1.46.0

Breaking Changes

Warning

jnr-unixsocket is now an external dependency of dd-trace-ot and must be included when deploying dd-trace-ot.

Note

The API TracerScope.setAsync(boolean), used to manually control asynchronous span propagation, does no more apply to the scope instance but to the active span scope.

Components

Application Security Management (IAST)

• 🐛 Fix String.replace instrumentation for IAST (#8281 - @Mariovido)
• ✨ Apply the standard nomenclature to the stacktrace configs (#8244 - @jandro996)
• 🐛 Exclude false positive weak randomness (#8232 - @jandro996)
• ✨ Propagation of translateEscapes of String class (#8186 - @sezen-datadog)
• ✨ Add security control metrics (#8175 - @jandro996)
• ✨ Increase IAST propagation to StringBuffer setLength (#8128 - @Mariovido)
• ✨ Add IAST taint tracking for DB values (#8072 - @Mariovido)

Application Security Management (WAF)

• 🐛 Prevents a NPE when there is no subscriber for user events (#8258 - @manuel-alvarez-alvarez)
• ✨ Apply the standard nomenclature to the stacktrace configs (#8244 - @jandro996)
• 🐛 Ensure cached subscriptions are cleared on reconfiguration via RC (#8229 - @manuel-alvarez-alvarez)
• ✨ Add support for session tracking in Vertx (#8167 - @manuel-alvarez-alvarez)
• ✨ Create span tag: _dd.appsec.rasp.timeout (#8269 - @Mariovido)

Build & Tooling

• 🐛 Ensure shaded helpers have unique names when injected into class-loaders (#8192 - @mcculls)

Configuration at Runtime

• 🐛 Remove filtering of DD_SERVICE and DD_ENV from the tracer (#8176 - @mhlidd)

Continuous Integration Visibility

• 🧹 Generalize TestRetryPolicy to TestExecutionPolicy (#8302 - @nikita-tkachenko-datadog)
• 🧹 Parallelize CI Visibility settings requests (#8299 - @nikita-tkachenko-datadog)
• 🧹 Generalize test retry logic (#8289 - @nikita-tkachenko-datadog)
• 🧹 Generalize tests skipping logic (#8288 - @nikita-tkachenko-datadog)
• 🧹 Remove skip and shouldBeSkipped methods from TestEventsHandler in favor of isSkippable (#8286 - @nikita-tkachenko-datadog)
• ✨⚡ Optimize Git repository information computation (#8270 - @dougqh)
• ✨ Always request known tests from the backend (#8268 - @nikita-tkachenko-datadog)
• ✨ Fix NPE when trying to get retry analyzer in Test NG (#8253 - @nikita-tkachenko-datadog)
• 🐛 Set test framework and test framework version tags atomically (#8252 - @nikita-tkachenko-datadog)
• ✨ Add debug logging to Android Gradle module layout logic (#8251 - @nikita-tkachenko-datadog)
• 🐛 Fix source and destination folders computation for Android Gradle projects (#8190 - @nikita-tkachenko-datadog)
• ✨ Add basic Scala Weaver sbt support (#8189 - @daniel-mohedano)
• ✨ Implement impacted tests detection (#8188 - @nikita-tkachenko-datadog)

Data Streams Monitoring

• ✨ Change hash computation for protobuf to better represent impacting changes + save proto number in schema (#8201 - @vandonr)

Database Monitoring

• Add peer service tag in dbm sql commenter (#7913 - @jordan-wong)

Dynamic Instrumentation

• ✨ Add support for SymDB to scan directories (#8306 - @jpbempel)
• ✨ Add SymDB report for any jar scanning failures (#8300 - @jpbempel)
• ✨ Use two budgets depending on type (#8283 - @evanchooly)
• ✨ Institute a 10 snapshot per probe per trace budget (#8277 - @evanchooly)
• 🐛 Avoid double snapshots for Exception Replay (#8273 - @jpbempel)
• ✨ Simplify code origins. Separate out snapshot generation. (#8263 - @evanchooly)
• ✨ Add Exception probe custom instrumentation (#8230 - @jpbempel)
• ✨ Enhance log probes to honor debug session tags (#8215 - @evanchooly)
• 🐛 Don't redact env tokens from debugger probe snapshots (#8211 - @watson)
• ✨⚡ Move Trace/SpanId capture at commit time (#8184 - @jpbempel)
• 🐛 Capture values at entry for method probe (#8169 - @jpbempel)

