[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
Datadog.Trace.Bundle (source)	3.45.0 → 3.56.0

---

Release Notes

DataDog/dd-trace-dotnet (Datadog.Trace.Bundle)

v3.56.0: 3.56.0

Summary

• [Debugger] Fix native stack buffer overflow on large type signatures (#​9377)
• [ASP.NET MVC] Stop child actions from naming the request (#​9346)
• [Profiler] Take the heap snapshot memory threshold into account (#​9399)

Changes

Tracer

• [Debugger] Fix stale local variable names from PDB lookup (#​9389)
• [Tracer] Check only new methods in Desktop CLR NGen inliner replays (#​9412)
• [Tracer] Restore OTLP adoption markers and fix smoke snapshots (#​9363)
• [ASP.NET MVC] Stop child actions from naming the request (#​9346)
• feat(telemetry): report Quartz and Azure Service Bus spans (#​9183)
• feat(otel): Enable the OTel operator init container build (#​9368)
• Expose resolved OpenTelemetry configuration in startup logs (#​9376)

CI Visibility

• [Test Optimization] Fix MSTest 4.4.0 discovery and native retries (#​9192)
• [CI] Bump DatadogTestCollector and DatadogTestLogger to 0.0.60 (#​9417)

ASM

• perf(tracer): reduce query-string matching cost (#​9374)
• perf(tracer): use lookbehind for JWT prefix in default query-string regex (#​9405)
• Attempt to work around runtime flake for ASM (#​8884)

Continuous Profiler

• Mark CheckCpuSamples as Flaky (#​9392)
• Mark CheckTimestampAsLabel as Flaky (#​9393)
• [Profiler] Take the heap snapshot memory threshold into account (#​9399)

Debugger

• [Debugger] Fix native stack buffer overflow on large type signatures (#​9377)

Serverless

• [Serverless] Remove serverless-azure-and-gcp and serverless-aws from CODEOWNERS (#​9354)

Feature Flags

• [Feature Flags] Add agentless EVP fallback transport (#​9235)
• [Feature Flags] experimental synchronous provider APIs (#​9334)
• [Feature Flags] Bind discovery results to the Agent endpoint (#​9352)
• [Feature Flags] Bound exposure shutdown and own the existing EVP sender (#​9353)

Fixes

• Defer Desktop CLR NGen inliner enumeration to CLR callbacks (#​9370)
• fix(otel): emit stable deployment environment in logs (#​9371)
• Fix false positives in LLM validation benchmarks (#​9357)
• Fix hotfix branch creation from release tags (#​9390)
• Fix regex test on .NET 5 (#​9391)
• Fix flaky exposure shutdown flush test (#​9396)

Build / Test

• Update to .NET 11 RC2 (#​9404)
• [Test Package Versions Bump] Updating package versions (#​9290)
• [Remoting] Fix bug when only a single server formatter is registered (#​9333)
• Local Agentic Code Review Scripts (#​9338)
• Ignore stale legacy benchmark results (#​9349)
• Run smoke tests on PRs when the likely have changed (#​9365)
• Use base APM SDK capabilities team in CODEOWNERS (#​9369)
• Update log4net to 3.5.0 and fix log correlation tests (#​9378)
• Attempt to correct tracer/ CODEOWNERS (#​9379)
• test: snapshot mock agent telemetry before casting to avoid race (#​9381)
• Removes LLM related skills and settings that are unused or invalid (#​9386)
• Make exposure shutdown flush test deterministic (#​9401)
• Pin Windows VMs to v1.16.0 to fix .NET 11 RC2 requirements (#​9409)
• [Tracer] Add .NET Framework regression tests for the NGen inliner crash (#​9413)
• Run Windows microbenchmarks on processor group zero (#​9350)

Miscellaneous

• ci: update one-pipeline version (#​9358)
• ci: update one-pipeline version (#​9375)
• ci: update one-pipeline version (#​9395)
• ci: update one-pipeline version (#​9416)

Changes since 3.55.2

v3.55.2: 3.55.2

Summary

Fixes a potential crash on startup for .NET Framework introduced in 3.55.0 (also present in 3.55.1)

Changes

• Defer Desktop CLR NGen inliner enumeration to CLR callbacks (#​9370)

Changes since 3.55.1

v3.55.1: 3.55.1

[!WARNING]
Version 3.55.0-3.55.1 include a bug which can lead to application crashes on .NET Framework. If you are affected, please update your library to version 3.55.2 or above.

