Skip to content

v5.119.0 proposal - #9555

Merged
sabrenner merged 43 commits into
v5.xfrom
v5.119.0-proposal
Jul 30, 2026
Merged

v5.119.0 proposal#9555
sabrenner merged 43 commits into
v5.xfrom
v5.119.0-proposal

Conversation

@dd-octo-sts

@dd-octo-sts dd-octo-sts Bot commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

Features

  • General: Report OTLP export status #9517
  • LLM Observability: Add experiments dataset operations #9458
  • LLM Observability: Emit experiment traces #9479
  • Test Optimization: Add ci.pipeline.display_name tag for Buildkite #9541
  • Test Optimization: Add WebdriverIO optimizations #9556
  • Test Optimization: Support Vitest Browser Mode #9535
  • Test Optimization: Support WebdriverIO with Mocha #9520

Fixes

  • AppSec: Fix express ssrf flaky test #9564
  • Feature Flags: Disable the provider for unsupported sources #9482
  • General: Wait for asyncEnd on promise settlement #9538
  • General: Wrap Node builtins once across CommonJS and ESM #9576
  • google-cloud-pubsub: Fix DSM context propagation for google-cloud-pubsub #7582
  • logs: Properly split name and version for scoped names #9508
  • rhea: DSM context leak between concurrent consumers #7581
  • Test Optimization: Detect swapped directories when inode numbers exceed 2^53 #9580
  • Test Optimization: Hide WebdriverIO worker messages #9561
  • Test Optimization: Keep playwright summary counts on one line #9587
  • Test Optimization: Wait for WebDriverIO worker payloads #9565

Internal (CI, Testing, Benchmarking)

  • Dependencies: Bump @hono/node-server #9603
  • Dependencies: Bump @smithy/smithy-client #9550
  • Dependencies: Bump next #9572
  • Dependencies: Bump the vendor-minor-and-patch-dependencies group across 1 directory with 3 updates #9571
  • eslint: Update eslint-plugin-unicorn to 72 #9503
  • Feature Flags: Update node server provider to 2.0.2 #9480
  • General: Drop the removed agent.close options argument #9583
  • General: Pin docker/login-action to a commit SHA #9582
  • licenses: Read dependencies directly from lockfiles #9540
  • lint: Clear shellcheck and regexp findings ahead of enabling the rules #9586
  • scripts: Speed up verify-exercised-tests and close detection gaps #9542
  • Test Optimization: Gather known-tests payloads until the child exits #9590
  • Test Optimization: Gather multiproject payloads until the child exits #9577
  • Test Optimization: Make preload path assertion portable #9581
  • Test Optimization: Prevent test swallowing errors #9567
  • Test Optimization: Set the API key on the config the exporter reads #9579
  • tsconfig: Drop deprecated alwaysStrict and baseUrl options #9557

BridgeAR and others added 6 commits July 28, 2026 05:58
Activate Node.js 18 compatible rules that remove redundant syntax and catch correctness issues.

1. Skip esbuild resolution for built-in modules without package paths.
2. Contain detached Cucumber finalizer rejections without changing the returned test promise.
3. Preserve datastream varint continuation bits at 0x80 boundaries.
4. Avoid buffering Electron traces when the trace channel has no subscribers.
5. Replace regex-based HTTP path splitting with a shared delimiter scan, reducing representative cost from 41.4 ns to 14.7 ns per call.
Add three boolean fields to the DATADOG TRACER CONFIGURATION startup log
indicating whether the tracer exports each telemetry signal over OTLP:

- otlp_traces_export_enabled  (OTEL_TRACES_EXPORTER === 'otlp', excluding
  Test Optimization mode, which keeps test spans on the citestcycle endpoint)
- otlp_metrics_export_enabled (DD_METRICS_OTEL_ENABLED)
- otlp_logs_export_enabled    (DD_LOGS_OTEL_ENABLED)

The snake_case keys are chosen for cross-language startup-log consistency.
…#9542)

* test(scripts): cover verify-exercised-tests detection

The checker's failure branches are unpinned, so a rework can narrow what it
detects while still exiting 0 on a healthy tree. This adds fixture checkouts
that drive each branch.

`main` takes the repository root as an optional argument so a fixture can stand
in for the script's own checkout.

* ci(scripts): answer test-file globs from one repository walk

verify-exercised-tests expanded its script globs with 227 separate `globSync`
traversals of the same tree. Walking once and matching the patterns in memory
cuts the run from 312 ms to 178 ms, medians of ten interleaved runs on one
checkout.

Matching has to stay identical to the walk it replaces, so the index compiles
patterns with the options `glob` derives internally. Its spec cross-checks
every result against `globSync`, over hand-written pattern shapes and over the
glob corpus this repository's own package.json produces.

Answering with too few files would let an unexercised spec pass unseen, so the
index refuses instead: an unreadable directory warns, and a `..` segment, which
needs a real tree to resolve against, throws. Literal path segments are compared
case-sensitively on every platform, the rule `glob` applies on Linux, so a
result no longer depends on whether the developer's filesystem folds case.

* ci(scripts): resolve workflow steps into one ordered event stream

Two ways a suite could go unverified survived the checker, both because a job's
steps were never modeled as one ordered, per-leg-resolved sequence.

1. A coverage upload placed before the suite it collects passed the check, because
   uploads were tracked as a per-job boolean and position never entered it. Five
   composite actions run a suite and upload its report, so the order that decides
   whether a report survives usually lives inside the action, not in the workflow.
2. `SPEC: ${{ matrix.spec }}` reached the glob unresolved, degrading `${SPEC:-*}`
   to `*` and making every spec in a directory look exercised by every matrix leg.
   Resolving it per leg surfaces
   packages/datadog-plugin-aws-sdk/test/base-inject-field.spec.js, which no leg
   selects; the serverless matrix gains the entry that runs it.