JMX fetch

• 🐛 Mute JMXFetch Shutdown in progress error (#8068 - @ygree)

OpenTracing

• ⚠️🧹 Make jnr-unixsocket an explicit dependency of dd-trace-ot (#8307 - @mcculls)

Profiling

• 🐛 Avoid unsupported API call for creating folders on windows (#8304 - @jbachorik)
• ✨ Tag profiles for serverless (#8279 - @jbachorik)
• ✨ add queue type and length to queue events (#8242 - @richardstartin)
• 🐛 TempLocationManager Fixes and Improvements (#8191 - @jbachorik)
• ✨ Bump ddprof to 1.18.0 (#8173 - @jbachorik)
• ✨ Report profiler initialization and configuration errors to telemetry (#8171 - @jbachorik)

Telemetry

• ✨ Add pending traces report in tracer flares (#8053 - @mhlidd)

Testing

• ✨ Test http server requests in parallel (#8222 - @amarziali)

Trace context propagation

• ✨ Add non default propagator registration (#8310 - @PerfectSlayer)

Tracer core

• ✨ Probe for existence of IBMSASL or ACCP security providers (#8276 - @mcculls)
• ✨⚡ Overhead improvement to agent feedback based sampling (#8265 - @dougqh)
• 🧹 Move async propagation API from scope to tracer (#8231 - @PerfectSlayer)
• ✨ Introduce context propagation API (#8161 - @PerfectSlayer)
• ✨🧪 Use env-entry to add tags per webapp deployment (#8138 - @amarziali)
• ✨ Introduce context helpers API (#8134 - @PerfectSlayer)
• ✨ Support IPv6 values for DD_AGENT_HOST and DD_TRACE_AGENT_URL (#7984 - @mhlidd)

Instrumentations

Apache HttpComponents

• 🐛 Properly finish spans and support latest apache httpclient5 (#8272 - @amarziali)

AWS Lambda instrumentation

• 🐛 Properly capture lambda payloads for all handler types. (#8264 - @purple4reina)

AWS S3 instrumentation

• 💡 Create S3 instrumentation + add span pointers (#8075 - @nhulston)

AWS SDK instrumentation

• 🐛 Revert "Add avoid double instrumenting lambda non-streaming handlers." (#8247 - @nhulston)

Cassandra

• ✨ Allow extracting keyspace from statement result (#8239 - @amarziali)

Core Java language instrumentation

• ✨ Propagation of translateEscapes of String class (#8186 - @sezen-datadog)

Eclipse Vert.x instrumentation

• 🐛 Fix vertx worker propagation and error handling (#8237 - @amarziali)
• ✨ Support vertx 5 (#8220 - @amarziali)
• ✨ Add support for session tracking in Vertx (#8167 - @manuel-alvarez-alvarez)

Kafka instrumentation

• 🐛 Prevent possible NPE calculating Kafka record header size (#8292 - @ygree)

Mule instrumentation

• 🐛 Fix crash using Mule with JPMS (#8187 - @amarziali)

Protocol Buffer instrumentation

• ✨ Change hash computation for protobuf to better represent impacting changes + save proto number in schema (#8201 - @vandonr)

Spring instrumentation

• 🐛 Preserve getQualifier from spring scheduling runnables (#8293 - @amarziali)

1.45.2

Components

Application Security Management (WAF)

• 🐛 🍒 8258 - Prevents a NPE when there is no subscriber for user events (#8260 - @manuel-alvarez-alvarez)

1.45.1

Components

Build & Tooling

• 🐛 🍒 #8192 - Ensure shaded helpers have unique names when injected into class-loaders (#8193 - @mcculls)

Continuous Integration Visibility

• 🐛 🍒 #8190 - Fix source and destination folders computation for Android Gradle projects (#8194 - @nikita-tkachenko-datadog)

Profiling

• 🐛 🍒 #8173 - Bump ddprof to 1.18.0 (#8200 - @MattAlp)
• 🐛 🍒 #8191 - TempLocationManager Fixes and Improvements (#8199 - @jbachorik)

Instrumentations

Mulesoft

• 🐛 🍒 #8187 - Fix crash using Mule with JPMS (#8195 - @amarziali)

1.45.0

Breaking changes

Warning

Support for custom scope manager using OpenTelemetry tracer artifact (dd-trace-ot) is dropped.
Tracing with OpenTracing API and custom scope manager will continue to work on 1.44.x releases.