Summary

Improves request processing for long URLs with query strings.

Changes

Tracer

• Reduce the cost of default query-string matching (#​9384).

Changes since 3.55.0

v3.55.0: 3.55.0

[!WARNING]
Version 3.55.0-3.55.1 include a bug which can lead to application crashes on .NET Framework. If you are affected, please update your library to version 3.55.2 or above.

Summary

• [Tracer] support OTel thread context propagation on Linux (#​9147)
• [Tracer] Add Azure Durable Functions tracing (#​9217)
• Fix cross-language DSM pathway extraction for AWS messages (#​9289)

Changes

Tracer

• fix(openfeature): accept empty string as valid targeting key (#​8384)
• [Tracer] support OTel thread context propagation on Linux (#​9147)
• [Tracer] Add Azure Durable Functions tracing (#​9217)
• Copy ASP.NET Core activity tags we haven't set, instead of filtering them (#​9297)
• Initial runtime-async support for .NET 11 (#​9305)
• Fix various minor issues identified in .NET 11 update (#​9280)
• Enforce ot tracestate value limit (#​9324)
• feat(otel): Emit OpenTelemetry HTTP semantic conventions on HTTP server spans (ASP.NET) (#​9027)
• feat(otel): Support the required startup hook for opentelemetry-operator installation (#​9314)
• [Docs] Keep customer data out of pull requests (#​9356)

CI Visibility

• [CI Visibility] Secure reduced tracer home cache (#​8804)
• [CI Visibility] Restore request configurations in skippable responses (#​9339)

ASM

• [AppSec] Report the WAF version when the WAF fails to initialize (#​9308)
• [AppSec] Disable instrumentation telemetry in managed unit tests (#​9309)

Continuous Profiler

• [Profiler] Log the ARM64 gate reason when the Continuous Profiler is disabled (#​9258)

Debugger

• [Debugger] Disable Exception Replay when FIPS blocks MD5 (#​9176)
• [Tracer] Synchronize ReJIT state access (#​9254)
• [Tracer] Keep ReJIT requests bound to module generations (#​9255)
• [Tracer] Harden ReJIT worker failures (#​9256)
• [Debugger] Coordinate snapshot sampling per trace (#​9266)
• [Debugger] Emit truncated:true when snapshot strings are clipped (#​9272)
• [Debugger] Box value-type keys when indexing IDictionary (#​9274)
• [Tracer] Forget processed NGen inliner modules when they unload (#​9292)
• [Debugger] Hash Exception Replay exceptions with FNV-1a instead of MD5 (#​9328)

Serverless

• [Serverless] Expand apm-serverless CODEOWNERS coverage (#​9326)

Fixes

• fix(otlp): emit non-overlapping trace metric windows (#​9159)
• [FeatureFlags] Return the caller's default value on every provider error (#​9299)
• [FeatureFlags] Stop serving flags removed from a modified Remote Configuration file (#​9304)

Miscellaneous

• Use StringUtil.ToLowerInvariant()/StringUtil.ToUpperInvariant() on .NET Framework (#​9180)
• Declare FLAKY_BENCHMARKS_REGEX and document benchmarks CI (#​9306)
• ci: update one-pipeline to 1.5.4 (#​9312)
• [Propagators] OTLP trace export carries ot.th/rv[APMAPI-2170] (#​9062)

