Update datadog packages to v7.52.0

[renovate]

This PR contains the following updates:

Package	Update	Change
DataDog/datadog-agent	minor	7.50.3 -> 7.52.0
DataDog/integrations-core	minor	7.50.2 -> 7.52.0

---

Release Notes

DataDog/datadog-agent (DataDog/datadog-agent)

v7.52.0

Compare Source

======

.. _Release Notes_7.52.0_Prelude:

Prelude

Release on: 2024-03-21

• Please refer to the 7.52.0 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7520>_ for the list of changes on the Core Checks

.. _Release Notes_7.52.0_Upgrade Notes:

Upgrade Notes

• To prevent misconfigurations, the Windows Datadog Agent installer now raises an error if
  the user account running the installer MSI is provided as the ddagentuser (DDAGENTUSER_NAME) account.
  If the account is a service account, such as LocalSystem or a gMSA account, no action is needed.
  If the account is a regular account, configure a different Datadog Agent service account.

.. _Release Notes_7.52.0_New Features:

New Features

• Add device_type to the device metadata.

• Attach host tags to metrics for expected_tags_duration amount of time.

• APM stats will now include, if present, the Git commit SHA from traces (or container tags) and the image tag from container tags.

• Creation of a new packageSigning component to collect Linux package signature information and improve signature rotation process. More information can be found in DataDog documentation at 2024 linux key rotation <https://docs.datadoghq.com/agent/guide/linux-key-rotation-2024>_.

• Adds support for span links <https://docs.datadoghq.com/tracing/trace_collection/span_links/>_ in the trace agent. This field
  contains a list of casual relationships between spans and is only
  populated when v0.4 of the Trace API is used.

• The Windows Agent now supports CWS for process and network threats.

• CWS: Add chdir event to allow recent container escape detection.

• CWS: [BETA] Add File Integrity Monitoring support on Windows, supporting both files and registry.

• CWS: The Agent now automatically suppresses benign security events if they have already been reported for a particular container image.

• Updating process agent discovery configuration to include a Data Scrubber for obfuscating sensitive information such as passwords, API keys, or tokens.

• Add support for pinging network devices in the SNMP integration.

• [oracle] Add oracle.locks.transaction_duration metric.

• APM: Add support for Single Step Instrumentation remote configuration

• Headless agent installation support on macOS 14 and later

.. _Release Notes_7.52.0_Enhancement Notes:

Enhancement Notes

• [DBM] Increase the DBM dbm-metrics-intake endpoint's defaultInputChanSize value to 500.

• Add debug level logs when files are evicted from registry.json
  after their TTL expires.

• Add the instance ID returned by the IMDSv2 metadata endpoint to the list of EC2 host aliases.

• This change adds journald permissions to the flare in the
  logs_file_permissions.log file, in the form of either the
  journald directory or a specific file (if specified by the
  Agent journald configuration).

• The Logs Agent now creates a file in the flare, called
  logs_file_permissions.log, which lists every file and
  that file's permissions that the Logs Agent can detect.

• Add the SBOM check to the output of the Agent status command and the Agent flare.

• Add the Software Bill of Materials (SBOM) for container images to the output of the flare command.

• Add repo_digest to containerd ContainerImage to remove duplicate images in container images UI.

• Agents are now built with Go 1.21.7.

• Agents are now built with Go 1.21.8.

• CWS: Improved coverage on platforms with no eBPF support.

• CWS: Send context of variables in events.

• Add DD_APM_DEBUGGER_DIAGNOSTICS_DD_URL, DD_APM_DEBUGGER_DIAGNOSTICS_API_KEY,
  and DD_APM_DEBUGGER_DIAGNOSTICS_ADDITIONAL_ENDPOINTS to allow sending Live
  Debugger / Dynamic Instrumentation diagnostic data to multiple intakes.

• Added config that allows user to toggle on and off the collection of zombie processes in the Process Agent.

• [oracle] Add ddagenthostname tag.

• [oracle]: Add oracle.tablespace.maxsize metric.

• OTLP ingest supports stable Java runtime metrics introduced in opentelemetry-java-instrumentation v2.0.0.
  OTLP ingest supports Kafka metrics mapping. This allows users of the JMX Receiver/JMX Metrics Gatherer and Kafka metrics receiver to have access to the OOTB Kafka Dashboard.

• Modified the process check to populate process with the newly created field "ProcessContext"

• Rename the kubelet_core check to kubelet and change the metrics
  prefix from kubernetes_core to kubernetes so that it can replace
  the Python kubelet check.

• APM: Adds msgp_short_bytes reason for trace payloads dropped to distinguish them from EOF errors.

• When getting resource tags from an ECS task with zero containers, print a warn log instead of error log.