One traversal now yields the `run` and `upload` events a step contributes. The
second traversal that answered only "does this job upload?" is gone, and with it
the missing `using: composite` guard that made it throw on a JavaScript or Docker
action. Such an action is reported now, so an upload hidden inside one cannot read
as "this job never uploads".
Spawning Yarn and npm makes the license check pay their startup and dependency-tree construction costs on every lint run. Reading Yarn, npm, and Bun lockfiles directly reduced the representative end-to-end check from 285.8 ms to 32.1 ms.
…th 11 updates (#9552)

Bumps the cloud-and-messaging group with 11 updates in the /packages/dd-trace/test/plugins/versions directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-bedrock-runtime](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-bedrock-runtime) | `3.1094.0` | `3.1095.0` |
| [@aws-sdk/client-dynamodb](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-dynamodb) | `3.1094.0` | `3.1095.0` |
| [@aws-sdk/client-kinesis](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-kinesis) | `3.1094.0` | `3.1095.0` |
| [@aws-sdk/client-lambda](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-lambda) | `3.1094.0` | `3.1095.0` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1094.0` | `3.1095.0` |
| [@aws-sdk/client-sfn](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sfn) | `3.1094.0` | `3.1095.0` |
| [@aws-sdk/client-sns](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sns) | `3.1094.0` | `3.1095.0` |
| [@aws-sdk/client-sqs](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sqs) | `3.1094.0` | `3.1095.0` |
| [@smithy/core](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/core) | `3.29.8` | `3.30.0` |
| [@smithy/smithy-client](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/smithy-client) | `4.14.13` | `4.14.14` |
| [bullmq](https://github.com/taskforcesh/bullmq) | `5.81.0` | `5.81.2` |



Updates `@aws-sdk/client-bedrock-runtime` from 3.1094.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-bedrock-runtime/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-bedrock-runtime)

Updates `@aws-sdk/client-dynamodb` from 3.1094.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-dynamodb/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-dynamodb)

Updates `@aws-sdk/client-kinesis` from 3.1094.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-kinesis/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-kinesis)

Updates `@aws-sdk/client-lambda` from 3.1094.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-lambda/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-lambda)

Updates `@aws-sdk/client-s3` from 3.1094.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-s3)

Updates `@aws-sdk/client-sfn` from 3.1094.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sfn/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-sfn)

Updates `@aws-sdk/client-sns` from 3.1094.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sns/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-sns)

Updates `@aws-sdk/client-sqs` from 3.1094.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sqs/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-sqs)

Updates `@smithy/core` from 3.29.8 to 3.30.0
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases)
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/core@3.30.0/packages/core)

Updates `@smithy/smithy-client` from 4.14.13 to 4.14.14
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases)
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/smithy-client/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/smithy-client@4.14.14/packages/smithy-client)

Updates `bullmq` from 5.81.0 to 5.81.2
- [Release notes](https://github.com/taskforcesh/bullmq/releases)
- [Commits](taskforcesh/bullmq@v5.81.0...v5.81.2)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-bedrock-runtime"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@aws-sdk/client-dynamodb"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@aws-sdk/client-kinesis"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@aws-sdk/client-lambda"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@aws-sdk/client-sfn"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@aws-sdk/client-sns"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@aws-sdk/client-sqs"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@smithy/core"
  dependency-version: 3.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cloud-and-messaging
- dependency-name: "@smithy/smithy-client"
  dependency-version: 4.14.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cloud-and-messaging
- dependency-name: bullmq
  dependency-version: 5.81.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cloud-and-messaging
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dd-octo-sts

dd-octo-sts Bot commented Jul 28, 2026

Copy link
Copy Markdown
Contributor Author

Overall package size

Self size: 7.59 MB
Deduped: 8.25 MB
No deduping: 8.25 MB

Dependency sizes | name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 3.3.2 | 124.41 kB | 440.65 kB | | opentracing | 0.14.7 | 194.81 kB | 194.81 kB | | dc-polyfill | 0.1.11 | 25.74 kB | 25.74 kB |

🤖 This report was automatically generated by heaviest-objects-in-the-universe

@datadog-official

datadog-official Bot commented Jul 28, 2026

Copy link
Copy Markdown

Tests

🎉 All green!

🧪 All tests passed
❄️ No new flaky tests detected

🔄 Datadog retried 1 test - 1 passed on retry View in Datadog

🎯 Code Coverage (details)
Patch Coverage: 99.39%
Overall Coverage: 98.53%

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 01455a6 | Docs | Datadog PR Page | Give us feedback!

@codecov

codecov Bot commented Jul 28, 2026

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 99.42021% with 21 lines in your changes missing coverage. Please review.
✅ Project coverage is 98.53%. Comparing base (6b35e7d) to head (01455a6).
⚠️ Report is 1943 commits behind head on v5.x.

