Skip to content

Conversation

@dd-octo-sts
Copy link

@dd-octo-sts dd-octo-sts bot commented Nov 22, 2025

  • [5856d72b53] - (SEMVER-PATCH) remove dev dependency on @rspack/cli (Roch Devost) #7096
  • [df41c8db22] - (SEMVER-MINOR) cache forensics workflow (d) #7066
  • [ffa3de42c5] - (SEMVER-PATCH) vendor bundled non-datadog dependencies (Roch Devost) #6958
  • [519137b6e0] - (SEMVER-MINOR) feat(llmobs): add reasoning token metrics in openai plugin (Xinyuan Guo) #7026
  • [1c9a1f41ce] - (SEMVER-PATCH) ci: add tests for the most popular package managers (Roch Devost) #7073
  • [9abe91ae72] - (SEMVER-PATCH) fix: update resource name when child span is active in store for Next.js (Crystal Luc-Magloire) #7000
  • [d562791c0b] - (SEMVER-MINOR) feat(ai_guard): add tags to Evaluation and AIGuardAbortError (Manuel Álvarez Álvarez) #7059
  • [e5d623c163] - (SEMVER-PATCH) ci: fix dependabot.yml to not have overlapping directories (Ruben Bridgewater) #7070
  • [460bf1461b] - (SEMVER-MINOR) collect and propagate process tags in first span of each chunk (Thomas Hunter II) #6733
  • [237ea96e4c] - (SEMVER-PATCH) chore(ci) update one-pipeline (campaigner-prod[bot]) #7054
  • [31a2890d20] - (SEMVER-PATCH) fix(ws): wrap event remove handler for message event removal (Ruben Bridgewater) #7052
  • [a897a2086c] - (SEMVER-PATCH) chore: simplify update-3rdparty-licenses workflow (Thomas Watson) #7064
  • [9aaadb558e] - (SEMVER-PATCH) ci: safer dependabot updates (Ruben Bridgewater) #7049
  • [590ba8edc7] - (SEMVER-MINOR) otel: add support for scope metrics (Munir Abdinur) #7063
  • [b95a717ca0] - (SEMVER-PATCH) chore: refactor update-3rdparty-licenses workflow (Thomas Watson) #7061
  • [2ce2872554] - (SEMVER-PATCH) fix: inline update-3rdparty-licenses.sh script into GH Workflow (Thomas Watson) #7058
  • [a408e50526] - (SEMVER-PATCH) test: skip prisma 7 tests for older Node.js versions (Ruben Bridgewater) #7050
  • [f62588731f] - (SEMVER-MINOR) fix(otel): support setting DD_METRICS_OTEL_ENABLED to False (Munir Abdinur) #7028
  • [490a6ffec2] - (SEMVER-PATCH) ignore space at eol in update 3rd party license script (Roch Devost) #7053
  • [46db10679b] - (SEMVER-PATCH) fix(aws-sdk): do not patch client config deserialization multiple times (Sam Brenner) #6991
  • [4b11d91375] - (SEMVER-MINOR) feat(debugger): add special handling for very large collections/objects (Thomas Watson) #6912
  • [5abf8070bd] - (SEMVER-PATCH) fix(debugger): initialize lastCaptureNs to ensure first probe hit is captured (Thomas Watson) #7042
  • [d23ef758ed] - (SEMVER-PATCH) fix(debugger): allow snapshotsPerSecond to be a float (Thomas Watson) #7041
  • [bc60861fc6] - (SEMVER-PATCH) chore(deps): bump the gh-actions-packages group across 2 directories with 2 updates (dependabot[bot]) #7046
  • [3ca3bd6200] - (SEMVER-PATCH) chore(deps-dev): bump eslint-plugin-jsdoc (dependabot[bot]) #7045
  • [581b163549] - (SEMVER-PATCH) chore(ci): Bump temporary version of dd-license-attribution (Thomas Watson) #7040