Components

Application Security Management (IAST)

• ✨ Add propagation to URI#toURL method (#8146 - @manuel-alvarez-alvarez)
• ✨ Increase IAST propagation to StringBuilder setLength (#8119 - @Mariovido)
• ✨ Increase IAST propagation to StringBuffer append (#8082 - @Mariovido)
• ✨ Handle IAST security controls custom validation and sanitization methods (#7997 - @jandro996)

Application Security Management (WAF)

• ✨ Update user lifecycle tracking to V3 (#8108 - @manuel-alvarez-alvarez)
• ✨ Exploit prevention for Shell Injection / Command Injection (#7615 - @jandro996)

Build & Tooling

• 💡 Support instrumentation of repackaged libraries (#8153 - @mcculls)
• ✨ Configure native image build setting for JDK-22 based GraalVM (#8092 - @MattAlp)

Database Monitoring

• ✨ Add full APM/DBM mode for Oracle (#8090 - @nenadnoveljic)

Dynamic Instrumentation

• 🐛 make local var hoisting disabled by default (#8158 - @jpbempel)
• 🐛 Fix var hoisting issue when no previous store (#8122 - @jpbempel)
• ✨ Only decorate spans without code origin information (#8105 - @evanchooly)
• 🐛 Fix suspend Kotlin methods instrumentation (#8080 - @jpbempel)
• 🐛 Fix class file version detection (#8057 - @jpbempel)

GraalVM native-image

• ✨ Configure native image build setting for JDK-22 based GraalVM (#8092 - @MattAlp)

ML Observability (LLMObs)

• ✨🧪 Add LLMObs configuration (#8076 - @gary-huang)

Metrics

• Bump integrations-core submodule to 7.60.0 (#8098 - @mcculls)
• Upgrade to java-dogstatsd-client v4.4.3 (#8096 - @mcculls)

OpenTracing

• ⚠️🧹 Remove custom scope manager support (#8164 - @PerfectSlayer)

Telemetry

• ✨ Retry telemetry requests if CI Visibility is enabled (#8147 - @nikita-tkachenko-datadog)
• ✨ Add configurable Dependency service resolution period (#8079 - @jandro996)

Testing

• 🐛 Remove restriction to not run vertx4 latest tests on java 17 (#8133 - @vandonr)

Tracer core

• ✨ Defer remote components to avoid OkHttp class-loading side-effects (#8131 - @mcculls)
• ✨ Improve Context API null handling and Javadoc (#8129 - @PerfectSlayer)
• 🐛⚡ Avoid performing blocking I/O operation on application thread (#8120 - @mcculls)
• 💡 Introduce a shared context component, independent of tracing (#8117 - @mcculls)
• ✨ Improves ServiceNameCollector (#8109 - @amarziali)
• Upgrade to ASM 9.7.1 (adds new constant for Java 24) (#8097 - @mcculls)
• 🐛 Dynamically evaluate service name for message consumers (#8088 - @amarziali)

Serverless

• 🐛 Add avoid double instrumenting lambda non-streaming handlers. (#8073 - @purple4reina)

Instrumentations

AWS SDK instrumentation

• 💡 Instrument EMR's relocated AWS SDK (#8157 - @mcculls)

Eclipse Vert.x instrumentation

• 🐛 Remove restriction to not run vertx4 latest tests on java 17 (#8133 - @vandonr)

JDBC instrumentation

• ✨ Add full APM/DBM mode for Oracle (#8090 - @nenadnoveljic)

Jetty instrumentation

• 🐛 Ensure jetty 12 has servlet.path starting with / (#8093 - @github-actions[bot])

JMS instrumentation

• 🧹 Re-use javax JMS module for jakarta namespace (#8155 - @mcculls)
• 🧹 Group javax.jms instrumentations under a single module (#8154 - @mcculls)

Reactor instrumentation

• 🐛 Reactor: early propagate span in context when subscribing (#8166 - @amarziali)

1.44.1

Components

Continuous Integration Visibility

• 🐛 Fix tracing JUnit5 tests in Maven projects with multiple forks (#8089 - @nikita-tkachenko-datadog)

1.44.0

Known Issues

Warning

This release contains a known issue that causes failures when using Test Optimization to trace JUnit 5 tests in a Maven project where Maven Surefire is configured with forkCount > 1.
The issue is fixed in v1.44.1

Breaking Changes

Warning

Support for X-Forwarded header is dropped from default client IP resolution.
It can still be re-activated using the dd.trace.client-ip-header=x-forwarded system property, or the DD_TRACE_CLIENT_IP_HEADER=x-forwarded environment variable. See #7946.