Files with missing lines Patch % Lines
...kages/datadog-instrumentations/src/mocha/worker.js 98.20% 8 Missing ⚠️
...instrumentations/src/vitest-main-no-worker-init.js 99.23% 4 Missing ⚠️
packages/dd-trace/src/llmobs/experiments/util.js 98.16% 4 Missing ⚠️
...ckages/datadog-instrumentations/src/vitest-main.js 97.77% 2 Missing ⚠️
...ckages/datadog-instrumentations/src/webdriverio.js 99.78% 2 Missing ⚠️
packages/datadog-instrumentations/src/cucumber.js 88.88% 1 Missing ⚠️
Additional details and impacted files
@@             Coverage Diff             @@
##             v5.x    #9555       +/-   ##
===========================================
+ Coverage   83.19%   98.53%   +15.34%     
===========================================
  Files         476      953      +477     
  Lines       20153   131582   +111429     
  Branches        0    11520    +11520     
===========================================
+ Hits        16766   129653   +112887     
+ Misses       3387     1929     -1458     
Flag Coverage Δ
aiguard 56.91% <34.75%> (?)
aiguard-integration 55.74% <32.77%> (?)
apm-bucket-0 58.11% <35.47%> (?)
apm-bucket-1 63.38% <35.82%> (?)
apm-bucket-2 62.12% <34.91%> (?)
apm-bucket-3 59.62% <34.91%> (?)
apm-capabilities-tracing 62.46% <40.75%> (?)
apm-integrations-aerospike 56.20% <32.88%> (?)
apm-integrations-confluentinc-kafka-javascript 61.00% <35.08%> (?)
apm-integrations-couchbase 56.61% <34.75%> (?)
apm-integrations-http 62.19% <35.91%> (?)
apm-integrations-kafkajs 61.60% <35.08%> (?)
apm-integrations-next 58.69% <34.83%> (?)
apm-integrations-prisma 58.21% <35.10%> (?)
appsec 72.19% <36.31%> (?)
appsec-express_fastify_graphql 69.76% <36.60%> (?)
appsec-integration 50.72% <33.89%> (?)
appsec-kafka_ldapjs_lodash 63.38% <34.96%> (?)
appsec-mongodb-core_mongoose_mysql 67.10% <36.03%> (?)
appsec-next 57.13% <34.90%> (?)
appsec-node-serialize_passport_postgres 66.76% <35.95%> (?)
appsec-sourcing_stripe_template 65.13% <35.78%> (?)
debugger 64.29% <37.29%> (?)
instrumentations-bucket-0 51.40% <34.41%> (?)
instrumentations-bucket-1 59.70% <35.38%> (?)
instrumentations-bucket-10 61.51% <34.99%> (?)
instrumentations-bucket-11 51.30% <34.41%> (?)
instrumentations-bucket-12 51.88% <34.38%> (?)
instrumentations-bucket-13 51.41% <34.41%> (?)
instrumentations-bucket-2 53.28% <34.55%> (?)
instrumentations-bucket-3 58.73% <34.88%> (?)
instrumentations-bucket-4 51.95% <34.41%> (?)
instrumentations-bucket-5 57.16% <35.24%> (?)
instrumentations-bucket-6 60.23% <35.66%> (?)
instrumentations-bucket-7 57.97% <34.88%> (?)
instrumentations-bucket-8 59.08% <34.80%> (?)
instrumentations-bucket-9 61.04% <34.99%> (?)
instrumentations-instrumentation-couchbase 50.64% <32.32%> (?)
instrumentations-integration-esbuild 34.05% <36.08%> (?)
llmobs-ai_anthropic_bedrock 62.39% <36.70%> (?)
llmobs-bucket-1 61.21% <37.52%> (?)
llmobs-openai 61.74% <36.82%> (?)
llmobs-openai-agents_vertex-ai 59.69% <36.19%> (?)
llmobs-sdk 66.21% <84.23%> (?)
openfeature 55.58% <34.64%> (?)
openfeature-unit 53.00% <34.50%> (?)
platform-core_esbuild_instrumentations-misc 40.71% <35.71%> (?)
platform-integration 60.54% <35.44%> (?)
platform-shimmer_unit-guardrails_webpack 38.77% <33.91%> (?)
plugins-bucket-0 56.68% <35.46%> (?)
plugins-bucket-1 53.86% <32.73%> (?)
plugins-bucket-11 61.76% <35.07%> (?)
plugins-bucket-18 61.46% <35.61%> (?)
plugins-bucket-19 59.53% <35.00%> (?)
plugins-bucket-20 61.53% <35.10%> (?)
plugins-bucket-4 58.11% <34.88%> (?)
plugins-bullmq_cassandra_cookie 61.20% <35.32%> (?)
plugins-cookie-parser_crypto_dd-trace-api 56.26% <34.83%> (?)
plugins-fetch_fs_generic-pool 58.32% <35.63%> (?)
plugins-google-cloud-pubsub_grpc_handlebars 64.10% <36.90%> (?)
plugins-hapi_hono_ioredis 59.72% <34.91%> (?)
plugins-jest_knex_langgraph 55.18% <34.83%> (?)
plugins-ldapjs_light-my-request_limitd-client 58.02% <34.83%> (?)
plugins-lodash_mariadb_memcached 57.61% <34.92%> (?)
plugins-moleculer_mongodb_mongodb-core 61.37% <35.38%> (?)
plugins-mongoose_multer_mysql 58.62% <35.33%> (?)
plugins-mysql2_nats_node-serialize 60.18% <35.33%> (?)
plugins-opensearch_passport-http_pino 59.07% <35.58%> (?)
plugins-postgres_process_pug 57.80% <35.25%> (?)
plugins-redis_router_sequelize 61.57% <35.63%> (?)
plugins-test-and-upstream-rhea_undici_url 61.16% <37.01%> (?)
plugins-valkey_vm_winston 57.55% <34.83%> (?)
plugins-ws 59.09% <34.91%> (?)
profiling 61.64% <36.30%> (?)
serverless-aws-sdk-aws-sdk 54.74% <35.00%> (?)
serverless-aws-sdk-base-inject-field 50.59% <34.50%> (?)
serverless-aws-sdk-bedrockruntime 54.41% <34.63%> (?)
serverless-aws-sdk-client 56.04% <35.55%> (?)
serverless-aws-sdk-dynamodb 55.29% <34.63%> (?)
serverless-aws-sdk-eventbridge 49.15% <34.17%> (?)
serverless-aws-sdk-kinesis 58.89% <34.96%> (?)
serverless-aws-sdk-lambda 57.00% <34.71%> (?)
serverless-aws-sdk-s3 55.39% <34.71%> (?)
serverless-aws-sdk-serverless-peer-service 59.30% <35.54%> (?)
serverless-aws-sdk-sns 59.73% <34.96%> (?)
serverless-aws-sdk-sqs 60.16% <35.71%> (?)
serverless-aws-sdk-stepfunctions 55.22% <34.88%> (?)
serverless-aws-sdk-util 51.14% <34.50%> (?)
serverless-bucket-0 53.70% <31.69%> (?)
serverless-bucket-1 58.79% <35.97%> (?)
test-optimization-cucumber 71.58% <46.50%> (?)
test-optimization-cypress 65.08% <38.85%> (?)
test-optimization-jest 72.91% <46.32%> (?)
test-optimization-mocha 72.69% <46.88%> (?)
test-optimization-playwright-playwright-atr 60.01% <42.19%> (?)
test-optimization-playwright-playwright-efd 60.24% <42.19%> (?)
test-optimization-playwright-playwright-final-status 60.36% <42.27%> (?)
test-optimization-playwright-playwright-impacted-tests 59.94% <42.19%> (?)
test-optimization-playwright-playwright-reporting 61.27% <42.27%> (?)
test-optimization-playwright-playwright-test-management 60.74% <42.42%> (?)
test-optimization-playwright-playwright-test-span 60.13% <42.27%> (?)
test-optimization-selenium 59.80% <40.08%> (?)
test-optimization-testopt 58.13% <40.53%> (?)
test-optimization-vitest 70.33% <63.72%> (?)
test-optimization-vitest-browser 59.00% <60.88%> (?)
test-optimization-webdriverio 64.17% <76.13%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@pr-commenter

pr-commenter Bot commented Jul 28, 2026

Copy link
Copy Markdown

Benchmarks

Benchmark execution time: 2026-07-30 16:47:44

Comparing candidate commit 01455a6 in PR branch v5.119.0-proposal with baseline commit 8c33807 in branch v5.x.

📊 Benchmarking dashboard

Found 12 performance improvements and 0 performance regressions! Performance is the same for 2301 metrics, 45 unstable metrics.

Explanation

This is an A/B test comparing a candidate commit's performance against that of a baseline commit. Performance changes are noted in the tables below as:

  • 🟩 = significantly better candidate vs. baseline
  • 🟥 = significantly worse candidate vs. baseline

We compute a confidence interval (CI) over the relative difference of means between metrics from the candidate and baseline commits, considering the baseline as the reference.