  • [926cf806e4] - (SEMVER-PATCH) ��Prepare support for vendored dependencies (Thomas Watson) #7039
  • [114188adc8] - Google GenAI integration for LLM observability and APM tracing. (Crystal Luc-Magloire)
  • [e26aaf5ff3] - (SEMVER-MINOR) feat(openai): instrument openai reusable prompts (Alexandre Choura) #6941
  • [930155a2ea] - (SEMVER-MINOR) feat(anthropic): add anthropic beta client support (Alexandre Choura) #7010
  • [0dc8604284] - (SEMVER-PATCH) chore: auto-generate LICENSE-3rdparty.csv file (Thomas Watson) #6968
  • [4b4c83ecc6] - (SEMVER-PATCH) Compute and set http endpoint when route is not available (Ilyas Shabi) #6861
  • [d680a50d31] - (SEMVER-PATCH) [test optimization] Fix playwright's quarantine and retry logic (Juan Antonio Fernández de Alba) #7024
  • [89ed9a52e5] - (SEMVER-PATCH) chore(deps): bump @isaacs/ttlcache (dependabot[bot]) #7032
  • [2b91fd57cc] - (SEMVER-MINOR) chore(deps): Bump Next.js test-version (Carles Capell) #7021
  • [585370c94d] - (SEMVER-PATCH) chore(deps): bump the gh-actions-packages group across 5 directories with 4 updates (dependabot[bot]) #7033
  • [40dc0e0f93] - (SEMVER-PATCH) chore(deps-dev): bump the dev-minor-and-patch-dependencies group across 1 directory with 5 updates (dependabot[bot]) #7031
  • [1b7890707c] - (SEMVER-PATCH) Revert "chore: temporarily disable Dependabot npm version updates ([dependabot npm disable] Temporarily disable npm version updates #6987)" (simon-id) #7020
  • [0bb1f17270] - (SEMVER-PATCH) [test optimization] Improve playwright installation in automatic log submission test (Juan Antonio Fernández de Alba) #7019
  • [9a1f6efd3c] - (SEMVER-PATCH) [test optimization] Speed up cypress tests by caching dependencies (Juan Antonio Fernández de Alba) #7018
  • [4345d0df07] - (SEMVER-PATCH) [test optimization] Cache oldest versions of playwright and improve retries (Juan Antonio Fernández de Alba) #7017
  • [7a4b1c3fc5] - (SEMVER-PATCH) chore(deps): bump the gh-actions-packages group across 2 directories with 1 update (dependabot[bot]) #7015
  • [21cbc22010] - (SEMVER-PATCH) chore(ci): update heaviest-objects-in-the-universe (Thomas Watson) #6989
  • [1a20edc1be] - (SEMVER-PATCH) chore(debugger): fix spelling and types (Thomas Watson) #7009
  • [b0ae6aa1f8] - (SEMVER-PATCH) Update .gitlab/one-pipeline.locked.yml (Pawel Chojnacki) #7013
  • [12c193da79] - (SEMVER-PATCH) test: decrease runtime metrics flakiness on windows (Ruben Bridgewater) #6998
  • [20b17a606d] - (SEMVER-PATCH) chore: ensure VSCode uses the workspace TS version (Thomas Watson) #7011
  • [25fa1e4dcd] - (SEMVER-PATCH) ci: enable SLO change detection, make benchmark checks interruptible (Augusto de Oliveira) #7005
  • [105cb8c98d] - (SEMVER-PATCH) chore(deps) Bump mongoose test-version (Carles Capell) #7003
  • [cbcd3951f2] - (SEMVER-PATCH) ci: fix benchmarks rules (Augusto de Oliveira) #7004
  • [f10147d6d6] - (SEMVER-PATCH) Skip flaky test on macOS (Attila Szegedi) #6994
