1.29.0

Known Issues

• This release contains a critical bug that may break some Spring Boot applications. It is strongly recommended to upgrade to v1.30.1 or later.

Components

Application Security Management (IAST)

• 🐛 Fix issue with cookie parser and empty cookie values (#6588 - @manuel-alvarez-alvarez)
• 🐛 Fix org.json instrumentation (bad JSONObject advice) (#6578 - @smola)
• Improve header injection redaction (#6577 - @jandro996)
• ⚡ Cache IAST metric tag values to be used in metrics and spans (#6561 - @manuel-alvarez-alvarez)
• 🧹 Get access to tag values from the top of TraceSegments (#6560 - @manuel-alvarez-alvarez)
• ⚡ Improve the performance of the IAST cookie parser (#6558 - @manuel-alvarez-alvarez)
• Fix header injection exclusions (#6550 - @jandro996)
• ⚡ Do not compute DBInfo on every statement call (#6549 - @manuel-alvarez-alvarez)
• ⚡ Reduce the memory footprint of IAST sources (#6501 - @manuel-alvarez-alvarez)
• Kafka support as IAST source (#6465 - @manuel-alvarez-alvarez)
• Add hardcoded secrets detection (#6461 - @jandro996)
• Improve IAST coverage by not relying on an active context for tainting purposes (#6094 - @manuel-alvarez-alvarez)

Application Security Management (WAF)

• 🐛 Trigger WAF request metrics only at end of request only (#6595 - @smola)
• ✨ Configure API Security configuration via remote-config (#6340 - @ValentinZakharov)

Continuous Integration Visibility

• Report retried TestNG tests as failed rather than skipped (#6592 - @nikita-tkachenko-datadog)
• Implement flaky test retries for Karate framework (#6582 - @nikita-tkachenko-datadog)
• Add support for GZIP for CI Visibility intakes and EVP endpoints in agentless/evp-proxy-V4 modes (#6569 - @nikita-tkachenko-datadog)
• Adjust log level or error messages written by repo indexer (#6556 - @nikita-tkachenko-datadog)

Dynamic Instrumentation

• ✨ Add exception debugging for span error (#6568 - @jpbempel)

GraalVM native-image

• Fix profiling on Quarkus native-image (#6562 - @jbachorik)

Profiling

• Include aas related tags in profile tag-map (#6612 - @jbachorik)
• Fix profiling on Quarkus native-image (#6562 - @jbachorik)
• Upgrade to ddprof 0.96.0 (#6553 - @richardstartin)

Remote Configuration

• Handle remote config 204 responses gracefully (#6576 - @smola)

Telemetry

• 🧪 Do not send agent API errors to telemetry logs (#6605 - @smola)
• Fix dependency resolution for nested JARs (#6603 - @smola)
• Add Datadog-Entity-Id header (#6559 - @ygree)
• 🧪 Improve content of redacted stacktraces in telemetry logs (#6557 - @smola)

Testing

• Force test failure on unhandled instrumented exception (#6546 - @amarziali)
• Add latestDepTest for Jvm 21 on CI (#6542 - @amarziali)

Tracer core

• Implement ScopedContext and Baggage API (#6608 - @mcculls)
• ✨ Adding support for tag matching of non-String types (#6591 - @dougqh)
• 🔍 Capture JVM arguments in tracer-flare (#6581 - @mcculls)
• 🐛 Avoid NumberFormatException when logging 128bit trace ID (#6570 - @amarziali)
• 🐛 Fix for missing ToJson annotation SamplingRules deserialization exception (#6548 - @ygree)
• 🧹 Refactor how we apply custom transformers (#6541 - @mcculls)
• 🔍 Add requested and completed times to flare_info.txt (#6531 - @mcculls)

Instrumentations

Apache Spark instrumentation

• 🧪 Initial flush interval for long running spans (#6540 - @paul-laffon-dd)
• 🧪 Reduce long running default flush interval to 120 seconds (#6536 - @paul-laffon-dd)
• Use spark.app.name as default service if not set by the user (#6460 - @paul-laffon-dd)
• Capture relationships between spark SQL stages (#6459 - @paul-laffon-dd)

AWS SDK instrumentation

• 🐛 Avoid NumberFormatException when logging 128bit trace ID (#6570 - @amarziali)
• Add aws.object.key tag for aws-sdk-1 (#6555 - @paul-laffon-dd)

Jetty instrumentation

• ✨ Support jetty client 10 and 11 (#6590 - @amarziali)

Kafka instrumentation

• 🐛 KafkaConsumer: avoid null key context access (#6545 - @amarziali)

All other instrumentations

• Mute tracing for subprocesses executed in by the tracer (#6584 - @smola)
• Add aerospike 8 latestDepTests (#6543 - @amarziali)
• ✨ Allow axis server span to set local root resource name (#6537 - @amarziali)
• ✨ Add component and fix cmd.exit_code tag in subprocess instrumentation (#6502 - @smola)
• Attach command execution spans to current span if it exists (#6481 - @smola)