If the CI is entirely outside the configured SIGNIFICANT_IMPACT_THRESHOLD (or the deprecated UNCONFIDENCE_THRESHOLD), the change is considered significant.

Feel free to reach out to #apm-benchmarking-platform on Slack if you have any questions.

More details about the CI and significant changes

You can imagine this CI as a range of values that is likely to contain the true difference of means between the candidate and baseline commits.

CIs of the difference of means are often centered around 0%, because often changes are not that big:

---------------------------------(------|---^--------)-------------------------------->
                              -0.6%    0%  0.3%     +1.2%
                                 |          |        |
         lower bound of the CI --'          |        |
sample mean (center of the CI) -------------'        |
         upper bound of the CI ----------------------'

As described above, a change is considered significant if the CI is entirely outside the configured SIGNIFICANT_IMPACT_THRESHOLD (or the deprecated UNCONFIDENCE_THRESHOLD).

For instance, for an execution time metric, this confidence interval indicates a significantly worse performance:

----------------------------------------|---------|---(---------^---------)---------->
                                       0%        1%  1.3%      2.2%      3.1%
                                                  |   |         |         |
       significant impact threshold --------------'   |         |         |
                      lower bound of CI --------------'         |         |
       sample mean (center of the CI) --------------------------'         |
                      upper bound of CI ----------------------------------'

scenario:url-endpoint-and-obfuscation-20

  • 🟩 cpu_user_time [-412.144ms; -156.243ms] or [-8.740%; -3.313%]
  • 🟩 execution_time [-412.711ms; -156.492ms] or [-8.749%; -3.317%]
  • 🟩 instructions [-2.3G instructions; -0.9G instructions] or [-6.076%; -2.305%]
  • 🟩 throughput [+17698.261op/s; +46681.330op/s] or [+3.322%; +8.763%]

scenario:url-endpoint-and-obfuscation-24

  • 🟩 cpu_user_time [-447.437ms; -169.005ms] or [-9.649%; -3.645%]
  • 🟩 execution_time [-447.246ms; -168.894ms] or [-9.580%; -3.618%]
  • 🟩 instructions [-2.6G instructions; -1.0G instructions] or [-6.747%; -2.561%]
  • 🟩 throughput [+19492.237op/s; +51683.269op/s] or [+3.618%; +9.592%]

scenario:url-endpoint-and-obfuscation-26

  • 🟩 cpu_user_time [-501.970ms; -189.222ms] or [-11.062%; -4.170%]
  • 🟩 execution_time [-501.795ms; -189.019ms] or [-10.896%; -4.104%]
  • 🟩 instructions [-2.6G instructions; -1.0G instructions] or [-6.762%; -2.566%]
  • 🟩 throughput [+22489.041op/s; +59613.123op/s] or [+4.112%; +10.901%]

Unstable benchmarks

These benchmarks have a confidence interval too wide to call a change; treat them as noise rather than signal.

scenario:appsec-appsec-enabled-20

  • unstable execution_time [-246.619ms; +236.118ms] or [-6.559%; +6.280%]

scenario:appsec-appsec-enabled-24

  • unstable execution_time [-213291.434µs; +212939.334µs] or [-7.972%; +7.958%]

scenario:appsec-appsec-enabled-26

  • unstable execution_time [-231303.805µs; +229604.871µs] or [-9.091%; +9.025%]

scenario:appsec-appsec-enabled-with-attacks-24

  • unstable execution_time [-169.813ms; +162.540ms] or [-5.488%; +5.253%]

scenario:appsec-appsec-enabled-with-attacks-26

  • unstable execution_time [-196462.535µs; +197784.535µs] or [-6.756%; +6.801%]

scenario:appsec-control-20

  • unstable cpu_user_time [-64.836ms; +74.994ms] or [-4.835%; +5.593%]
  • unstable execution_time [-195.020ms; +198.761ms] or [-10.781%; +10.988%]

scenario:appsec-control-24

  • unstable execution_time [-109.683ms; +115.828ms] or [-8.815%; +9.309%]

scenario:appsec-control-26

  • unstable execution_time [-124502.050µs; +124278.383µs] or [-10.024%; +10.006%]

scenario:child_process-file-args-24

  • unstable execution_time [-28.342ms; +26.278ms] or [-5.909%; +5.479%]
  • unstable throughput [-101579.747op/s; +116812.530op/s] or [-4.667%; +5.367%]

scenario:debugger-line-probe-with-snapshot-default-24

  • unstable cpu_user_time [-2621.158ms; +2550.304ms] or [-30.009%; +29.198%]
  • unstable execution_time [-2624.961ms; +2539.534ms] or [-27.818%; +26.913%]
  • unstable instructions [-22244.1M instructions; +21615.1M instructions] or [-31.096%; +30.216%]
  • unstable max_rss_usage [-10630.688KB; +11250.688KB] or [-6.661%; +7.049%]
  • unstable throughput [-709.753op/s; +753.437op/s] or [-20.042%; +21.276%]

scenario:debugger-line-probe-with-snapshot-default-26

  • unstable cpu_user_time [-1863.532ms; +587.918ms] or [-19.834%; +6.257%]
  • unstable execution_time [-1865.479ms; +627.825ms] or [-18.362%; +6.180%]
  • unstable instructions [-16.6G instructions; +5.3G instructions] or [-21.199%; +6.733%]
  • unstable throughput [-142.622op/s; +403.767op/s] or [-4.412%; +12.490%]

scenario:debugger-line-probe-with-snapshot-minimal-26

  • unstable cpu_user_time [-2.214s; +4.669s] or [-22.074%; +46.545%]
  • unstable execution_time [-2.365s; +4.872s] or [-21.879%; +45.081%]
  • unstable instructions [-19.4G instructions; +41.4G instructions] or [-23.090%; +49.411%]
  • unstable max_rss_usage [-7.237MB; +14.109MB] or [-4.474%; +8.723%]
  • unstable throughput [-1024.844op/s; +510.921op/s] or [-33.042%; +16.473%]

scenario:debugger-line-probe-without-snapshot-24

  • unstable cpu_user_time [-1753.459ms; +2815.217ms] or [-21.331%; +34.247%]
  • unstable execution_time [-1775.715ms; +2837.356ms] or [-19.877%; +31.761%]
  • unstable instructions [-15.2G instructions; +24.2G instructions] or [-22.616%; +36.015%]
  • unstable max_rss_usage [-8.237MB; +12.103MB] or [-5.252%; +7.717%]
  • unstable throughput [-792.308op/s; +495.807op/s] or [-21.585%; +13.507%]