Build / Test

• Rework CODEOWNERS tests to try and aim for exclusive ownership (#​9155)
• Isolate Git changes in impacted tests (#​9195)
• Disable Continuous Profiler in legacy security policy smoke test (#​9197)
• [Build] Disable libunwind clone progress output (#​9198)
• Produce snupkg for feature flags NuGet package (#​9200)
• Add team freeze guard workflow (#​9220)
• Prevent duplicate integration test runs and filter overlaps (#​9269)
• chore(codeowners): give FFE sole ownership of product paths (#​9273)
• [Test Package Versions Bump] Updating package versions (#​9275)
• [CI] Bump llm-validation to v0.1.4 (signed image) (#​9281)
• Upload microbenchmark results to BP_EXTERNAL_S3_URL (#​9282)
• Update retry on infra failures for benchmarks (#​9283)
• Change ownership of timeit benchmarks (#​9284)
• Fix token timing out (#​9293)
• Build updates in preparation for .NET 11 (#​9294)
• Update version of ClrMD used by dd-dotnet to support .NET 11 (#​9295)
• .NET 11 test/build prerequisites (#​9302)
• [Tests] Wait for app-closing telemetry before exiting func (#​9315)
• Update to building with .NET 11 RC1 (#​9317)
• Remove ASP.NET Core modules from classic IIS test configurations (#​9318)
• Isolate impacted-test Git caches (#​9319)
• Isolate mocked CI-provider tests (#​9320)
• Re-enable .NET 11 benchmarks (#​9321)
• Extend Azure artifact polling timeout (#​9330)
• Explicitly forward BP_EXTERNAL_S3_URL on benchmark triggers (#​9337)
• Bump the gh-actions-packages group across 2 directories with 7 updates (#​9348)

Data Streams Monitoring

• Fix cross-language DSM pathway extraction for AWS messages (#​9289)

Changes since 3.54.0

v3.54.0: 3.54.0

Summary

• [Propagators] Add OpenTelemetry consistent probability sampling (#​9178)
• [CI Visibility] Add support for MSTest 4.4.0 (#​9189)
• [CI Visibility] Add xUnit v4 support (#​9162)

Changes

Tracer

• [DuckTyping] Generate proxies in target AssemblyLoadContext (#​9167)
• [DuckTyping] Prevent memory corruption for by-ref value types (#​9221)
• [DuckTyping] Reject incompatible open generic method signatures (#​9226)
• [DuckTyping] Work around concurrent ExceptionDispatchInfo runtime crash (#​9209)
• [FeatureFlags] Remove the manual (non-OpenFeature) Feature Flags API (#​9260)
• [tracer] Fix heap corruption (#​9199)
• [Propagators] Add OpenTelemetry consistent probability sampling (#​9178)
• [ASP.NET MVC] Handle malformed request URLs when creating scopes (#​9212)
• Support stable OTel deployment environment attribute (#​9150)
• feat(feature-flags): wire source-agnostic activation and OpenFeature InitializeAsync (#​9044)
• [FeatureFlags] Replay the configuration handler on registration and bump the OpenFeature package (#​9264)

CI Visibility

• [CI Visibility] Add xUnit v4 support (#​9162)
• [CI Visibility] Fix TIA missing line coverage response field (#​9165)
• [CI Visibility] Add support for MSTest 4.4.0 (#​9189)
• [CI Visibility] Preserve oversized test parameters for ITR (#​9214)
• [CI Visibility] Fix quarantine with automatic retries across test frameworks (#​9229)
• [CI Visibility] Stabilize test session working directory fingerprint (#​9243)
• [CI Visibility] Fix custom MSTest attribute skipping across MSTest 2-4 (#​9271)

ASM

• [AppSec] Send the real response status to the WAF and stop resending the request addresses (#​9082)
• [AppSec] Emit rasp.error and rasp.rule.skipped telemetry (#​9090)
• [IAST] Guard stack walks against stack exhaustion (#​9227)