Components

Application Security Management (IAST)

• ✨ Set unexpected IAST exceptions to debug log level (#8044 - @smola)
• ✨ Increase IAST propagation to StringBuffer subSequence (#8038 - @Mariovido)
• ✨ Increase IAST propagation to StringBuilder subSequence (#8026 - @Mariovido)
• ✨ Add IAST propagation to String valueOf (#8013 - @Mariovido)
• ✨ Increase IAST propagation to StringBuilder append (#8010 - @Mariovido)
• ✨ Expand SSRF support in IAST to apache-httpclient-5 and apache-httpasyncclient-4 (#7920 - @Mariovido)

Build & Tooling

• ✨ Generate Muzzle classes for Groovy instrumentations (#8004 - @nikita-tkachenko-datadog)

Continuous Integration Visibility

• ✨ Support distributed traces in tests (#8078 - @nikita-tkachenko-datadog)
• ✨ Implement fail-fast tests ordering for JUnit 5 (#8055 - @nikita-tkachenko-datadog)
• ✨ Mark JUnit 5 setup and teardown action spans as failed if there is an error (#8033 - @nikita-tkachenko-datadog)
• ✨ Add tracing of setup and teardown actions in JUnit 4 (#8030 - @daniel-mohedano)

Crash tracking

• ✨ Improve crash tracking install logging (#8045 - @PerfectSlayer)

Data Streams Monitoring

• 🐛 Add Data Streams support in AWS SQS without raw message delivery (#8071 - @piochelepiotr)
• ✨ Add new tag for enabled products / features to DSM checkpoints (#8051 - @kr-igor)
• 💡 Instrument self hosted Kafka connectors (#7959 - @piochelepiotr)

Dynamic Instrumentation

• ✨ Add Micronaut 4 support for code origin for spans (#8039 - @jpbempel)
• ✨ Refactor probe matching for methods (#8021 - @jpbempel)
• ✨ Update the CodeOriginProbe fingerprint to not rely on a stack walk (#8016 - @evanchooly)
• ✨ Implement code origin support for grpc server entry spans (#7942 - @evanchooly)

GraalVM native-image

• 🐛 Update Graal build-time instrumentation config for TracePropagationStyle (#8065 - @MattAlp)
• 🐛 Fix NoClassDefFoundError: Could not initialize class DDSpanLink$EncoderHolder in Graal native-image (#8036 - @mcculls)
• 🐛🧹 Fix native-image generation of reactive applications (#8012 - @mcculls)

OpenTracing

• 🧹 Custom ScopeManagers are deprecated and will be removed in a future release of dd-trace-ot (#8058 - @mcculls)

Tracer core

• ✨🧪 Service naming: split by jee deployment (#8064 - @amarziali)
• ✨ Exclude jboss mdb proxies from instrumenting (#8061 - @amarziali)
• ✨ Add a built-in trace interceptor for keeping traces depending of their latency (#8040 - @cecile75)
• 💡 Introduce marker mechanism for eagerly initializing helpers (#8028 - @mcculls)
• 💡 Add JSON component (#7973 - @PerfectSlayer)
• ✨⚠️ Remove support for X-Forwarded in client IP resolution (#7946 - @smola)

Instrumentations

Apache HttpComponents

• ✨ Expand SSRF support in IAST to apache-httpclient-5 and apache-httpasyncclient-4 (#7920 - @Mariovido)

gRPC instrumentation

• 🐛 Use lower priorities for grpc server errors (#8043 - @amarziali)

JDBC instrumentation

• ✨ Add trace injection for prepared statements in Postgres (#7940 - @nenadnoveljic)

JMS instrumentation

• 🐛 Protect mdb from instrumenting multiple time the same event (#8062 - @amarziali)

Kafka instrumentation

• 💡 Instrument self hosted Kafka connectors (#7959 - @piochelepiotr)

OpenTelemetry instrumentation

• 🐛 Support using OpenTelemetry Event API inside @WithSpan annotated method (#8019 - @mcculls)

Reactor instrumentation

• 🐛🧹 Fix native-image generation of reactive applications (#8012 - @mcculls)

Spring instrumentation

• 🐛 Avoid double instrumenting lambdas on latest spring scheduling (#8005 - @amarziali)

All other instrumentations

• 🐛 Twilio: allow service name flattening (#8025 - @amarziali)
• ✨ Instrument Mulesoft 4.5.0+ (#7981 - @amarziali)

1.43.0

Components

Application Security Management (IAST)

• ✨ Add propagation to StringBuffer substring methods (#7992 - @Mariovido)
• 🐛 Fix issue with call sites in super calls to constructor (#7991 - @manuel-alvarez-alvarez)
• ✨ Add propagation to StringBuilder substring methods (#7980 - @Mariovido)
• 🐛 Reset IAST request context on root span published (#7969 - @manuel-alvarez-alvarez)
• ✨ Add propagation to String constructors with StringBuffer and StringBuilder (#7966 - @Mariovido)
• 🐛 Do not reset IAST concurrent request counter (#7963 - @smola)
• ✨ Exclude spark web from vulnerability locations (#7939 - @smola)
• 🐛 Exclude dev.failsafe from IAST instrumentation (#7938 - @smola)
• ✨ Exclude okio from vulnerability locations (#7937 - @smola)
• ✨ Expand SSRF support in IAST to java.net.http.HttpClient (#7877 - @Mariovido)
• Fix stack trace inconsistency between excluded frames in vulnerability location and metastruct stack trace (#7865 - @jandro996)
• ✨🧪 Add experimental taint propagation to the String replace, replaceFirst, replaceAll methods (#7741 - @Mariovido)

Application Security Management (WAF)

• Upgrade to libddwaf 1.21.0 (libddwaf-java 11.2.0) (#7993 - @ValentinZakharov)
• Updated ASM rules to 1.13.3 (#7976 - @ValentinZakharov)
• ✨ Prevent spans from having login success and failure events simultaneously (#7918 - @manuel-alvarez-alvarez)
• Add support for session tracking in jetty (#7837 - @manuel-alvarez-alvarez)
• Extend support for SSRF in exploit prevention (#7376 - @jandro996)

Build & Tooling

• ✨ Add JMXFetch to SSI Guardrails denylist (#7970 - @PerfectSlayer)
• 🐛 Remove SSI guardrails entries for hbase and hive (#7916 - @PerfectSlayer)

Continuous Integration Visibility

• 🐛 Instrument Gradle Launcher to avoid overwriting org.gradle.jvmargs property (#8001 - @nikita-tkachenko-datadog)
• Add source line tags to test suites (#7964 - @daniel-mohedano)

Crash tracking

• 🐛 Improve crashtracking support for older Bash versions (#7956 - @PerfectSlayer)
• ✨ Adjust crash upload timeout (#7905 - @dougqh)
• ✨ Use telemetry 'is_sensitive' attribute instead of redacting the crash stacktrace (#7899 - @jbachorik)

Data Streams Monitoring

• Support service name overrides for DSM (#7798 - @kr-igor)

Dynamic Instrumentation

• 🐛 Fix integer json parsing probe definition (#7957 - @jpbempel)
• 🐛 Fix NullPointerException Extracting Class symbols (#7934 - @jpbempel)
• ✨ Avoid duplicate class symbol extraction (#7919 - @jpbempel)
• Add outer exceptions support for Exception Replay (#7897 - @jpbempel)
• 🐛 Fix memory leak in Exception Replay (#7885 - @jpbempel)
• ✨ Consult the environment variable when setting the max users frames in code origin probes (#7881 - @evanchooly)

JMX fetch

• 🐛 Bump JMXFetch to 0.49.6 (#7927 - @carlosroman)

Profiling

• ✨ Common temporary location manager for profiling product (#7971 - @jbachorik)
• 🐛✨ Standardize some of the profiler sampling frequencies (#7961 - @MattAlp)
• ✨ enable SystemGC events (#7921 - @richardstartin)
• 🐛 Bump ddprof to 1.17.0 (#7915 - @jbachorik)
• ✨ paranoid exception handling when setting profiling thread context (#7903 - @richardstartin)

Telemetry

• ✨ Collect git metadata for telemetry (#7951 - @jpbempel)
• ✨ Fix dependency collection for new Spring Boot nested jars (#7931 - @smola)

Trace context propagation

• 🐛 Fix baggages mapping configuration when only keys are provided (#7972 - @cecile75)
• ✨ Updating Span Link creation due to header tag propagations for invalid spans (#7799 - @mhlidd)

Instrumentations

AWS Lambda instrumentation

• ✨ Increase lambda extension request timeout (#7986 - @nhulston)

AWS SDK instrumentation

• 🐛 Fix AWS Payload Tagging prefix generation related to SdkPojo (#7882 - @ygree)

Jetty instrumentation

• Add support for session tracking in jetty (#7837 - @manuel-alvarez-alvarez)

Kafka instrumentation

• 🐛 Reenable kafka 3.8 by default (#8007 - @nayeem-kamal)
• 🐛 Avoid double instrumentation of kafka-clients 3.8+ (#8006 - @mcculls)
• 🐛 Fix Kafka lag instrumentation for version 2.7 of Kafka (#7941 - @piochelepiotr)

Netty instrumentation

• 🐛 Finish netty span when request is cancelled (#7900 - @amarziali)

Reactor instrumentation

• 📖 Add reactor samples and doc (#7906 - @amarziali)
• 🐛 Protect currentContext access for reactor inner operators (#7883 - @amarziali)

1.42.2

Components

Build & Tooling

• 🐛 Remove SSI guardrails entries for hbase and hive (#7935 - @PerfectSlayer)

JMX fetch

• 🐛 Bump JMXFetch to 0.49.6 (#7936 - @amarziali)

Instrumentations

Jetty instrumentation

• 🐛 Finish netty span when request is cancelled (#7945 - @vandonr)

1.42.1

Potentially Breaking Changes

Warning

There is a known issue with Kafka instrumentation that causes double tracing. As a result, Kafka 3.8+ is disabled by default until the double tracing issue is resolved.

Components

Dynamic Instrumentation

• 🐛 Fix memory leak in Exception Replay (#7892 - @jpbempel)

Profiling

• 🐛 Bump ddprof to 1.17.0 (#7917 - @jbachorik)
  • Crash handler registration does not work correctly by @jbachorik in DataDog/java-profiler#150

Instrumentations

AWS SDK instrumentation

• 🐛 Fix AWS Payload Tagging prefix generation related to SdkPojo (#7901 - @ygree)

Kafka instrumentation

• Disable Kafka 3.8+ instrumentation by default (#7909 - @ygree)

Reactor instrumentation

• 🐛 Protect currentContext access for reactor inner operators (#7895 - @amarziali)

1.42.0

Known Issues

This release contains a critical bug that may cause intermittent crashes when using profiler.

To avoid this bug you can either upgrade to v1.42.1, revert to v1.41.2, or:

• To greatly reduce the chance of crash, disable native stack collection via -Ddd.profilng.ddprof.cstack=no
• To completely eliminate the chance of crash, turn off Datadog Java profiler via -Ddd.profiling.ddprof.enabled=false and use only JFR, when available

Components

Application Security Management (IAST)

• Limit the visiting of objects for Trust Boundary Violation (#7847 - @manuel-alvarez-alvarez)
• 🐛 Update header injection exclusions (reduce false positives) (#7821 - @manuel-alvarez-alvarez)
• 🐛 Ensure vulnerabilities are reported with taintable values (#7801 - @manuel-alvarez-alvarez)
• Move SSRF support for IAST to HttpClientDecorator (#7792 - @Mariovido)
• 🐛 Fix String subsequence taint tracking bug (#7778 - @jandro996)
• Attach stacktrace to IAST vulnerabilities (#7757 - @jandro996)

Application Security Management (WAF)

• Update ASM rules to 1.13.2 (#7844 - @ValentinZakharov)
• Update ASM rules to 1.13.1 (#7831 - @ValentinZakharov)
• ✨ Upgrade to libddwaf 1.20.1 (libddwaf-java 11.1.0) (#7828 - @ValentinZakharov)
• Propagate AppSec blocking exceptions from bytebuddy supressions (#7516 - @manuel-alvarez-alvarez)

Build & Tooling

• Remove hadoop from the denylist (#7866 - @andrewlock)

Configuration at Runtime

• 🐛 Fix remote config update operation (#7856 - @ValentinZakharov)
• ✨🔍 Fix relying on configId for remote config log level tracer flare change (#7788 - @cecile75)