  • [8796ac882a] - (SEMVER-PATCH) fix(types): update incorrect tracer option names (Sophie Alpert) #6526
  • [998a9163a8] - (SEMVER-PATCH) [test optimization] Do not retry if test isolation is not enabled in cypress (Juan Antonio Fernández de Alba) #6978
  • [c39e9258d9] - (SEMVER-PATCH) [test optimization][SDTEST-2939] Add branch to test management request (Juan Antonio Fernández de Alba) #6990
  • [14653ffb1f] - (SEMVER-PATCH) chore(iast): Remove fake tokens from test descriptions (Ugaitz Urien) #6981
  • [815b1439ac] - chore: temporarily disable Dependabot npm version updates (Mike Thompson) #6987
  • [572f6b7521] - (SEMVER-PATCH) chore: fix error in .vscode/settings.json (Thomas Watson) #6977
  • [693f0543ba] - (SEMVER-PATCH) Fix[CI]: deny benchmark runs on temporary graphite branches (Fayssal DEFAA) #6953
  • [e137afeafa] - (SEMVER-PATCH) test: rewrite assertion to use Node.js assert (Ruben Bridgewater) #6951
  • [603c6dc5b1] - (SEMVER-PATCH) ci: increase benchmarking jobs timeout to 30m (Augusto de Oliveira) #6976
  • [7f5305eff2] - (SEMVER-PATCH) chore(deps-dev): bump @types/sinon from 17.0.4 to 21.0.0 (dependabot[bot]) #6972
  • [6857c41b9c] - (SEMVER-PATCH) chore(deps): bump @isaacs/ttlcache (dependabot[bot]) #6971
  • [cf79dae4d4] - (SEMVER-PATCH) chore(deps-dev): bump the dev-minor-and-patch-dependencies group across 1 directory with 4 updates (dependabot[bot]) #6970
  • [f17cc8330b] - (SEMVER-PATCH) chore(deps): bump @apollo/server (dependabot[bot]) #6973
  • [796a60c190] - (SEMVER-PATCH) chore(deps): bump the gh-actions-packages group across 4 directories with 2 updates (dependabot[bot]) #6974
  • [064c9468cd] - (SEMVER-PATCH) chore: add .vscode/settings.json file (Thomas Watson) #6967
  • [46c325bf8d] - (SEMVER-PATCH) fix(debugger): address TS errors (Thomas Watson) #6966
  • [fcddd2661c] - (SEMVER-PATCH) chore: refactor debugger snapshot collector code (Thomas Watson) #6921
  • [ef50f2e23f] - (SEMVER-MINOR) feat(otel): add support for otel metrics api via protobuf and json (Munir Abdinur) #6783
  • [0107e423c3] - (SEMVER-PATCH) chore: type-cast server.address() calls (Thomas Watson) #6965
  • [7b1489a7d7] - (SEMVER-MINOR) chore(deps): bump @datadog/native-iast-taint-tracking to v4.1.0 (Carles Capell) #6860
  • [b7f77cca40] - (SEMVER-PATCH) test(debugger): refactor triggerBreakpoint helper function (Thomas Watson) #6959
  • [837bc529f3] - (SEMVER-PATCH) chore(debugger): add JSDoc types to debugger tests (Thomas Watson) #6962
  • [21673ec562] - (SEMVER-PATCH) refactor(debugger): don't use Object.hasOwn (Thomas Watson) #6960
  • [68516f7ba2] - (SEMVER-PATCH) ci: set benchmarking jobs to be interruptible outside master (Augusto de Oliveira) #6940
  • [2dd3573f86] - (SEMVER-MINOR) feat(debugger): add snapshot time budget (Thomas Watson) #6897
  • [06285b6235] - (SEMVER-PATCH) chore(ci): Add automatic retry on benchmarking infrastructure failure (Dmytro Yurchenko) #6929