Continuous Profiler

• [Profiler] Fix Unknown-Method bug (Arm64 only) (#​9232)
• [Profiler] Fix Unknown-Method part2 (#​9244)

Debugger

• Support GitHub/GitLab/Azure DevOps/Bitbucket Server SourceLink variants (#​8505)
• [Debugger] Skip nested byref-like locals after type-forward resolution (#​9205)
• [Debugger] Fail closed when async Exception Replay cannot clone SetException args (#​9225)
• [Debugger] Guard async catch-entry instrumentation (#​9242)

Serverless

• [Serverless] Bump Datadog.Serverless.Compat to 1.9.0 (#​9248)

Data Streams Monitoring

• Add additional guards to Kafka cluster ID discovery (#​9261)

Build / Test

• Drop V1 schema rows in pairwise mode (#​8536)
• Add [Trait("Area", "CiVisibility")] to CI Vis tests, and run in dedicated jobs only when required (#​9169)
• Fix RunNativeLoaderTestsWindows artifact name (#​9170)
• Split ARM64 integration tests by area (#​9172)
• [Test Package Versions Bump] Updating package versions (#​9187)
• [Smoke Test Docker Image Bump] Updating docker image tags (#​9188)
• Build managed samples as AnyCPU (#​9193)
• Ensure we push the correct symbol packages as part of a release (#​9196)
• [CI] Skip Aerospike tests on transient Docker failures (#​9202)
• Allow choosing which system test branch to run (#​9208)
• [Test Package Versions Bump] Updating package versions (#​9216)
• Remove deleted projects from OSX and Security solution filters (#​9218)
• [Smoke Test Docker Image Bump] Updating docker image tags (#​9224)
• [CI] bump llm-validation-platform to v0.1.3 (#​9230)
• [CI] Bump LLM validation platform to v0.1.2 (#​9177)
• [Smoke Test Docker Image Bump] Updating docker image tags (#​9241)
• Skip ExceptionReplayRewrite_DoesNotThrowInvalidProgramException (#​9251)
• Stop hardcoding the sample version in XUnit V3_X4 tests (#​9259)
• [Smoke Test Docker Image Bump] Updating docker image tags (#​9263)
• ci: update one-pipeline to 1.5.1 (#​9257)
• ci: update one-pipeline to 1.5.3 (#​9268)

Miscellaneous

• Add non-allocating ToLowerInvariant() / ToUpperInvariant() for .NET Framework (#​9173)
• [Native] Downgrade high-frequency ReJIT logs to debug (#​9215)

Changes since 3.53.0

v3.53.0: 3.53.0

Summary

• [Tracing] Improve memory_load metric in .NET 10
• [Tracing] Reduce buffer contention when writing spans
• [CI Visibility] Improve CODEOWNERS parsing
• [Continuous Profiling] Bug fixes and performance improvements
• [Feature Flagging] Send split serial ids on exposure events

Changes

Tracer

• Avoid unobserved tasks for synchronous delegate exceptions (#​9071)
• Reduce locking in AgentWriter to avoid contention (#​9107)
• Expose the TrailerSize of an ISpanBufferSerializer (#​9115)
• Fix lock-contention causing trace to be "stranded" (#​9120)
• Improve GcMemoryLoadCalculator by using GC.GetConfigurationVariables() where possible (#​9146)

CI Visibility

• [CI Visibility] Refactor CODEOWNERS parsing and source ownership resolution (#​9099)
• [CI Visibility] Fix coverage rewrites with shared framework dependencies (#​9102)
• [CI Visibility] Keep CODEOWNERS matches inside repository (#​9127)
• [CI Visibility] Stabilize CODEOWNERS concurrency test (#​9143)
• [CI Visibility] Resolve CODEOWNERS from matching local checkout (#​9148)

