[Snyk] Security upgrade dd-trace from 4.47.1 to 5.0.0

[BinamB]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	858/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 9.3	Remote Code Execution (RCE) SNYK-JS-JSONPATHPLUS-7945884	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: dd-trace

The new version differs by 250 commits.

• e73acb4 v5.0.0
• e6c3982 update CODEOWNERS
• bef6932 update release yaml files for v5 release (#3954)
• 38be5b1 [ci-visibility] Fix logic to add unskippable and forced to run tags in `jest` (#3953)
• f9f3d0e Update Next.js tests to work with Node 18 (#3935)
• 004590f [ci-visibility] Agentless telemetry for CI Visibility (#3934)
• 3ce940d Handle google-cloud-pubsub subscription closing (#2716)
• ca7c155 Fix aws-sdk tests by making withNamingSchema handle multiple failures properly (#3943)
• 937e1dc Code hotspots and endpoint collection don't work on Windows. (#3944)
• 712ea1f Fix hapi tests (#3942)
• d50c9d9 Pin `limiter` version to 1.1.5 (#3938)
• aa7ca3b Code hotspots and endpoint collection now enabled by default (#3940)
• 5c019ea [profiling] Add experimental CPU profiler (#3895)
• cfc2436 bump up iitm version (#3929)
• 0f3b143 Fix couchbase segfault. On >=3.2.0 <3.2.2 it would segfault on cluster.close() (#3926)
• 9e5b158 PROF-8850: Add diagnostic to flaky test (#3927)
• f4d3218 drop support for node 16 in preparation for v5 release (#3905)
• c0e0b2b Implement extended sampling (#3904)
• 8344baf Fix ts errors (#3912)
• e2df7ec speed up test by stubbing (#3923)
• e8df0fa Parametric tests: Remove obsolete CI code (#3922)
• 7bb99d1 Add `process_id` tag to profiles (#3911)
• 3bcdfbc Adding Pino Integration-test (#2002)
• e84c8e4 Update actions versions (#3907)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Remote Code Execution (RCE)

[github-actions]

Please find the ci env pod logs here

[mfshao]

no longer needed