ddyurchenko and others added 5 commits November 22, 2025 05:06
Enforce a per-snapshot time budget. By default this budget is 15ms, but
can be modified by the experimental config, either as an environment
variable:

    DD_DYNAMIC_INSTRUMENTATION_CAPTURE_TIMEOUT_MS=20

Or programatically:

    tracer.init({
      dynamicInstrumentation: {
        captureTimeoutMs: 20
      }
    })

When the budget is exceeded, remaining values that are not already
resolved, are marked with `notCapturedReason: 'timeout'`.
* set benchmarking jobs to be interruptible outside main

* set serverless benchmarking jobs to be interruptible outside main

* change macrobenchmark runner type since they're also run on every branch

* test interruptibility

* test interruptibility

* set workflow:auto_cancel:on_new_commit to interruptible

* test interruptibility

* Update .gitlab/macrobenchmarks.yml

Co-authored-by: Ruben Bridgewater <[email protected]>

---------

Co-authored-by: Ruben Bridgewater <[email protected]>
It's more performant to access the property than to use `Object.hasOwn`.
@github-actions
Copy link

github-actions bot commented Nov 22, 2025

Overall package size

Self size: 3.57 MB
Deduped: 4.46 MB
No deduping: 4.46 MB

Dependency sizes | name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 1.15.0 | 127.66 kB | 856.24 kB | | dc-polyfill | 0.1.10 | 26.73 kB | 26.73 kB |

🤖 This report was automatically generated by heaviest-objects-in-the-universe

@codecov
Copy link

codecov bot commented Nov 22, 2025

Codecov Report

❌ Patch coverage is 83.33333% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 84.69%. Comparing base (6b35e7d) to head (d6a6751).
⚠️ Report is 239 commits behind head on v5.x.

Files with missing lines Patch % Lines
...ages/datadog-instrumentations/src/helpers/hooks.js 0.00% 1 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             v5.x    #6964      +/-   ##
==========================================
+ Coverage   83.19%   84.69%   +1.49%     
==========================================
  Files         476      515      +39     
  Lines       20153    22022    +1869     
==========================================
+ Hits        16766    18651    +1885     
+ Misses       3387     3371      -16     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@datadog-datadog-prod-us1
Copy link

datadog-datadog-prod-us1 bot commented Nov 22, 2025

✅ Tests

🎉 All green!

❄️ No new flaky tests detected
🧪 All tests passed

This comment will be updated automatically if new data arrives.
* Fix with Cursor requires Datadog plugin ≥v2.17.0
🔗 Commit SHA: d6a6751 | Docs | Datadog PR Page | Was this helpful? Give us feedback!

@pr-commenter
Copy link

pr-commenter bot commented Nov 22, 2025

Benchmarks

Benchmark execution time: 2025-12-12 05:19:00

Comparing candidate commit d6a6751 in PR branch v5.81.0-proposal with baseline commit 60d9796 in branch v5.x.

Found 0 performance improvements and 4 performance regressions! Performance is the same for 285 metrics, 31 unstable metrics.

scenario:appsec-iast-no-vulnerability-iast-enabled-always-active-18

  • 🟥 instructions [+222.5M instructions; +252.0M instructions] or [+7.714%; +8.735%]

scenario:appsec-iast-no-vulnerability-iast-enabled-always-active-20

  • 🟥 instructions [+210.2M instructions; +239.6M instructions] or [+7.799%; +8.887%]

scenario:appsec-iast-no-vulnerability-iast-enabled-always-active-22

  • 🟥 instructions [+203.9M instructions; +238.0M instructions] or [+7.719%; +9.011%]

scenario:appsec-iast-no-vulnerability-iast-enabled-always-active-24

  • 🟥 instructions [+215.3M instructions; +248.5M instructions] or [+9.364%; +10.810%]

watson and others added 5 commits November 23, 2025 05:06
The new function is cleaner and with a theoretical lower overhead,
though in reality this shouldn't make a difference during testing.
Avoid TS complaining about `address()` possibly returning `null`.
…6783)

* add otlp metrics protos

* feat: add OTLP metrics proto definitions and reorganize directory

- Add metrics.proto and metrics_service.proto (OTLP v1 spec)
- Update protobuf_loader to support metrics protos
- Rename protos/ -> otlp/ directory for better organization

* refactor: extract common OTLP logic into base classes

- Create OtlpHttpExporterBase for shared HTTP export logic
- Create OtlpTransformerBase for shared transformation logic
- Refactor logs exporter/transformer to extend base classes
- Update test mocking paths
- Eliminates ~400 lines of duplication

