Bump datadog from 2.30.0 to 2.32.0

[dependabot]

Bumps datadog from 2.30.0 to 2.32.0.

Release notes

Sourced from datadog's releases.

2.32.0

Highlights

This release adds a Profiling metric for time spent waiting for the GVL, expands Live Debugger line probe coverage to third-party and Ruby standard library code loaded before the Datadog gem, and adds OpenFeature flag evaluation metrics through OpenTelemetry. We’ve also strengthened trace propagation with stricter parsing and size limits to improve reliability and standards compliance.

Added

• Open Feature: Add flag evaluation metrics (feature_flag.evaluations) via OpenTelemetry for OpenFeature provider. (#5599)
• Profiling: Add metric for total time spent waiting for the GVL. (#5569)
• Dynamic Instrumentation: Live Debugger line probes can now target third-party and Ruby standard library code loaded before datadog gem is loaded. (#5501)

Changed

• Profiling: Print failure info when native extension setup fails (#5657)
• Tracing: Add parsing limits to tracestate and traceparent propagation headers and remove whitespace around list members. (#5674)
• Tracing: Limit extracted baggage header parsing to 64 items and 8192 bytes. (#5672)

Fixed

• Tracing: Enforce x-datadog-tags propagation header size limits by byte size. (#5687)
• Tracing: Return empty baggage on invalid UTF-8 baggage extraction (#5689)

2.31.0

Highlights

This release significantly expands AppSec AI Guard capabilities, adding support for evaluating images in user prompts and tool outputs, and exposing Sensitive Data Scanner findings and tag probabilities in evaluation results.

A breaking change updates AIGuard.evaluate to raise errors by default when the service is configured to block (via Datadog UI), so be sure to opt out if you rely on the previous behavior.

We’ve also improved observability with enhanced configuration reporting in the Datadog UI, added a new extended heartbeat telemetry event for long‑running services, and richer Dynamic Instrumentation snapshots.

JRuby is now deprecated.

Added

• Core: Add app-extended-heartbeat telemetry event to resend full configuration every 24h for long-running services. (#5531)
• AI Guard: Add multi-model messages support to AI Guard, enabling text and image URL content parts in evaluation SDK (#5564)
• AI Guard: Add evaluation of images in user prompt and tool output for RubyLLM contrib. (#5573)
• AI Guard: Expose Sensitive Data Scanner findings in AI Guard results via AIGuard::Evaluation::Result#sds_findings. (#5579)
• AI Guard: Expose tag probabilities in AI Guard results via AIGuard::Evaluation::Result#tag_probabilities. (#5580)
• Tracing: Integrations: Add rails.application to the process tags. (#5468)
• Tracing: Report and display all configurations used by a service in the 'SDK & Agent Configurations' tab of a Ruby service page in Datadog UI (#5483)

Changed

• Core: Upgrade libdatadog dependency to version 30.0.0 (#5574)
• AI Guard: Breaking change: AIGuard.evaluate now defaults to allow_raise: true. Pass allow_raise: false to keep the previous non-raising behavior. (#5587)
• Dynamic Instrumentation: Report exception messages in method probe snapshots. Require the libdatadog_api C extension for Dynamic Instrumentation. (#5111)

Fixed

... (truncated)

Changelog

Sourced from datadog's changelog.

[2.32.0] - 2026-05-08

Added

• Open Feature: Add flag evaluation metrics (feature_flag.evaluations) via OpenTelemetry for OpenFeature provider. (#5599[])
• Profiling: Add metric for total time spent waiting for the GVL. (#5569[])
• Dynamic Instrumentation: Live Debugger line probes can now target third-party and Ruby standard library code loaded before datadog gem is loaded. (#5501[])

Changed

• Profiling: Print failure info when native extension setup fails (#5657[])
• Tracing: Add parsing limits to tracestate and traceparent propagation headers and remove whitespace around list members. (#5674[])
• Tracing: Limit extracted baggage header parsing to 64 items and 8192 bytes. (#5672[])

Fixed

• Tracing: Enforce x-datadog-tags propagation header size limits by byte size. (#5687[])
• Tracing: Return empty baggage on invalid UTF-8 baggage extraction (#5689[])

[2.31.0] - 2026-04-20

Added

• Core: Add app-extended-heartbeat telemetry event to resend full configuration every 24h for long-running services. (#5531[])
• AI Guard: Add multi-model messages support to AI Guard, enabling text and image URL content parts in evaluation SDK (#5564[])
• AI Guard: Add evaluation of images in user prompt and tool output for RubyLLM contrib. (#5573[])
• AI Guard: Expose Sensitive Data Scanner findings in AI Guard results via AIGuard::Evaluation::Result#sds_findings. (#5579[])
• AI Guard: Expose tag probabilities in AI Guard results via AIGuard::Evaluation::Result#tag_probabilities. (#5580[])
• Tracing: Integrations: Add rails.application to the process tags. (#5468[])
• Tracing: Report and display all configurations used by a service in the 'SDK & Agent Configurations' tab of a Ruby service page in Datadog UI (#5483[])

Changed

• Core: Upgrade libdatadog dependency to version 30.0.0 (#5574[])
• AI Guard: Breaking change: AIGuard.evaluate now defaults to allow_raise: true. Pass allow_raise: false to keep the previous non-raising behavior. (#5587[])
• Dynamic Instrumentation: Report exception messages in method probe snapshots. Require the libdatadog_api C extension for Dynamic Instrumentation. (#5111[])

Fixed

• Profiling: Detect when libdatadog version does not match expected version. (#5484[])
• Profiling: Log profiler initialization errors as warnings instead of raising them. (#5509[])
• Tracing: Fix NoMethodError in extract_trace_id! caused by extract_tags returning true. (#5499[])

Removed

• Core: Removed JRuby from the CI test matrix (#5594[])

Commits

• 3fe084a [🤖] Update System Tests: https://github.com/DataDog/dd-trace-rb/actions/runs/...
• 5b3d916 Tolerate invalid UTF-8 and malformed percent-encoding in baggage headers (#5689)
• ea9c451 Limit x-datadog-tags size by total bytes (#5687)
• eae7228 Add parsing limits to tracestate and traceparent (#5674)
• 3619470 Limit processing of large Baggage data (#5672)
• 65b7637 Add :webmock metadata helper for declarative WebMock enablement (#5685)
• 4833287 SymDB: Add Uploader and Transport stack (#5670)
• 050bfcb Fix flaky stack_recorder heap_sample_every test under ASAN (#5666)
• 2472c37 [🤖] Update Latest Dependency (#5602)
• 792130e Merge pull request #5688 from DataDog/appsec-62718-add-block-tag-to-rasp-tele...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.