Continuous Integration Visibility

• Add codeowners tag to test suites (#7861 - @daniel-mohedano)
• 🐛 Fix skippable tests request in headless mode (#7860 - @nikita-tkachenko-datadog)
• 🐛 Fix code coverage percentage reporting for Android projects (#7815 - @nikita-tkachenko-datadog)
• Lower log level for duplicate repo index keys warning (#7814 - @nikita-tkachenko-datadog)
• 🐛 Throw exception when using repo index to resolve source path for classes with identical names (#7793 - @nikita-tkachenko-datadog)
• 🐛 Fix automatic coverage includes calculation for headless test sessions (#7784 - @nikita-tkachenko-datadog)
• 🐛 Fix Jacoco coverage exclusion (#7783 - @nikita-tkachenko-datadog)
• 🐛 Fix module name detection for headless sessions (#7779 - @nikita-tkachenko-datadog)

Database Monitoring

• Add _dd.dbm_trace_injected tag to SQL Server prepared statements (#7863 - @nenadnoveljic)
• Add DBM_TRACE_INJECTED tag to SQL Server (#7849 - @nenadnoveljic)

Dynamic Instrumentation

• Make SymDB upload enabled by default for DI (#7869 - @jpbempel)
• Fix Where conversion for CodeOrigin probes (#7858 - @jpbempel)
• Add compression support for SymDB paylods (#7851 - @jpbempel)
• Split SymDB payload when too large (#7838 - @jpbempel)
• Add retry policy for uploading requests to agent (#7824 - @jpbempel)
• ⚡ Avoid exception when capturing fields in jdk16+ (#7774 - @jpbempel)

JMX fetch

• Bump JMXFetch to 0.49.5 (#7853 - @carlosroman)

Profiling

• Do not force-disable TLAB allocation events on JDK 8 (#7878 - @jbachorik)
• Bump ddprof to 1.16.0 (#7871 - @jbachorik)
  • Improve robustness of the crash signal handler by @jbachorik in DataDog/java-profiler#134
  • Remove a looping allocation when updating threads by @r1viollet in DataDog/java-profiler#135
  • Add a fail-safe when we encounter double-exit from crash handler by @jbachorik in DataDog/java-profiler#138
  • Crash handler recursion protection - Fix by @r1viollet in DataDog/java-profiler#139
  • Split java version to 'java version' and 'hotspot version' by @jbachorik in DataDog/java-profiler#142
  • Do not patch jmethodIDs for newer than JDK 8 by @jbachorik in DataDog/java-profiler#148
• Delay queue time rate limiting until event is committed (#7867 - @richardstartin)
• 🐛 Apply rate limit to queue events (#7823 - @richardstartin)
• Unwrap netty writetask (#7822 - @richardstartin)
• ✨⚡ Introduce aggregated smap events (enabled by default) (#7820 - @MattAlp)

Telemetry

• 🐛 Fix telemetry logs default flag (#7833 - @smola)

Tracer core

• 🐛 Prevent NPE setting null span baggage (#7848 - @PerfectSlayer)
• Widen catch blocks to make agent discovery more tolerant (#7796 - @mcculls)
• Fall back to ports when we cannot use auto-discovered unix domain sockets (#7794 - @mcculls)
• Improve isolation of embedded JFFI dependency (#7789 - @mcculls)
• ✨ Support DD_TRACE_<INTEGRATION>_ENABLED (#7718 - @mtoffl01)
• ✨⚠️ Add support for TRACE_HTTP_CLIENT_TAG_QUERY_STRING and change default value of HTTP_CLIENT_TAG_QUERY_STRING to true (#7677 - @mhlidd)
• Propagate AppSec blocking exceptions from bytebuddy supressions (#7516 - @manuel-alvarez-alvarez)

Instrumentations

Apache Spark instrumentation

• 🐛 Fix default value for long-running spans with DJM (#7795 - @paul-laffon-dd)
• Support for kafka lag metrics in spark streaming applications (#7474 - @kr-igor)

AWS SDK instrumentation

• ✨ Extract AWS payload tags (#7811 - @ygree)

JAX-WS instrumentation

• Add Jakarta WebService Instrumentation (#7854 - @jordan-wong)

JDBC instrumentation

• 🐛 Avoid metadata access in driver connect advice for Oracle sharded connections (#7812 - @mcculls)
• 🐛 Do not parse DBInfo when no connection (#7800 - @amarziali)

Kafka instrumentation

• Enabled kafka-clients 3.8+ by default (#7818 - @nayeem-kamal)

Lettuce instrumentation

• ✨ Support lettuce 6.5 (#7876 - @amarziali)

Reactor instrumentation

• ✨ Support reactor context span propagation (#7864 - @amarziali)