* fix logs

* increase test coverage

* feat(metrics): add support for otel metrics provider

* feat(metrics): add support for otlp configurations

* updates to pass system tests

* add temperolality support and clean up implementation

* add support for encoding attributes

* simplify tests

* use real values in tests

* do not encode numbers as strings

* use enum in transformation

* remove unneed fields

* add better temporality support and include encoding for async metric types

* improve test coverage for scope attributes

* simplify stubs in tests

* validate scope attributes

* ruben comments

* fix broken number test

* clean up tests

* clean up instruments and update tests

* simplify meter

* use constants and implement missing callbacks

* move otlp_transformer changes over

* clean up private/public fields

* avoid redefining constant

* clean up tests

* update typing

* linting clean ups

* first round of changes from cr

* limit number of metrics in each batch

* round 3 changes

* address more comments part 4

* update doc strings and typing

* update max batch size to operate on the aggregate metrics

* avoid converting aggregated metrics to arrays, perf

* fix regression in logs implementation

* revert closure

* cleanup max measurement queue, jdocs and typing

* log warning if value is invalid

* final set of changes

* update tests to be compatible with master branch

* remove register from meter provider and simplify export

* clean up stable stringify and update limit of max queue size

* remove @Private from metrics docs

* only implement the meterprovider api, renove shutdown and forceflush operations

* remove observableInstruments

* lint

* fix linting failures

* fix linting failures

* fix linting 3
Rename a few function names that were ambiguous.
watson and others added 3 commits November 24, 2025 05:07
Address a large majority of the TS type errors in the debugger code. The
only actual change to the runtime logic is the following:

When adding a new breakpoint to a file that has a source map, we now
validate that the generated position can be identified. If not, we abort
and don't add the breakpoint (which most likely would have failed
anyway). An error will be sent to the debugger diagnostics endpoint if
that happens.

Another minor, but hopefully invisible change, is that all private
fields in the `JSONBuffer` class are now properly private instead of
just being prefixed with an underscore.

The only debugger TS errors not addressed in this commit are the following:
- The ones already addressed in #6965
- The ones which will disappear once
  #6951 lands

This commit also adds a `tsconfig.debugger.json` file, which can be used
to check the types of the debugger code:

    ./node_modules/.bin/tsc --noEmit -p tsconfig.debugger.json
This ensures that:

- The ESLint config file used by VSCode is always the correct one and
  that the working directory can always be identified. VSCode could
  become confused if this project is checked out inside a folder named
  `node_modules` and start complaining about unpublished files every
  place we reference a relative file in a `require` call.
- The TypeScript version used by VSCode is the same as being used by the
  project.
…with 2 updates (#6974)

Bumps the gh-actions-packages group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [github/codeql-action](https://github.com/github/codeql-action).
Bumps the gh-actions-packages group with 1 update in the /.github/actions/testagent/logs directory: [actions/checkout](https://github.com/actions/checkout).
Bumps the gh-actions-packages group with 1 update in the /.github/actions/testagent/start directory: [actions/checkout](https://github.com/actions/checkout).
Bumps the gh-actions-packages group with 2 updates in the /.github/workflows directory: [actions/checkout](https://github.com/actions/checkout) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/checkout` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@08c6903...1af3b93)

Updates `github/codeql-action` from 4.31.2 to 4.31.4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@0499de3...e12f017)

Updates `actions/checkout` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@08c6903...1af3b93)

Updates `actions/checkout` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@08c6903...1af3b93)

Updates `actions/checkout` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@08c6903...1af3b93)

Updates `github/codeql-action` from 4.31.2 to 4.31.4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@0499de3...e12f017)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: github/codeql-action
  dependency-version: 4.31.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: actions/checkout
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: actions/checkout
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: actions/checkout
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: github/codeql-action
  dependency-version: 4.31.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
dependabot bot and others added 9 commits November 25, 2025 05:07
Bumps the test-versions group with 1 update in the /integration-tests/esbuild directory: [@apollo/server](https://github.com/apollographql/apollo-server/tree/HEAD/packages/server).


