.3` |
| [docker/login-action](https://github.com/docker/login-action) | `4` | `4.5.1` |
| [actions/setup-python](https://github.com/actions/setup-python) | `6.3.0` | `7.0.0` |

Bumps the gh-actions-packages group with 5 updates in the /.github/workflows directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` |
| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.1` | `4.37.3` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.1` | `4.37.3` |
| [docker/login-action](https://github.com/docker/login-action) | `4` | `4.5.1` |
| [actions/setup-python](https://github.com/actions/setup-python) | `6.3.0` | `7.0.0` |



Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v7...3d3c42e)

Updates `github/codeql-action/init` from 4.37.1 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@7188fc3...e4fba86)

Updates `github/codeql-action/analyze` from 4.37.1 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@7188fc3...e4fba86)

Updates `docker/login-action` from 4 to 4.5.1
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@v4...v4.5.1)

Updates `actions/setup-python` from 6.3.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@ece7cb0...5fda3b9)

Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v7...3d3c42e)

Updates `github/codeql-action/init` from 4.37.1 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@7188fc3...e4fba86)

Updates `github/codeql-action/analyze` from 4.37.1 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@7188fc3...e4fba86)

Updates `docker/login-action` from 4 to 4.5.1
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@v4...v4.5.1)

Updates `actions/setup-python` from 6.3.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@ece7cb0...5fda3b9)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: docker/login-action
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: actions/setup-python
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: docker/login-action
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: actions/setup-python
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dd-octo-sts
dd-octo-sts Bot force-pushed the v5.119.0-proposal branch from cd9c54f to b46aa9f Compare July 29, 2026 06:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants