1.30.0

Known Issues

• This release contains two critical bugs that may break applications in the following cases:
  • Some Spring Boot applications.
  • Applications with ASM enabled (DD_APPSEC_ENABLED=true).
• In both cases, it is strongly recommended to upgrade to v1.30.1 or later.

Components

Application Security Management (IAST)

• 🐛 Fix dynamic invoke for string concat in IBM J9 (#6634 - @manuel-alvarez-alvarez)
• ⚡ Move away from soft references in sources (#6631 - @manuel-alvarez-alvarez)
• Add application vulnerabilities to telemetry (#6624 - @manuel-alvarez-alvarez)
• Detect insecure auth protocol (#6614 - @jandro996)
• Fix insecure cookies false positives when unsetting cookies (#6586 - @jandro996)

Application Security Management (WAF)

• Upgrade to libddwaf 1.16.0 (libsqreen 9.0.1) (#6658 - @ValentinZakharov)
• 🧪 Exclude WAF timeout from telemetry logs (#6618 - @smola)
• Add _dd.appsec.waf.timeouts tag (#6597 - @smola)

Continuous Integration Visibility

• 🐛 Fix null test framework name in JUnit 5 instrumentation (#6684 - @nikita-tkachenko-datadog)
• Do not ignore caught exceptions in CI Visibility code (#6671 - @nikita-tkachenko-datadog)
• Implement telemetry for code coverage operations (#6666 - @nikita-tkachenko-datadog)
• Implement telemetry for shell git commands (#6665 - @nikita-tkachenko-datadog)
• Implement telemetry for CI Visibility (#6664 - @nikita-tkachenko-datadog)

Database Monitoring

• Fix context store access with null key on DBM MySQL connection (#6616 - @mcculls)

Dynamic Instrumentation

• ✨ Add class filtering and exception probe conditions (#6641 - @jpbempel)
• ✨ Add instrumentation of exception stacktraces (#6609 - @jpbempel)

Profiling

• Upgrade to ddprof 0.99.0 (#6679 - @richardstartin)

Remote Configuration

• 🐛 Fix remote config activation configuration name (#6642 - @PerfectSlayer)
• Add target service+env check prior configuration activation (#6636 - @ygree)

Telemetry

• 🐛 Fix intake telemetry client URL for EU site (#6683 - @nikita-tkachenko-datadog)
• Update telemetry intake client to use CI Visibility agentless URL, if configured (#6653 - @nikita-tkachenko-datadog)
• Do not switch to agent telemetry client on detecting agent telemetry endpoint availability when intake client is preferred (#6644 - @nikita-tkachenko-datadog)
• Add support for periodic submission of telemetry distribution series (#6643 - @nikita-tkachenko-datadog)
• Use intake telemetry client by default when running in agentless mode (#6607 - @nikita-tkachenko-datadog)

Tracer core

• Implement a mechanism for adding ad-hoc listeners to OKHTTP requests (#6660 - @nikita-tkachenko-datadog)
• Override tracing preferred service name and pin to dynamic config (#6648 - @amarziali)
• 🐛 Fixes to trace agent service rates feedback - e.g. MAX TPS support (#6628 - @dougqh)
• Switching to case insensitive matching (#6613 - @dougqh)
• ✨ Add scheduledWithFixedDelay method (#6587 - @jpbempel)

Serverless

• Use connection pool for http communications with extension. (#6417 - @purple4reina)

Instrumentations

Apache Spark instrumentation

• Flush traces when spark application is finished (#6670 - @paul-laffon-dd)

JDBC instrumentation

• Fix context store access with null key on DBM MySQL connection (#6616 - @mcculls)

All other instrumentations

• Align apache http client 5 instrumentation names (#6596 - @amarziali)