Updates `@apollo/server` from 5.1.0 to 5.2.0
- [Release notes](https://github.com/apollographql/apollo-server/releases)
- [Changelog](https://github.com/apollographql/apollo-server/blob/main/packages/server/CHANGELOG.md)
- [Commits](https://github.com/apollographql/apollo-server/commits/@apollo/[email protected]/packages/server)

---
updated-dependencies:
- dependency-name: "@apollo/server"
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ss 1 directory with 4 updates (#6970)

Bumps the dev-minor-and-patch-dependencies group with 4 updates in the / directory: [@stylistic/eslint-plugin](https://github.com/eslint-stylistic/eslint-stylistic/tree/HEAD/packages/eslint-plugin), [bun](https://github.com/oven-sh/bun), [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) and [workerpool](https://github.com/josdejong/workerpool).


Updates `@stylistic/eslint-plugin` from 5.6.0 to 5.6.1
- [Release notes](https://github.com/eslint-stylistic/eslint-stylistic/releases)
- [Changelog](https://github.com/eslint-stylistic/eslint-stylistic/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint-stylistic/eslint-stylistic/commits/v5.6.1/packages/eslint-plugin)

Updates `bun` from 1.3.2 to 1.3.3
- [Release notes](https://github.com/oven-sh/bun/releases)
- [Commits](oven-sh/bun@bun-v1.3.2...bun-v1.3.3)

Updates `eslint-plugin-jsdoc` from 61.1.12 to 61.4.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Changelog](https://github.com/gajus/eslint-plugin-jsdoc/blob/main/.releaserc)
- [Commits](gajus/eslint-plugin-jsdoc@v61.1.12...v61.4.0)

Updates `workerpool` from 10.0.0 to 10.0.1
- [Changelog](https://github.com/josdejong/workerpool/blob/master/HISTORY.md)
- [Commits](josdejong/workerpool@v10.0.0...v10.0.1)

---
updated-dependencies:
- dependency-name: "@stylistic/eslint-plugin"
  dependency-version: 5.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch-dependencies
- dependency-name: bun
  dependency-version: 1.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch-dependencies
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 61.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-and-patch-dependencies
- dependency-name: workerpool
  dependency-version: 10.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the runtime-minor-and-patch-dependencies group with 1 update in the / directory: [@isaacs/ttlcache](https://github.com/isaacs/ttlcache).


Updates `@isaacs/ttlcache` from 2.1.1 to 2.1.2
- [Changelog](https://github.com/isaacs/ttlcache/blob/main/CHANGELOG.md)
- [Commits](isaacs/ttlcache@v2.1.1...v2.1.2)

---
updated-dependencies:
- dependency-name: "@isaacs/ttlcache"
  dependency-version: 2.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-minor-and-patch-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) from 17.0.4 to 21.0.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon)

---
updated-dependencies:
- dependency-name: "@types/sinon"
  dependency-version: 21.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Most of these changes are done by a script including a lint:fix run
afterwards.

The script used was listed for visibility in the PR as separate
commit that was reverted.
The `overrideConfigFile` setting doesn't support template strings, so
VSCode was trying to look for a directory litterally named
`${workspaceFolder}` and failed.

This commit removes the setting entirely since it wasn't really needed as
VSCode would default to look for `eslint.config.mjs` (amongst other
variants) in the root directory eventually (traversing the directory
structure up). The important fix in the commit where this config option
was added was `workingDirectories`, which we keep.
To remove some warnings because secrets in the logs, as they are fake tokens, we can just remove them from the logs.
…with 2 updates (#7046)

Bumps the gh-actions-packages group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [github/codeql-action](https://github.com/github/codeql-action).
Bumps the gh-actions-packages group with 2 updates in the /.github/workflows directory: [actions/checkout](https://github.com/actions/checkout) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/checkout` from 5.0.0 to 6.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v5...8e8c483)

Updates `github/codeql-action` from 4.31.6 to 4.31.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@fe4161a...cf1bb45)

Updates `actions/checkout` from 5.0.0 to 6.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v5...8e8c483)

Updates `github/codeql-action` from 4.31.6 to 4.31.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@fe4161a...cf1bb45)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: github/codeql-action
  dependency-version: 4.31.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: actions/checkout
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: github/codeql-action
  dependency-version: 4.31.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
watson and others added 7 commits December 9, 2025 05:07
In case `snapshotsPerSecond` is ever a float, make sure that it can
safely be converted to a BigInt.