.. _Release Notes_7.52.0_Deprecation Notes:

Deprecation Notes

• Removal of the pod check from the process agent. The current check will run from the core agent.

• This release drops support for Red Hat Enterprise Linux 6 and its derivatives.

• [oracle] Deprecate the configuration parameter instant_client. Replacing it with oracle_client.

• Removed the system-probe configuration value data_streams_config.enabled and replaced it with service_monitoring_config.enable_kafka_monitoring.
  This also implies that the DsmEnabled field in the AgentConfiguration proto will consistently be set to false.

.. _Release Notes_7.52.0_Bug Fixes:

Bug Fixes

• Upgrade dependencies for systemd core check. This silences excessive warning logs on systemd v252.

• oracle: Fix wrong tablespace metrics.

• APM: Stop dropping incoming OTel payloads when the processing channel is full
  and eliminate OOM issues in the trace agent and collector component in high
  load scenarios, making the OTel pipeline more reliable.

• Fix dogstatsd-capture. Message PID was not set after the 7.50 release.

• Fix a memory exception where the flare controller tries to
  stat a file that doesn't exist.

• Fleet Automation filters in the Datadog UI now accurately reflect which products are enabled when deployed with the official DataDog Helm chart on Kubernetes.

• Corrected a problem where the ignore_autodiscovery_tags parameter was not functioning correctly with pod
  annotations or autodiscovery version 2 (adv2) annotations. This fix ensures that when this parameter is set
  to true, autodiscovery tags are ignored as intended.
  Example:

  ad.datadoghq.com/redis.checks: |
    {
      "redisdb": {
        "ignore_autodiscovery_tags": true,
        "instances": [
          {
            "host": "%%host%%",
            "port": "6379"
          }
        ]
      }
    }

  Moving forward, configurations that attempt to use hybrid setups—combining adv2 for check specification
  while also employing adv1 for ignore_autodiscovery_tags—are no longer supported by default.
  Users should set the configuration parameter cluster_checks.support_hybrid_ignore_ad_tags to true
  to enable this behavior.

• [oracle]: Add support for more Asian character sets.

• Prevention of OOMs when collecting a large number of zombie processes.

• Fixed race conditions caused by concurrent execution of etw.StartEtw()
  and etw.StopEtw() functions which may concurrently access and modify a
  global map.

• Fix recent PR #​22664 which in turn fixes a race condition in the ETW package.
  The previous PR introduced a minor error addressed in this PR.

• [oracle] Add resource_manager configuration to conf.yaml.example.

• [oracle] Fix multi-tagging bug.

• Fixes a bug in OTLP ingest where empty histograms were not being sent to the backend in the distributions mode. Empty histograms are now mapped as if they had a single (min, max) bucket.

• Scrub authentication bearer token of any size, even invalid, from integration configuration (when being printed
  through the checksconfig CLI command or other).

• Empty UDS payloads no longer cause the DogStatsD server to close the socket.

.. _Release Notes_7.52.0_Other Notes:

Other Notes

• The version of Python required for tooling in README matches that which the CI uses.

.. _Release Notes_7.51.1:

v7.51.1

Compare Source

======

.. _Release Notes_7.51.1_Prelude:

Prelude

Release on: 2024-02-29

• Please refer to the 7.51.1 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7511>_ for the list of changes on the Core Checks

.. _Release Notes_7.51.1_New Features:

New Features

• Add the chdir event type to CWS.

.. _Release Notes_7.51.1_Security Notes:

Security Notes

• Bump embedded Python version to 3.11.8 to address CVE-2023-5678 on Windows.

.. _Release Notes_7.51.1_Bug Fixes:

Bug Fixes

• Fix a crash in the win32_event_log check that occurs when processing an event that has
  a missing publisher and no EventData.

.. _Release Notes_7.51.0:

v7.51.0

Compare Source

======

.. _Release Notes_7.51.0_Prelude:

Prelude

Release on: 2024-02-19

• Please refer to the 7.51.0 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7510>_ for the list of changes on the Core Checks

.. _Release Notes_7.51.0_Upgrade Notes:

Upgrade Notes

• The orchestrator check is moving from the Process Agent to the Core Agent. Any orchestrator configuration set on the Process Agent will need to be moved to the Core Agent. No other changes are required. If you need to go back to the old check, you can do so temporarily by manually setting the environment variable DD_ORCHESTRATOR_EXPLORER_RUN_ON_NODE_AGENT to false. The Process Agent pod check will be deprecated in the following release.

• Upgrade the Python version from 3.9 to 3.11.

.. _Release Notes_7.51.0_New Features:

New Features

• Add support for ARM64 SLES flavor of datadog-agent

• Add support for multiple users when listening for SNMP traps.

• Add check_delay metric in Agent telemetry

• Add an ETW component for ETW tracing.

• Add an ETW APM tracer component to forward .Net ETW events to the Tracer Agent.

• DBM: Add configuration options to SQL obfuscator to customize the normalization of SQL statements:

  • KeepTrailingSemicolon - disable removing trailing semicolon. This option is only valid when ObfuscationMode is obfuscate_and_normalize.
  • KeepIdentifierQuotation - disable removing quotation marks around identifiers. This option is only valid when ObfuscationMode is obfuscate_and_normalize.

• CWS: [BETA] early support based on ptrace for platforms with no eBPF support.
  Only processes and files are currently supported.

• Add msodbcsql18 linux dependency needed for SQL Server to run in Docker Agent.

• Add timestamps to the logs HTTP client

• Add support for Oracle Active Data Guard.

• Re-enable Aerospike in SUSE packages.

.. _Release Notes_7.51.0_Enhancement Notes:

Enhancement Notes

• Updated the ntp check to support the default location of chrony.conf
  on Ubuntu (/etc/chrony/chrony.conf).

• Agents are now built with Go 1.21.5.

• CWS: Reloading the datadog-agent-sysprobe systemd service now reloads the runtime security policies.

• CWS: Added ssdeep file hashing algorithm support.

• USM will report the actual status code of the HTTP traffic, instead of reporting
  only the status code family (2xx, 3xx, etc.).

• Improved performance of the activity sampling query on RDS and Oracle Cloud databases.

• OTLP ingest log timestamps (i.e. '@​timestamp') now include milliseconds.

• Always report the following telemetry metrics about the retry queue capacity:

  • datadog.agent.retry_queue_duration.capacity_secs
  • datadog.agent.retry_queue_duration.bytes_per_sec
  • datadog.agent.retry_queue_duration.capacity_bytes

• Support container metrics for kata containers using containerd.

• System Probe can now expose its healthcheck on a dedicated HTTP port.
  The Kubernetes daemonset uses this by default on port 5558.

.. _Release Notes_7.51.0_Deprecation Notes:

Deprecation Notes

• The config value ipc_address is deprecated in favor of cmd_host.

• service_monitoring_config.process_service_inference.enabled is deprecated and replaced by system_probe_config.process_service_inference.enabled
service_monitoring_config.process_service_inference.use_windows_service_name is deprecated and replaced by system_probe_config.process_service_inference.use_windows_service_name

• Removes freetds and msodbcsql18 dependencies for py2.

• Removes postgresql dependency after upgrading psycopg2 to v2.9 in integrations-core.
  psycopg2 now comes with pre-built wheel for arm architecture.

• An error will now be logged if replace tags are used to change the Agent
  "env", since this could have negative side effects. At this time, an error
  is logged, but future versions may explicitly disallow this to avoid bugs.
  See https://docs.datadoghq.com/getting_started/tracing/#environment-name
  for instructions on settihttps://github.com/DataDog/datadog-agent/issues/21253g-agent/issues/21253 for more details
  about this issue.

.. _Release Notes_7.51.0_Bug Fixes:

Bug Fixes

• CWS/CSPM: Fixes the hostname value attached to CWS and CSPM events, which in rare cases
  the security agent computed incorrectly.

• Fix file_handle core check on Darwin by using sysctl system call.

• Fix spikes for bandwidth usage metric when interface speed is auto-adjusted.

• Fixes Agent startup script when enabling OOM Kill and TCP Queue Length checks to prevent crashes when restarting the container.

• Fix a spewing error message ("DCA Client not initialized by main provider, cannot post heartbeat") in the cluster check runner log during CLC initialization.

• Fixed Logs Agent additional endpoints to respect their
  logs_no_ssl setting.

• [DBM] Add Oracle broken connection handling on Windows

• Fix indentation in conf.yaml.example.

• Bug fix for empty database names in query samples.

• Bug fix for the Korean character set for Windows.

• Fixing the issue with a Korean character set for Windows.

• Fix missing sysmetrics, such as shared pool and library cache.

• Bug fix for missing tags.

• Fixed obfuscation error false positive when the access or filter predicates are empty.

• Fix resource manager metrics collection bugs.

• Pause containers from the Rancher image-mirror repository (rancher/mirrored-pause.*) are now excluded by default for containers and metrics collection.

• Error messages from Go checks are now shown on the Agent GUI status page
  instead of UNKNOWN ERROR.

.. _Release Notes_7.51.0_Other Notes:

Other Notes

• Update s6-overlay version used in Datadog Agent container images to v2.2.0.3

• Added a warning when logs_no_ssl is set and dd_url
  contains an https prefix. logs_no_ssl will take precedence
  over the prefix in a future version.

.. _Release Notes_7.50.3:

DataDog/integrations-core (DataDog/integrations-core)

v7.52.0

Compare Source

v7.51.1

Compare Source

v7.51.0

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.