Continuous Profiler

• [Profiler] ManagedCodeCache updates synchronously (#​8840)
• [Profiler] Fix flaky tests caused by failingtimer_create (#​8988)
• [Profiler] Fix start/stop crash at shutdown (#​9037)
• [Profiler] Fix crashes at shutdown (#​9050)
• [Profiler] Measure and reduce GC profiling impact (#​9119)
• [Profiler] Fix flacky tests (#​9126)
• [Profiler] Fix bug in FrameStore (#​9140)

Feature Flags and Experimentation

• [Feature Flags] Send the split serial id on exposure events (#​9088)
• feat(feature-flags): add agentless configuration keys, settings, and endpoint derivation (#​9040)
• feat(feature-flags): add UFC parser and agentless HTTP poller (#​9042)
• feat(openfeature): support arbitrary semver parts (#​9122)

Build / Test

• Migrate remaining integration tests to CombinatorialOrPairwiseData (#​8528)
• Move secrets to be protected environment secrets (#​8865)
• Try to make it so that CODEOWNERs triggers tests (#​9092)
• Split system-test docker image creation to work in both protected and unprotected environments (#​9094)
• [Test Package Versions Bump] Updating package versions (#​9100)
• Consolidate and fix bugs in GitLab "download from Azure" scripts (#​9103)
• Don't need to download and sign when pushing a tag (#​9105)
• Mark DSM TransportsWorkCorrectly as flaky (#​9116)
• Mark DSM ContextPropagation as flaky (#​9117)
• [Test Package Versions Bump] Updating package versions (#​9124)
• Bump test logger to latest (to try to fix codeowners) (#​9128)
• Add new Random() to the banned API list, to discourage using those APIs (#​9129)
• Add SDK capabilities and LP as owners in addition to tracing-dotnet (#​9130)
• Bump SLO for throughput tests (#​9131)
• [Smoke Test Docker Image Bump] Updating docker image tags (#​9134)
• Add many timeouts and retries to build stages in Azure DevOps (#​9141)
• Move CI uploads to new subscription (#​9142)
• Refine listed non-IDM tests to single owner (#​9149)
• [CI Visibility] Bump Datadog test packages to 0.0.59 (#​9151)
• [Test Package Versions Bump] Updating package versions (#​9152)
• [Smoke Test Docker Image Bump] Updating docker image tags (#​9153)
• Increase profiler integration test timeout (#​9158)
• Bump the gh-actions-packages group across 2 directories with 4 updates (#​9161)
• [Test Package Versions Bump] Updating package versions (#​9163)
• Don't run high-concurrency tests in parallel with other tests (#​9166)
• Fix release creation (#​9190)
• Fix broken unit tests in GcMemoryLoadCalculatorTests (#​9101)

Miscellaneous

• [Propagators] Add OpenTelemetry consistent probability sampling (#​8983)
• Revert "[Propagators] Add OpenTelemetry consistent probability sampling" (#​9171)
• feat(otel): Emit OpenTelemetry HTTP semantic conventions on HTTP server spans (ASP.NET Core) (#​8995)
• [Propagators] Generalize tracestate parsing (#​9000)
• Remove exception throwing from CanCreate() paths in DuckTyping (#​9005)
• Revert "[Propagators] Add OpenTelemetry consistent probability sampling" (#​9171)

Changes since 3.52.0

v3.52.0: 3.52.0

Summary

• [Tracing] Reduce dropped traces during forced flush
• [Tracing] Improve runtime metrics memory_load calculation
• [ASM[ Various bug fixes and improvements
• [Code Origins] Add code-origin support for ASP.NET
• [Dynamic Instrumentation] Add time budgets for probe expression evaluation

Changes

Tracer

• Change AgentWriter to only flush from a single task (#​9007)
• AgentWriter cleanup (#​9010)
• AgentWriter testing cleanup (#​9011)
• Fix minor AgentWriter bugs (#​9013)
• Ensure AgentWriter serialization always happens on the same thread (#​9014)
• Avoid flinalizer crash on .NET Framework with FreeConsole/AllocConsole/AttachConsole (#​9079)
• Partially fix runtime metrics memory_load calculation (#​9095)

ASM

• [AAP] Open module metadata for writing only when we rewrite the module (#​8991)
• [AppSec] Free the WAF diagnostics of every config applied to the builder (#​9056)
• [AppSec] Dispose the WAF context when a non-web local root span closes (#​9057)
• [AppSec] Emit appsec.waf.error telemetry (#​9075)
• [IAST] Fix entry loss in DefaultTaintedMap under concurrency (#​9041)

Continuous Profiler

• [Profiler] Improve reference chain (#​8966)
• [Profiler] Fix flakiness due to Libraries Info Cache (#​8997)

Debugger

• [Code Origin] Add code-origin support for ASP.NET MVC4/5 and Web API2 (#​8739)
• [Debugger] Bound Dynamic Instrumentation probe expression evaluation with a time budget (#​8806)
• [Debugger] Add guardrail telemetry metrics (#​8998)
• [Debugger] Stabilize ClrMD heap assertions (#​8999)
• [Debugger] Harden ClrMD memory assertions (#​9035)
• [Dynamic Instrumentation] DEBUG-4669 change default string length limit from 1000 to 255 (#​9065)
• [Debugger] Record Dynamic Instrumentation guardrail metrics (#​9070)

Serverless

• [Serverless] Bump Datadog.Serverless.Compat to 1.8.0 (#​9034)

Miscellaneous

• feat(otel): Emit OpenTelemetry HTTP semantic convention on HTTP client spans (#​8975)
• [Configuration] Enforce sensitive configuration redaction at compile time (#​8976)
• Fix OTLP trace metrics attribute gaps in span stats serializer (#​8992)
• Update libdatadog-dotnet to 2.1.1 (#​9091)

Build / Test

• test(ffe): use canonical FFE fixtures (#​8616)
• Add the LLM Validation gate for AGENTS.md + the libdatadog-bump skill (#​8845)
• Add environment to subject in chainguard policies (#​8866)
• [Tracer] Fix integration test span wait thresholds (#​8970)
• Fix flake in RabbitMQ DSM snapshots across bucket boundaries (#​8972)
• [Smoke Test Docker Image Bump] Updating docker image tags (#​8990)
• chore(feature-flags): expand CODEOWNERS coverage (#​8994)
• Disable default launchSettings.json generation for the Fleet Installer integration tests (#​9004)
• Fix SnapshotSlicerTests verify prefix (#​9009)
• [Test Package Versions Bump] Updating package versions (#​9018)
• Fix typo: IncludeAllTestFrameworks in hotfix branches (#​9019)
• Fix native validation (#​9020)
• ci: update one-pipeline to 1.3.0 (#​9025)
• [Smoke Test Docker Image Bump] Updating docker image tags (#​9036)
• [Test Package Versions Bump] Updating package versions (#​9043)
• ci: update one-pipeline to 1.3.1 (#​9047)
• Pin LLM validation gate to v0.1.1 (#​9048)
• Update CODEOWNERS for integration tests ownership (#​9049)
• Fix flake in AgentWriterTests (#​9052)
• Fix flaky grpc tests (#​9058)
• [Smoke Test Docker Image Bump] Updating docker image tags (#​9061)
• Bump testing of Microsoft.Data.SQLite (#​9063)
• Fix flaky WhenSupported_WritesAStatsPointAfterDelay test (#​9074)
• [Test Package Versions Bump] Updating package versions (#​9076)
• Fix IisCheckTests concurrency (#​9077)
• [Tests] Retry non-application dotnet commands after SIGSEGV (#​9080)
• LLM validation platform moved to ddoghq (#​9081)
• Sign .nupkg contents (exe, dll etc, not package itself) (#​9083)
• Remove * CODEOWNERS and fixup a few stale rules (#​9084)
• [Smoke Test Docker Image Bump] Updating docker image tags (#​9085)
• ci: update one-pipeline to 1.4.0 (#​9087)
• Change /tracer/ to be unrooted tracer/ in CODEOWNERS (#​9089)

Changes since 3.51.1

v3.50.0: 3.50.0

Summary

• [Tracing] Add support for Serilog 4.4.0
• [Test Optimization] Add support for MSTest 4.3.0
• [ASM] Handle billing issues for standonly mode
• [Dynamic Instrumentation] Redact sensitive values in expression dumps

Changes

Tracer

• [OTLP] Removing the path with OtelTracesSpanMetricsEnabled (#​8921)
• Add support for Serilog 4.4.0 (#​8917)

CI Visibility

• fix(mstest): support ExecuteTestAsync in 4.3 (#​8934)

ASM

• [ASM] Set _dd.apm.enabled:0 on all spans (#​8923)
• [IAST] Exclude FSharp.* assemblies from dataflow (#​8905)
• [AppSec] Report agentic onboarding marker in configuration telemetry (RFC-1113) (#​8920)

Continuous Profiler

• [Profiler] Fix possible namepipe-related issues (#​8821)

Debugger

• [Debugger] Redact sensitive values in expression dumps (#​8879)

Build / Test

• Move TestOptimizationFeatureTests to TracerInstanceTestCollection (#​8880)
• [Debugger] Deflake instanceof assembly lookup tests (#​8885)
• chore(benchmarks): migrate benchmarking base image to :newest tag (#​8924)
• Mark CheckProfilesSentThroughNamedPipe Flaky (#​8932)
• Forward BP_EXTERNAL_S3_URL through benchmark CI triggers (#​8882)
• make sure parent env variables are not polluting the test env (#​8883)
• Attempt to fix more flake in System.Data.SqlClient (#​8899)
• Forward BP_EXTERNAL_S3_URL explicitly on benchmark triggers (#​8908)
• clean env variables in the correct place (#​8918)
• [Tests] Skip MySQL and Npgsql tests on database timeouts (#​8922)
• Exclude EndServerAsyncAdd from WCF legacy snapshots (#​8927)
• Fix Azure Service Bus sample restore (#​8933)

Changes since 3.49.0

v3.49.0: 3.49.0

Summary

• [OTLP] Add trace metrics via OTLP span metrics export (#​8826)
• Implement span-derived primary tags (AKA Additional tags) on Client-Side-Stats computation (#​8766)
• Implement support for DD_TAGS in Client-Side stats (#​8823)
• Add EventBridge DSM producer injection (#​8639)

Changes

Tracer

• Refactor GraphQL error response building and add pre-emptive truncation (#​8647)
• Implement span-derived primary tags (AKA Additional tags) on Client-Side-Stats computation (#​8766)
• Minor and performance updates for client-side-stats (#​8822)
• Implement support for DD_TAGS in Client-Side stats (#​8823)
• Apply cardinality limits to Client-Side stats implementation (#​8824)
• [OTLP] Add trace metrics via OTLP span metrics export (#​8826)
• Optimise OTEL metrics collection to reduce allocations (#​8834)
• Update TruncateUTF8 to never split a code point and improve perf (#​8836)
• [Debugger] Log over-length identifier redaction at Warning instead of Error (#​8853)
• Attempt to prevent crash on module unload (#​8854)

ASM

• [AAP] Add response headers even if no appsec event is present (#​8784)
• [Appsec] Add comments and refs to help out codex reviews when libddwaf is involved (#​8831)
• [BUG] Fix query obfuscation culture invariant (#​8850)

Continuous Profiler

• [Profiler] Fix live objects age (#​8842)
• Avoid excessive BuggyBits exceptions in endpoint tests (#​8881)