This is mostly useful in testing, but it's good to safe-guard against in
practise so BigInt doesn't throw an exception.
…captured (#7042)

When a probe is added with any sampling rate, the first probe hit could
be incorrectly skipped if it occurred within the sampling interval after
process start.

This happened because `lastCaptureNs` was initialized to `0n`, causing
the sampling check
`start - probe.lastCaptureNs < probe.nsBetweenSampling` to evaluate to
true when the process had been running for less time than the sampling
interval.

For example:
- At 10 samples/sec: first hit skipped if within first 100ms
- At 5 samples/sec: first hit skipped if within first 200ms
- At 1 sample/sec: first hit skipped if within first 1 second
- At 0.5 samples/sec: first hit skipped if within first 2 seconds

Fix by initializing `lastCaptureNs` to
`BigInt(Number.MIN_SAFE_INTEGER)`, ensuring the first probe hit always
passes the sampling check regardless of when it occurs.
…ts (#6912)

Skip enumerating collections with more than 500 items to avoid excessive
CDP serialization time. Collections above the threshold are flagged with
a notCapturedReason and their size is recorded.

For objects with more than 500 own properties, capture once but prevent
future snapshot attempts for the same probe version within the current
process. An evaluation error is recorded to notify the user that no more
snapshots will be collected for that probe version.

This mitigates performance issues when encountering extremely large
objects or collections during snapshot capture.
watson and others added 3 commits December 10, 2025 05:08
- Change checkout to base branch and fetch PR files as needed for comparison
- Fix event name check from pull_request to pull_request_target
BridgeAR and others added 5 commits December 11, 2025 05:08
* ci: safer dependabot updates

This increases our cooldown time for regular dependencies to three
days while we use a cooldown of one day for instrumented libraries.

Security updates should happen right away in all situations. Thus,
this adds a new section for handling these separately in all cases.

* ci: increase version by default by dependabot besides for OTEL

Change the update strategy to increase to guarantee our library
always uses latest dpeendencies when being installed by customers.
OTEL libraries are special handled, due to needing a wide range,
if possible.

* ci: add more package.json to dependabot.yml

This adds updates for docs and integration tests.

* fixup! increase cooldown further as discussed in guild

* fixup!

---------

Co-authored-by: simon-id <[email protected]>
- Switch from pull_request_target to pull_request trigger
- Remove custom GitHub token (dd-octo-sts-action) as it's no longer needed
- Simplify permissions to only contents: write
- Check out PR branch directly instead of fetching files from it
- Remove unnecessary temporary file operations
- Remove unused environment variables (PR_AUTHOR, PR_HEAD_SHA)
* fix(ws): wrap event remove handler for message event removal

The remove handler has to understand what method was originally
wrapped and remove the wrapped method. Otherwise it would still
exist and be triggered.

Fixes: #7025

* fixup!

* chore: simplify code and add TODO comments

The instrumentation should be improved further for error handling
and preventing multiple message listeners creating individual spans.
Co-authored-by: campaigner-prod[bot] <87874424+campaigner-prod[bot]@users.noreply.github.com>
- collects basic process tags
- tag serializer
- send in first chunk span every time we send traces to the agent
- create DD_EXPERIMENTAL_PROPAGATE_PROCESS_TAGS_ENABLED=false to configure
- TODO: as a follow-up this should only add tags to the first span of the first chunk of a network request
BridgeAR and others added 9 commits December 12, 2025 05:08
A package.json can only be handled by a single config. Individual
dependencies can not be handled separately in a different config.
Thus, this simplifies our overall config by defining increase for
all our dependencies besides the OTEL api one, since that must be
widened. We have to manually update it for now, until a better
solution is found.
….js (#7000)

Changed how to store the req to reference in page load to consider child spans in the store. It now uses the identifier instance for the lookup instead of the span.
* cache forensics workflow

* formatting

* run on pr

* specify when to extract

* hardcode entries

* back to manual dispatch

* new set of inputs
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.