scenario:debugger-line-probe-without-snapshot-26

  • unstable cpu_user_time [-2321.803ms; +769.351ms] or [-24.327%; +8.061%]
  • unstable execution_time [-2373.381ms; +835.777ms] or [-23.090%; +8.131%]
  • unstable instructions [-20.3G instructions; +6.6G instructions] or [-25.545%; +8.335%]
  • unstable throughput [-171.978op/s; +453.655op/s] or [-5.319%; +14.031%]

scenario:dogstatsd-with-tags-20

  • unstable cpu_user_time [-415.467ms; +330.570ms] or [-8.733%; +6.949%]
  • unstable execution_time [-414.601ms; +335.184ms] or [-8.577%; +6.934%]
  • unstable throughput [-115375.959op/s; +142084.093op/s] or [-6.630%; +8.165%]

scenario:plugin-couchbase-upsert-20

  • unstable cpu_user_time [-193.402ms; +321.430ms] or [-4.399%; +7.310%]
  • unstable execution_time [-187.334ms; +323.234ms] or [-4.251%; +7.335%]

scenario:plugin-graphql-long-with-depth-and-collapse-off-20

  • unstable max_rss_usage [-27.860MB; +40.032MB] or [-6.921%; +9.945%]

scenario:plugin-graphql-long-with-depth-on-max-20

  • unstable cpu_user_time [-568.489ms; +589.996ms] or [-4.919%; +5.105%]
  • unstable execution_time [-581.884ms; +604.115ms] or [-4.936%; +5.125%]
  • unstable throughput [-3.553op/s; +3.380op/s] or [-5.206%; +4.952%]

scenario:plugin-mongodb-core-deep-aggregate-26

  • unstable execution_time [-106.152ms; +186.950ms] or [-3.922%; +6.906%]

scenario:test-optimization-large-suite-20

  • unstable max_rss_usage [-5305.184KB; +5186.517KB] or [-6.556%; +6.410%]

juan-fernandez and others added 15 commits July 29, 2026 06:00
…tes (#9551)

Bumps the ai-and-llm group with 6 updates in the /packages/dd-trace/test/plugins/versions directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/amazon-bedrock](https://github.com/vercel/ai/tree/HEAD/packages/amazon-bedrock) | `5.0.30` | `5.0.31` |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `4.0.19` | `4.0.20` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `4.0.23` | `4.0.24` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.114.0` | `0.115.0` |
| [@langchain/anthropic](https://github.com/langchain-ai/langchainjs) | `1.5.1` | `1.5.2` |
| [langchain](https://github.com/langchain-ai/langchainjs) | `1.5.3` | `1.5.4` |



Updates `@ai-sdk/amazon-bedrock` from 5.0.30 to 5.0.31
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/amazon-bedrock/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/amazon-bedrock@5.0.31/packages/amazon-bedrock)

Updates `@ai-sdk/anthropic` from 4.0.19 to 4.0.20
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@4.0.20/packages/anthropic)

Updates `@ai-sdk/google` from 4.0.23 to 4.0.24
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@4.0.24/packages/google)

Updates `@anthropic-ai/sdk` from 0.114.0 to 0.115.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.114.0...sdk-v0.115.0)

Updates `@langchain/anthropic` from 1.5.1 to 1.5.2
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/anthropic@1.5.1...@langchain/anthropic@1.5.2)

Updates `langchain` from 1.5.3 to 1.5.4
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/langchain@1.5.3...langchain@1.5.4)

---
updated-dependencies:
- dependency-name: "@ai-sdk/amazon-bedrock"
  dependency-version: 5.0.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-and-llm
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 4.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-and-llm
- dependency-name: "@ai-sdk/google"
  dependency-version: 4.0.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-and-llm
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.115.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ai-and-llm
- dependency-name: "@langchain/anthropic"
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-and-llm
- dependency-name: langchain
  dependency-version: 1.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai-and-llm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the test-versions group with 1 update in the /integration-tests/esbuild directory: [@smithy/smithy-client](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/smithy-client).


Updates `@smithy/smithy-client` from 4.14.13 to 4.14.14
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases)
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/smithy-client/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/smithy-client@4.14.14/packages/smithy-client)

---
updated-dependencies:
- dependency-name: "@smithy/smithy-client"
  dependency-version: 4.14.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: test-versions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…updates (#9531)

Bumps the test-versions group with 11 updates in the /packages/dd-trace/test/plugins/versions directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.215` | `0.3.220` |
| [@datadog/openfeature-node-server](https://github.com/DataDog/openfeature-js-client/tree/HEAD/packages/node-server) | `2.0.1` | `2.0.2` |
| [@opentelemetry/api-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.220.0` | `0.221.0` |
| [@opentelemetry/exporter-jaeger](https://github.com/open-telemetry/opentelemetry-js) | `2.9.0` | `2.10.0` |
| [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.220.0` | `0.221.0` |
| [@opentelemetry/instrumentation-express](https://github.com/open-telemetry/opentelemetry-js-contrib/tree/HEAD/packages/instrumentation-express) | `0.68.0` | `0.69.0` |
| [@opentelemetry/instrumentation-http](https://github.com/open-telemetry/opentelemetry-js) | `0.220.0` | `0.221.0` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.220.0` | `0.221.0` |
| [google-gax](https://github.com/googleapis/google-cloud-node/tree/HEAD/core/packages/gax) | `5.0.7` | `5.0.8` |
| [moleculer](https://github.com/moleculerjs/moleculer) | `0.15.0` | `0.15.1` |
| [pnpm](https://github.com/pnpm/pnpm/tree/HEAD/pnpm11/pnpm) | `11.15.1` | `11.17.0` |



Updates `@anthropic-ai/claude-agent-sdk` from 0.3.215 to 0.3.220
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.3.215...v0.3.220)

Updates `@datadog/openfeature-node-server` from 2.0.1 to 2.0.2
- [Release notes](https://github.com/DataDog/openfeature-js-client/releases)
- [Changelog](https://github.com/DataDog/openfeature-js-client/blob/main/CHANGELOG.md)
- [Commits](https://github.com/DataDog/openfeature-js-client/commits/@datadog/openfeature-node-server@2.0.2/packages/node-server)

Updates `@opentelemetry/api-logs` from 0.220.0 to 0.221.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.221.0)

Updates `@opentelemetry/exporter-jaeger` from 2.9.0 to 2.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v2.9.0...v2.10.0)

Updates `@opentelemetry/instrumentation` from 0.220.0 to 0.221.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.221.0)

Updates `@opentelemetry/instrumentation-express` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/packages/instrumentation-express/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-js-contrib/commits/instrumentation-pg-v0.69.0/packages/instrumentation-express)

Updates `@opentelemetry/instrumentation-http` from 0.220.0 to 0.221.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.221.0)

Updates `@opentelemetry/sdk-node` from 0.220.0 to 0.221.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.220.0...experimental/v0.221.0)

Updates `google-gax` from 5.0.7 to 5.0.8
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/core/packages/gax/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/google-gax-v5.0.8/core/packages/gax)

Updates `moleculer` from 0.15.0 to 0.15.1
- [Release notes](https://github.com/moleculerjs/moleculer/releases)
- [Changelog](https://github.com/moleculerjs/moleculer/blob/master/CHANGELOG.md)
- [Commits](moleculerjs/moleculer@v0.15.0...v0.15.1)

Updates `pnpm` from 11.15.1 to 11.17.0
- [Release notes](https://github.com/pnpm/pnpm/releases)
- [Commits](https://github.com/pnpm/pnpm/commits/v11.17.0/pnpm11/pnpm)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.3.218
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: test-versions
- dependency-name: "@datadog/openfeature-node-server"
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: test-versions
- dependency-name: "@opentelemetry/api-logs"
  dependency-version: 0.221.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: "@opentelemetry/exporter-jaeger"
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: "@opentelemetry/instrumentation"
  dependency-version: 0.221.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: "@opentelemetry/instrumentation-express"
  dependency-version: 0.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: "@opentelemetry/instrumentation-http"
  dependency-version: 0.221.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.221.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: google-gax
  dependency-version: 5.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: test-versions
- dependency-name: moleculer
  dependency-version: 0.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: test-versions
- dependency-name: pnpm
  dependency-version: 11.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore(openfeature): update node server provider to 2.0.1

* chore(openfeature): update node server provider to 2.0.2
* fix(appsec): fix express ssrf flaky test

* fixup
… 22 updates (#9514)

* chore(deps): bump the testing-and-build group across 1 directory with 22 updates

Bumps the testing-and-build group with 22 updates in the /packages/dd-trace/test/plugins/versions directory:

| Package | From | To |
| --- | --- | --- |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `8.0.1` |
| [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript) | `7.28.5` | `8.0.1` |
| [@electron/packager](https://github.com/electron/packager) | `20.0.0` | `20.0.4` |
| [@happy-dom/jest-environment](https://github.com/capricorn86/happy-dom) | `20.10.6` | `20.11.1` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.61.0` | `1.62.0` |
| [@vitest/coverage-istanbul](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-istanbul) | `4.1.9` | `4.1.10` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.9` | `4.1.10` |
| [@vitest/runner](https://github.com/vitest-dev/vitest/tree/HEAD/packages/runner) | `4.1.9` | `4.1.10` |
| [cypress](https://github.com/cypress-io/cypress) | `15.16.0` | `15.19.0` |
| [electron](https://github.com/electron/electron) | `42.1.0` | `43.2.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.28.0` | `0.28.1` |
| [next](https://github.com/vercel/next.js) | `16.2.6` | `16.2.11` |
| [nock](https://github.com/nock/nock) | `14.0.15` | `14.0.16` |
| [playwright](https://github.com/microsoft/playwright) | `1.61.0` | `1.62.0` |
| [playwright-core](https://github.com/microsoft/playwright) | `1.61.0` | `1.62.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.6` | `19.2.8` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.44.0` | `4.46.0` |
| [sinon](https://github.com/sinonjs/sinon) | `22.0.0` | `22.1.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.9` | `4.1.10` |
| [workerpool](https://github.com/josdejong/workerpool) | `10.0.2` | `10.0.3` |



Updates `@babel/core` from 7.29.0 to 8.0.1
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.1/packages/babel-core)

Updates `@babel/preset-typescript` from 7.28.5 to 8.0.1
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.1/packages/babel-preset-typescript)

Updates `@electron/packager` from 20.0.0 to 20.0.4
- [Release notes](https://github.com/electron/packager/releases)
- [Changelog](https://github.com/electron/packager/blob/main/NEWS.md)
- [Commits](electron/packager@v20.0.0...v20.0.4)

Updates `@happy-dom/jest-environment` from 20.10.6 to 20.11.1
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.10.6...v20.11.1)

Updates `@playwright/test` from 1.61.0 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.0...v1.62.0)

Updates `@vitest/coverage-istanbul` from 4.1.9 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-istanbul)

Updates `@vitest/coverage-v8` from 4.1.9 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8)

Updates `@vitest/runner` from 4.1.9 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/runner)

Updates `cypress` from 15.16.0 to 15.19.0
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](cypress-io/cypress@v15.16.0...v15.19.0)

Updates `electron` from 42.1.0 to 43.2.0
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v42.1.0...v43.2.0)

Updates `esbuild` from 0.28.0 to 0.28.1
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.28.0...v0.28.1)

Updates `next` from 16.2.6 to 16.2.11
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.6...v16.2.11)

Updates `nock` from 14.0.15 to 14.0.16
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](nock/nock@v14.0.15...v14.0.16)

Updates `playwright` from 1.61.0 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.0...v1.62.0)

Updates `playwright-core` from 1.61.0 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.0...v1.62.0)

Updates `react` from 19.2.6 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.6 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `selenium-webdriver` from 4.44.0 to 4.46.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Commits](SeleniumHQ/selenium@selenium-4.44.0...selenium-4.46.0)

Updates `sinon` from 22.0.0 to 22.1.0
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/CHANGES.md)
- [Commits](sinonjs/sinon@v22.0.0...v22.1.0)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `vitest` from 4.1.9 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

Updates `workerpool` from 10.0.2 to 10.0.3
- [Changelog](https://github.com/josdejong/workerpool/blob/master/HISTORY.md)
- [Commits](josdejong/workerpool@v10.0.2...v10.0.3)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: testing-and-build
- dependency-name: "@babel/preset-typescript"
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: testing-and-build
- dependency-name: "@electron/packager"
  dependency-version: 20.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: "@happy-dom/jest-environment"
  dependency-version: 20.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: testing-and-build
- dependency-name: "@playwright/test"
  dependency-version: 1.61.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: "@vitest/coverage-istanbul"
  dependency-version: 4.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: "@vitest/runner"
  dependency-version: 4.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: cypress
  dependency-version: 15.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: testing-and-build
- dependency-name: electron
  dependency-version: 43.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: testing-and-build
- dependency-name: esbuild
  dependency-version: 0.28.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: next
  dependency-version: 16.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: nock
  dependency-version: 14.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: playwright
  dependency-version: 1.61.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: playwright-core
  dependency-version: 1.61.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: react
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: react-dom
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: selenium-webdriver
  dependency-version: 4.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: testing-and-build
- dependency-name: sinon
  dependency-version: 22.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: testing-and-build
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: testing-and-build
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
- dependency-name: workerpool
  dependency-version: 10.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
...

Signed-off-by: dependabot[bot] <support@github.com>

* test(test-optimization): pin compatible dependency axes (#9559)

* fix(appsec): fix sourcemap fixture tsconfig for Typescript 7

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Juan Antonio Fernández de Alba <juan.fernandezdealba@datadoghq.com>
Co-authored-by: ishabi <ilyasshabi94@gmail.com>
…updates (#9569)

Bumps the web-frameworks group with 7 updates in the /packages/dd-trace/test/plugins/versions directory:

| Package | From | To |
| --- | --- | --- |
| [@apollo/gateway](https://github.com/apollographql/federation/tree/HEAD/gateway-js) | `2.14.2` | `2.14.3` |
| [@apollo/subgraph](https://github.com/apollographql/federation/tree/HEAD/subgraph-js) | `2.14.2` | `2.14.3` |
| [@hapi/hapi](https://github.com/hapijs/hapi) | `21.4.9` | `21.4.10` |
| [@hono/node-server](https://github.com/honojs/node-server) | `2.0.10` | `2.0.11` |
| [find-my-way](https://github.com/delvedor/find-my-way) | `9.6.0` | `9.7.0` |
| [hono](https://github.com/honojs/hono) | `4.12.30` | `4.12.32` |
| [undici](https://github.com/nodejs/undici) | `8.7.0` | `8.9.0` |



Updates `@apollo/gateway` from 2.14.2 to 2.14.3
- [Release notes](https://github.com/apollographql/federation/releases)
- [Changelog](https://github.com/apollographql/federation/blob/main/gateway-js/CHANGELOG.md)
- [Commits](https://github.com/apollographql/federation/commits/@apollo/gateway@2.14.3/gateway-js)

Updates `@apollo/subgraph` from 2.14.2 to 2.14.3
- [Release notes](https://github.com/apollographql/federation/releases)
- [Changelog](https://github.com/apollographql/federation/blob/main/subgraph-js/CHANGELOG.md)
- [Commits](https://github.com/apollographql/federation/commits/@apollo/subgraph@2.14.3/subgraph-js)

Updates `@hapi/hapi` from 21.4.9 to 21.4.10
- [Release notes](https://github.com/hapijs/hapi/releases)
- [Commits](hapijs/hapi@v21.4.9...v21.4.10)

Updates `@hono/node-server` from 2.0.10 to 2.0.11
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.0.10...v2.0.11)

Updates `find-my-way` from 9.6.0 to 9.7.0
- [Release notes](https://github.com/delvedor/find-my-way/releases)
- [Commits](delvedor/find-my-way@v9.6.0...v9.7.0)

Updates `hono` from 4.12.30 to 4.12.32
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.30...v4.12.32)

Updates `undici` from 8.7.0 to 8.9.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.7.0...v8.9.0)

---
updated-dependencies:
- dependency-name: "@apollo/gateway"
  dependency-version: 2.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-frameworks
- dependency-name: "@apollo/subgraph"
  dependency-version: 2.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-frameworks
- dependency-name: "@hapi/hapi"
  dependency-version: 21.4.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-frameworks
- dependency-name: "@hono/node-server"
  dependency-version: 2.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-frameworks
- dependency-name: find-my-way
  dependency-version: 9.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-frameworks
- dependency-name: hono
  dependency-version: 4.12.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-frameworks
- dependency-name: undici
  dependency-version: 8.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-frameworks
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* feat(llmobs): add experiments dataset operations

* feat(llmobs): add CSV dataset creation

* chore(llmobs): use csv parser for dataset import

* chore(llmobs): add csv parser license

* feat(llmobs): include dataset version in experiments

* fix(llmobs): address dataset review feedback

* create jsontype to replace any

* remove dataset operations from llmobs

* remove csv dataset func

* noops produce warn logs instead of error throwing

* use vcr testing instead

* Update packages/dd-trace/src/llmobs/experiments/index.js

Co-authored-by: Sam Brenner <106700075+sabrenner@users.noreply.github.com>

* fix(llmobs): address experiments ci failures

* test(llmobs): cover experiments noop accessors

* Apply suggestion from @sabrenner

Co-authored-by: Sam Brenner <106700075+sabrenner@users.noreply.github.com>

* Apply suggestion from @sabrenner

Co-authored-by: Sam Brenner <106700075+sabrenner@users.noreply.github.com>

* fix(llmobs): simplify dataset records query route

* test(llmobs): remove handmade experiment cassettes

* test(llmobs): isolate experiment fetch mocks

---------

Co-authored-by: Sam Brenner <106700075+sabrenner@users.noreply.github.com>
Bumps the testing-and-build group with 1 update in the /packages/dd-trace/test/plugins/versions directory: [next](https://github.com/vercel/next.js).


Updates `next` from 16.2.11 to 16.2.12
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.11...v16.2.12)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: testing-and-build
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…with 5 updates (#9573)

Bumps the gh-actions-packages group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` |
| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.1` | `4.37.3` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.1` | `4.37.3` |
| [docker/login-action](https://github.com/docker/login-action) | `4` | `4.5.1` |
| [actions/setup-python](https://github.com/actions/setup-python) | `6.3.0` | `7.0.0` |

Bumps the gh-actions-packages group with 5 updates in the /.github/workflows directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` |
| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.1` | `4.37.3` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.1` | `4.37.3` |
| [docker/login-action](https://github.com/docker/login-action) | `4` | `4.5.1` |
| [actions/setup-python](https://github.com/actions/setup-python) | `6.3.0` | `7.0.0` |



Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v7...3d3c42e)

Updates `github/codeql-action/init` from 4.37.1 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@7188fc3...e4fba86)

Updates `github/codeql-action/analyze` from 4.37.1 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@7188fc3...e4fba86)

Updates `docker/login-action` from 4 to 4.5.1
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@v4...v4.5.1)

Updates `actions/setup-python` from 6.3.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@ece7cb0...5fda3b9)

Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v7...3d3c42e)

Updates `github/codeql-action/init` from 4.37.1 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@7188fc3...e4fba86)

Updates `github/codeql-action/analyze` from 4.37.1 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@7188fc3...e4fba86)

Updates `docker/login-action` from 4 to 4.5.1
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@v4...v4.5.1)

Updates `actions/setup-python` from 6.3.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@ece7cb0...5fda3b9)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: docker/login-action
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: actions/setup-python
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: docker/login-action
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: actions/setup-python
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dd-octo-sts
dd-octo-sts Bot force-pushed the v5.119.0-proposal branch from cd9c54f to b46aa9f Compare July 29, 2026 06:00
juan-fernandez and others added 4 commits July 30, 2026 05:55
…s 1 directory with 3 updates (#9571)

Bumps the vendor-minor-and-patch-dependencies group with 3 updates in the /vendor directory: [@apm-js-collab/code-transformer](https://github.com/nodejs/orchestrion-js), [pprof-format](https://github.com/DataDog/pprof-format) and [source-map](https://github.com/mozilla/source-map).


Updates `@apm-js-collab/code-transformer` from 0.18.0 to 0.18.1
- [Release notes](https://github.com/nodejs/orchestrion-js/releases)
- [Changelog](https://github.com/nodejs/orchestrion-js/blob/main/CHANGELOG.md)
- [Commits](nodejs/orchestrion-js@code-transformer-v0.18.0...code-transformer-v0.18.1)

Updates `pprof-format` from 2.2.2 to 2.2.3
- [Commits](DataDog/pprof-format@v2.2.2...v2.2.3)

Updates `source-map` from 0.7.6 to 0.8.0
- [Release notes](https://github.com/mozilla/source-map/releases)
- [Changelog](https://github.com/mozilla/source-map/blob/master/CHANGELOG.md)
- [Commits](mozilla/source-map@0.7.6...v0.8.0)

---
updated-dependencies:
- dependency-name: "@apm-js-collab/code-transformer"
  dependency-version: 0.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: vendor-minor-and-patch-dependencies
- dependency-name: pprof-format
  dependency-version: 2.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: vendor-minor-and-patch-dependencies
- dependency-name: source-map
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: vendor-minor-and-patch-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* test(rhea): add regression test for DSM context leak between concurrent consumers

Rhea's producer DSM checkpoint happens in a separate encode hook (not
bindStart), so the fix applied to other plugins doesn't cover it. This
test verifies the bug exists and will guide the fix.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(rhea): move DSM consumer checkpoint from bindStart to start

Same fix as the other plugins — DSM context must be set in start()
(which runs after the store is bound) rather than bindStart() (where
enterWith calls leak to the outer context).

Note: the producer side still needs fixing since its DSM checkpoint
happens in a separate encode hook.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(rhea): fix racy DSM env setup and unclosed connection in regression test

beforeEach didn't await agent.load, letting its internal tracer.use('rhea',
undefined) race and overwrite the explicit dsmEnabled config; the suite also
never set DD_DATA_STREAMS_ENABLED, so DSM never actually engaged. The AMQP
connection opened per test was also never closed, leaking into later
withVersions iterations on the same shared queue addresses and causing
cross-run contamination.

* fix(rhea): restore spy before calling done to satisfy sonarjs/no-code-after-done

* fix(rhea): save/restore DD_DATA_STREAMS_ENABLED instead of unconditional delete

dsm.spec.js sorts before index.spec.js in the same Mocha process, so
unconditionally deleting the env var in after() wiped out the CI
job-level DD_DATA_STREAMS_ENABLED before index.spec.js's own DSM
assertions ran, breaking the full rhea plugin suite.

* fix(rhea): stop deleting DD_DATA_STREAMS_ENABLED, match sibling dsm.spec.js convention

Save/restore was unnecessarily defensive. amqplib, bullmq, and
confluentinc-kafka-javascript's dsm.spec.js files all just set the var
once and never delete it, which avoids the file-ordering hazard
entirely. Match that convention here instead.

* fix(rhea): remove leaked container message listener in dsm test

require('rhea').get() returns the shared singleton container, so the
persistent on('message') listener leaked across every later test in the
process, firing stray produces and calling a dead done(). Use a named
handler removed on completion, guard done() with a finished flag, and
drop leftover listeners in afterEach.

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
@dd-octo-sts
dd-octo-sts Bot force-pushed the v5.119.0-proposal branch from 24cf85e to 01455a6 Compare July 30, 2026 16:35
@sabrenner
sabrenner marked this pull request as ready for review July 30, 2026 16:46
@sabrenner
sabrenner requested review from a team as code owners July 30, 2026 16:46
@sabrenner
sabrenner requested review from khanayan123, litianningdatadog, sameerank, tlhunter and vjfridge and removed request for a team July 30, 2026 16:46

@datadog-official datadog-official Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Datadog Autotest: PASS

More details

The release changes passed targeted and adversarial checks across LLM Observability experiments, Vitest/WebdriverIO reporting, and test-file indexing. Retry handling, malformed dataset responses, evaluator serialization, summary alignment, and glob matching produced the expected results; no clear production regression was found.

Was this helpful? React 👍 or 👎

📊 Validated against 6 scenarios · Open Bits AI session

🤖 Datadog Autotest · Commit 01455a6 · What is Autotest? · @DataDog review to ask questions · Any feedback? Reach out in #autotest

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 01455a626e

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

sampling_decision: mlObsTags[SAMPLING_DECISION],
apm_trace_id: apmTraceId,
}
if (tags.experiment_id) dd.scope = 'experiments'

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Scope only experiment spans as experiment payloads

If a user annotates any regular LLMObs span with an experiment_id tag, this check sets _dd.scope = 'experiments' even when the span kind is llm, agent, etc. That makes a normal span look like an Experiments payload solely because of a user tag collision, so it can be routed or processed as an experiment event; please gate this on the experiment span kind or another internal marker.

Useful? React with 👍 / 👎.

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we can strengthen this in a follow-up but this is the same logic used in Python

Comment on lines +345 to +347
this.#llmobs.annotate(span, {
inputData: record.input,
outputData: output,

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Preserve falsy experiment inputs and outputs

When LLMObs is enabled, experiment rows are recorded through llmobs.annotate(), but that API only tags I/O when inputData or outputData is truthy. A dataset input or task output such as false, 0, '', or null is valid JSON and is preserved by the fallback span path, but this LLMObs span path silently omits it from the experiment event; please use an annotation path that checks property presence rather than truthiness.

Useful? React with 👍 / 👎.

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is a non-issue but can be fixed in a follow-up if needed

@sabrenner
sabrenner merged commit 261f2ce into v5.x Jul 30, 2026
867 of 869 checks passed
@sabrenner
sabrenner deleted the v5.119.0-proposal branch July 30, 2026 18:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.