Debugger

• [Debugger] Define debugger safety guidance (#​8817)
• [Debugger] Prevent expression member access from invoking getters (#​8878)

Fixes

• Remove config_norm_rules.json tests (#​8844)

Miscellaneous

• Add dd-autoinstrumentation CLI with LLM-native structured output (#​8313)
• [Tests] Add Azure Functions Trigger tests for messaging SDKs (#​8698)
• Bump libdatadog to 2.0.0 (~v36.0.0) (#​8827)
• Add bounded cardinality limits for OTEL metrics collection (#​8846)
• update AAS setup guide (#​8848)

Data Streams Monitoring

• Add EventBridge DSM producer injection (#​8639)

Build / Test

• [Test] Handle dotnet/runtime#127957 BadImageFormatException fingerprint (#​8729)
• [CI] Add commit-only fallback when resolving serverless/single-step Azure build artifacts (#​8782)
• Flag new major versions of NuGets we don't support (#​8800)
• [Test Package Versions Bump] Updating package versions (#​8837)
• [Smoke Test Docker Image Bump] Updating docker image tags (#​8838)
• Remove legacy create_draft_release workflow (#​8839)
• Bump the gh-actions-packages group across 2 directories with 6 updates (#​8851)
• Update CI VMs to use latest images (#​8852)
• Remove unused kafka services from docker-compose.ym (#​8855)
• [Test Package Versions Bump] Updating package versions (#​8857)
• Move webhook url to protected environment (#​8863)
• [Test Package Versions Bump] Updating package versions (#​8864)
• Update CODEOWNERS to remove IDM from DSM and expand DSM ownership (#​8870)
• Fix ADO.NET dropped trace test flakes (#​8871)
• Make transaction early-flush writer test deterministic (#​8872)
• [Tests] Handle UTF-16 output from ProcDump v12.01 (#​8890)

Changes since 3.48.0

v3.48.0: 3.48.0

Summary

• [Tracing] Add support for IBMMQ 10.x.x
• [Client side stats] Fix incorrect statistic generation introduced in 3.43.0

Changes

Tracer

• Add support for IBM MQ 10.x.x (#​8835)
• Fix ObjectDisposedException race in DataStreamsWriter disposal (#​8758)

CI Visibility

• [CI Visibility] Avoid oversized coverage IPC messages (#​8832)

Debugger

• [Debugger] Guard static member capture (#​8814)
• [Debugger] Avoid resolving call tokens in exception replay IL scan (#​8815)

Fixes

• Remove sampling-based weighting in Client Side Stats (#​8828)

Build / Test

• Update to use dd-sts instead of long-lived credentials (#​8809)
• [Test Package Versions Bump] Updating package versions (#​8810)
• Fix GitHub Actions bugs and update documentation (#​8812)
• [CI] Add net10.0 to AWS Lambda test runtimes (#​8819)

Changes since 3.47.0

v3.47.0: 3.47.0

[!WARNING]
Version 3.43.0-3.47.0 includes a bug which can lead to incorrect trace stats. This only impacts customers that have explicitly enabled client side stats calculation. If you are affected, please update your library to version 3.48.0 or above.

Summary

• Add support for HotChocolate v16.x (#​8802)
• Add support for StackExchange.Redis v3.x (#​8808)
• Add support for Amazon.Lambda.RuntimeSupport v2.x (#​8797)

Changes

Tracer

• [DBM] Skip telemetry for DBM errors (#​8679)
• Trim experimental features flags (#​8789)
• Add support for HotChocolate v16.x (#​8802)
• Add support for StackExchange.Redis 3.x (#​8808)

CI Visibility

• [CI Visibility] Implement ITR code coverage backfill (#​8626)

Continuous Profiler

• [Profiler] Generate reference chain (#​8225)
• [Profiler] Add support for SMB/CIFS (#​8769)
• Fix flake in profiling demo app ([#​8793](https://redirect.github.com/D

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud