Skip to content

v5.82.0 proposal#7136

Merged
nina9753 merged 72 commits intov5.xfrom
v5.82.0-proposal
Jan 15, 2026
Merged

v5.82.0 proposal#7136
nina9753 merged 72 commits intov5.xfrom
v5.82.0-proposal

Conversation

@dd-octo-sts
Copy link
Copy Markdown
Contributor

@dd-octo-sts dd-octo-sts Bot commented Dec 18, 2025

  • [e48b161098] - (SEMVER-MINOR) ws plugins will be disabled when config is set to false (Crystal Luc-Magloire) #7247
  • [145d85669f] - (SEMVER-PATCH) Add pubsub.delivery_duration_ms to push subscriptions (Nina Rei) #7205
  • [011ce7bbda] - (SEMVER-PATCH) chore: improve parallel mocha output (Ruben Bridgewater) #7207
  • [4f81eaf0e1] - (SEMVER-PATCH) refactor(test): improve type safety for spawned process URLs (Thomas Watson) #7219
  • [3e204e41db] - (SEMVER-PATCH) chore(ci) update one-pipeline (campaigner-prod[bot]) #7232
  • [851e7ecfb6] - (SEMVER-PATCH) fix(aap): Fix appsec test for sinon.js 21.0.1 (Carles Capell) #7233
  • [e996e29640] - (SEMVER-MINOR) feat: enable websocket tracing by default (Thomas Hunter II) #7223
  • [68dc67c699] - (SEMVER-MINOR) feat: process tags for client trace statistics (Thomas Hunter II) #7177
  • [4236d96d9d] - (SEMVER-PATCH) chore(ai): update ai-sdk tests for recent version (Sam Brenner) #7234
  • [05e6e6948d] - (SEMVER-PATCH) ci(llmobs): add evaluation metric assertion helper using node:assert (Sam Brenner) #7227
  • [64b7e4a323] - (SEMVER-PATCH) chore(deps): bump the gh-actions-packages group across 2 directories with 4 updates (dependabot[bot]) #7191
  • [61f0b12136] - (SEMVER-MINOR) Improve weak hash detection accuracy for node-preload (Carles Capell) #7230
  • [411eb57ed1] - (SEMVER-PATCH) fix(aap): Fix endpoint operation name for detected endpoints (Carles Capell) #7217
  • [27353de103] - (SEMVER-PATCH) fix(baggage): ignore legacy baggage keys if not a valid header (Ruben Bridgewater) #7214
  • [d27d8dfcb4] - (SEMVER-PATCH) chore: activate more eslint imports and jsdoc rules (Ruben Bridgewater) #7213
  • [31cdd5dbdf] - (SEMVER-PATCH) fix tracer metadata when optional dependencies are missing (Roch Devost) #7143
  • [0e7563dbe8] - (SEMVER-PATCH) chore: update nyc to latest version (Ruben Bridgewater) #7208
  • [4392fe12e1] - (SEMVER-MINOR) feat: default to zstd compression for profile uploads on Node.js 24+ (Attila Szegedi) #7172
  • [ecce729332] - (SEMVER-MINOR) feat(tracing): add bullmq integration and dsm support (William Conti) #7123
  • [d0cc613d84] - (SEMVER-PATCH) refactor(remote_config): move capability registration to feature modules (Thomas Watson) #7127
  • [23815c7464] - (SEMVER-PATCH) chore: add vscode settings to enforce eslint to be default editor (Ruben Bridgewater) #7199
  • [fb90c01d4b] - (SEMVER-MINOR) feat: add middleware enter/exit/finish instrumentations to hono (Ruben Bridgewater) #7198
  • [b642331007] - (SEMVER-PATCH) refactor: use RESOURCE_NAME constant for resource tag check (Ruben Bridgewater) #7197
  • [85edbfa48b] - (SEMVER-PATCH) refactor(remote_config): move appsec-specific logic to appsec folder (Thomas Watson) #7122
  • [22211b0826] - (SEMVER-PATCH) fix: use sync call and use proper span context for Azure's EventHubs (Jordan Storms) #6943
  • [9f567525c5] - (SEMVER-MINOR) feat(mongodb-core): enhance isHeartbeat to also consider isMaster commands (Thomas Hunter II) #7190
  • [7a2b4276f4] - (SEMVER-PATCH) docs: improve AGENTS.md (Thomas Watson) #7189
  • [a035e9bce7] - (SEMVER-PATCH) Revert "ci: update openldap image with maintained one (ci: update openldap image with maintained one #7181)" (Ruben Bridgewater) #7196
  • [7ae9abde61] - (SEMVER-PATCH) fix(llmobs): prevent config origin overwrite in enable() (Thomas Watson) #7183
  • [afbb00849c] - (SEMVER-PATCH) Executing automated changes (campaigner-prod[bot]) #7192
  • [06156ff7fb] - (SEMVER-MINOR) Changes for AI Integration Toolkit Project (William Conti) #7178
  • [a44e8f996e] - (SEMVER-PATCH) ci: update openldap image with maintained one (Ruben Bridgewater) #7181
  • [4a0249254d] - (SEMVER-PATCH) test: migrate tap to mocha (Ruben Bridgewater) #7135
  • [28b054c442] - (SEMVER-PATCH) refactor(remote-config): replace kPreUpdate with batch handler API (DEBUG-4402) (Thomas Watson) #7121
  • [11e33bf7b4] - (SEMVER-PATCH) Fix: updating remote config manager to send process_tags as an array (Crystal Luc-Magloire) #7180
  • [d401472cde] - (SEMVER-PATCH) docs: enhance JSDoc standards and document package structure (Thomas Watson) #7182
  • [2681a5e0a5] - (SEMVER-MINOR) feat(prisma): support output field and v7 support (Pablo Erhard) #7072
  • [5c8cd4f8bf] - (SEMVER-PATCH) ci: fix github action workflow versions and hash (Ruben Bridgewater) #7175
  • [0d62ee81e5] - (SEMVER-PATCH) fix: cleanup process tags code (Thomas Hunter II) #7176
  • [c715142f72] - (SEMVER-PATCH) Revert "fix amqplib upstream tests failing due to missing tag for release (add http request + test utilities #2…" (Ruben Bridgewater) #7174
  • [758d8c3846] - (SEMVER-MINOR) feat: process tags for telemetry, crash tracking, remote config (Thomas Hunter II) #7157
  • [5c1e8c5643] - (SEMVER-PATCH) chore(deps): bump qs from 6.14.0 to 6.14.1 (dependabot[bot]) #7169
  • [f92d86eefe] - (SEMVER-PATCH) chore(deps): bump the gh-actions-packages group across 5 directories with 3 updates (dependabot[bot]) #7167
  • [ae7685601c] - (SEMVER-PATCH) [Bug-fix] dependabot jobs failing from wrong claim (d) #7173
  • [39fb819309] - (SEMVER-PATCH) ci: delete cache forensics workflow (d) #7170
  • [a18c9715ed] - (SEMVER-MINOR) feat(llmobs): add prompt tracking telemetry tags for OpenAI (Alexandre Choura) #7106
  • [7ec09e7700] - (SEMVER-PATCH) fix: AWS Payload Tagging no longer breaks with bad JSONPath (TophrC-dd) #6358
  • [a5fcf17b17] - (SEMVER-MINOR) update appsec rules to 1.16.1 (simon-id) #7154
  • [93ec9f5447] - (SEMVER-MINOR) fix(service-bus) Fix synchronous shimming of tryAddMessage (Jordan Storms) #7098
  • [25b7924421] - (SEMVER-MINOR) feat(instrumentation): support light-my-request inject (Ruben Bridgewater) #7155
  • [b00ab50018] - (SEMVER-PATCH) test: rewrite chai to Node.js assert (Ruben Bridgewater)
  • [7a64f416d4] - (SEMVER-MINOR) [DI] add process tags to dynamic instrumentation (Thomas Hunter II) #7132
  • [39facdd10f] - (SEMVER-MINOR) [SVLS-7168] Create GCP PubSub Push Subscriptions Plugin (Nina Rei) #6260
  • [c998463802] - (SEMVER-PATCH) chore(deps): bump @isaacs/ttlcache (dependabot[bot]) #7091
  • [26220a486f] - (SEMVER-PATCH) chore(deps-dev): bump the dev-minor-and-patch-dependencies group across 1 directory with 2 updates (dependabot[bot]) #7082
  • [403c82e0af] - (SEMVER-PATCH) chore(deps): bump the gh-actions-packages group across 4 directories with 1 update (dependabot[bot]) #7126
  • [dac1ec53e6] - (SEMVER-PATCH) test: completely remove chai and fix type errors (Ruben Bridgewater) #7144
  • [4b40f00f78] - (SEMVER-PATCH) docs: add AGENTS.md and update CONTRIBUTING.md (Thomas Watson) #7109
  • [7f5a9d30c0] - (SEMVER-PATCH) refactor(config): use getEnv instead of getEnvironmentVariables (Thomas Watson) #7147
  • [95d4d2625e] - (SEMVER-PATCH) chore(datastreams): separate DSM specific test behavior and add to CODEOWNERS (robcarlan-datadog) #7076
  • [261e8ece5c] - (SEMVER-MINOR) feat(ws): add websocket context propagation (Thomas Hunter II) #7077
  • [244b082d00] - (SEMVER-PATCH) fix: pin import-in-the-middle to v2.0.0 (Thomas Watson) #7148
  • [edfc7c6928] - (SEMVER-PATCH) docs: add commit signing requirement to CONTRIBUTING.md (Thomas Watson) #7108
  • [a37816bd2e] - (SEMVER-PATCH) test(debugger): fix flaky time budget integration test (Thomas Watson) #7103
  • [a1f53d8fb1] - (SEMVER-PATCH) test: rewrite chai to assert (Ruben Bridgewater) #7134
  • [b26100bbeb] - (SEMVER-PATCH) add maximum node version in guardrails (Roch Devost) #6788
  • [8822838ef3] - (SEMVER-PATCH) test: use partialDeepStrictEqual instead of individual assertions (Ruben Bridgewater) #7133
  • [d9a3a8ee81] - (SEMVER-PATCH) fix: failing appsec tests after iitm bump to v2.0.0 (Pablo Erhard) #6935
  • [7c979d23df] - (SEMVER-PATCH) ci: pass GITHUB_TOKEN to license attribution step (Thomas Watson) #7140
  • [8f86699871] - (SEMVER-PATCH) [SVLS-8161] Update Azure Function metadata detection logic (Kathie Huang) #7100
  • [b08f6e9614] - (SEMVER-MINOR) feat(profiler): AsyncContextFrame used by profiler with Node.js 22+, on by default (Attila Szegedi) #7119

szegedi and others added 2 commits December 18, 2025 05:08
…on by default (#7119)

* Update to pprof 5.13.1

* Profiler can now use AsyncContextFrame starting with Node.js 22.9.0

* Use AsyncContextFrame-based profiling sample context tracking by default, where available.

* Add tests

* Do not use options.useAsyncContextFrame
* Check DD_AZURE_RESOURCE_GROUP env var when detecting resource group metadata for Azure Flex Consumption Functions

* Add tests, add DD_AZURE_RESOURCE_GROUP to supported configurations

* Make flex consumption function detection a function
@codecov
Copy link
Copy Markdown

codecov Bot commented Dec 18, 2025

Codecov Report

❌ Patch coverage is 91.66667% with 11 lines in your changes missing coverage. Please review.
✅ Project coverage is 84.73%. Comparing base (6b35e7d) to head (571acb2).
⚠️ Report is 403 commits behind head on v5.x.

Files with missing lines Patch % Lines
packages/datadog-plugin-bullmq/src/producer.js 88.88% 7 Missing ⚠️
...ages/datadog-instrumentations/src/helpers/hooks.js 0.00% 4 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             v5.x    #7136      +/-   ##
==========================================
+ Coverage   83.19%   84.73%   +1.54%     
==========================================
  Files         476      531      +55     
  Lines       20153    22648    +2495     
==========================================
+ Hits        16766    19191    +2425     
- Misses       3387     3457      +70     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Dec 18, 2025

Overall package size

Self size: 4.39 MB
Deduped: 5.21 MB
No deduping: 5.21 MB

Dependency sizes | name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 2.0.0 | 68.46 kB | 797.03 kB | | dc-polyfill | 0.1.10 | 26.73 kB | 26.73 kB |

🤖 This report was automatically generated by heaviest-objects-in-the-universe

@datadog-datadog-prod-us1

This comment has been minimized.

@pr-commenter
Copy link
Copy Markdown

pr-commenter Bot commented Dec 18, 2025

Benchmarks

Benchmark execution time: 2026-01-15 05:22:12

Comparing candidate commit 571acb2 in PR branch v5.82.0-proposal with baseline commit 2febdb4 in branch v5.x.

Found 0 performance improvements and 5 performance regressions! Performance is the same for 284 metrics, 31 unstable metrics.

scenario:appsec-iast-no-vulnerability-control-20

  • 🟥 execution_time [+23.193ms; +27.674ms] or [+5.093%; +6.077%]

scenario:plugin-http-server-querystring-obfuscation-18

  • 🟥 execution_time [+47.817ms; +51.658ms] or [+5.202%; +5.620%]

scenario:plugin-http-server-querystring-obfuscation-20

  • 🟥 execution_time [+35.987ms; +39.388ms] or [+5.321%; +5.824%]

scenario:plugin-http-server-querystring-obfuscation-22

  • 🟥 execution_time [+34.572ms; +39.176ms] or [+5.274%; +5.976%]

scenario:plugin-http-server-querystring-obfuscation-24

  • 🟥 execution_time [+36.939ms; +40.779ms] or [+6.194%; +6.838%]

watson and others added 7 commits December 19, 2025 05:08
The dd-license-attribution tool requires a GitHub token to avoid
API rate limits. This change explicitly passes the GITHUB_TOKEN
as an environment variable to the license regeneration step.
* Added support for iitm v2.0.0

* Update iitm with master package.json and yarn.lock
)

This makes the test output in case of errors easier to understand
as well as making the code easier to read.
Automated rewrites including a lint:fix call.

Afterwards manual fixes and small improvements.
Adds unit tests with mocked time for the debugger snapshot collector
deadline mechanism and removes strict timing assertions from the flaky
1ms budget integration test.

The integration test was failing in CI due to unpredictable execution
times in GitHub Actions environments. The test set a 1ms capture timeout
and expected thread pause time ≤16ms, which was too tight for
resource-constrained CI environments.
Add a new "Sign your commits" section to the contributing guidelines
that requires all commits in pull requests to be signed. The section
includes:

- Explanation of the commit signing requirement
- Step-by-step instructions for setting up GPG key signing
- Instructions for automatic commit signing configuration
- Guide for retroactively signing existing commits

This ensures the authenticity and integrity of contributions to the
project.
watson and others added 5 commits December 20, 2025 05:06
Version 2.0.1 was just released which causes issue with some of our CI
tests. It's too early to say if this is only a CI issue, but until we
can investigate, it's better to pin it.
Add comprehensive developer guide (AGENTS.md) and enhance CONTRIBUTING.md
with detailed documentation covering:

- Project setup, structure, and overview
- Testing workflows (unit tests, integration tests, plugin tests)
- Code style and linting standards (import ordering, ECMAScript/Node.js APIs)
- Performance and memory considerations (async/await restrictions, array iteration)
- Development workflow best practices (backportability, refactoring principles)
- How to add new configuration options and instrumentations
- Debugging, logging, and error handling patterns

The AGENTS.md file follows the agents.md spec and provides a quick reference
for common development tasks and established best practices to help both AI
coding assistants and human contributors navigate the codebase effectively.

Includes CLAUDE.md symlink for compatibility with Claude-based tools.

This reduces onboarding friction, enforces consistency, prevents common
mistakes, and improves code quality by making best practices discoverable.
BridgeAR and others added 10 commits January 12, 2026 17:13
* test: fix env type errors

Environment variables may only be of type string or undefined.

* test: remove all chai related code

Instead, the code is now using Node.js assert or a native testing
library available by a test runner.

* test: fix opentracing tests

This uses a hack to keep them supported, since they use chai. To do so,
a fake chai is introduced when loading that test file.

* test: remove unused deepInclude test helper

It was not used for a while and could be replaced with the more
generic partial deep strict equal helper.
…with 1 update (#7126)

Bumps the gh-actions-packages group with 1 update in the /.github/actions/instrumentations/test directory: [codecov/codecov-action](https://github.com/codecov/codecov-action).
Bumps the gh-actions-packages group with 1 update in the /.github/actions/plugins/test directory: [codecov/codecov-action](https://github.com/codecov/codecov-action).
Bumps the gh-actions-packages group with 1 update in the /.github/actions/plugins/test-and-upstream directory: [codecov/codecov-action](https://github.com/codecov/codecov-action).
Bumps the gh-actions-packages group with 1 update in the /.github/actions/plugins/upstream directory: [codecov/codecov-action](https://github.com/codecov/codecov-action).


Updates `codecov/codecov-action` from 5.5.1 to 5.5.2
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@5a10915...671740a)

Updates `codecov/codecov-action` from 5.5.1 to 5.5.2
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@5a10915...671740a)

Updates `codecov/codecov-action` from 5.5.1 to 5.5.2
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@5a10915...671740a)

Updates `codecov/codecov-action` from 5.5.1 to 5.5.2
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@5a10915...671740a)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ss 1 directory with 2 updates (#7082)

Bumps the dev-minor-and-patch-dependencies group with 2 updates in the /docs directory: [typescript](https://github.com/microsoft/TypeScript) and [typedoc](https://github.com/TypeStrong/TypeDoc).


Updates `typescript` from 5.9.2 to 5.9.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.2...v5.9.3)

Updates `typedoc` from 0.28.12 to 0.28.15
- [Release notes](https://github.com/TypeStrong/TypeDoc/releases)
- [Changelog](https://github.com/TypeStrong/typedoc/blob/master/CHANGELOG.md)
- [Commits](TypeStrong/typedoc@v0.28.12...v0.28.15)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 5.9.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch-dependencies
- dependency-name: typedoc
  dependency-version: 0.28.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-and-patch-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the vendor-minor-and-patch-dependencies group with 1 update in the /vendor directory: [@isaacs/ttlcache](https://github.com/isaacs/ttlcache).


Updates `@isaacs/ttlcache` from 2.1.2 to 2.1.3
- [Changelog](https://github.com/isaacs/ttlcache/blob/main/CHANGELOG.md)
- [Commits](isaacs/ttlcache@v2.1.2...v2.1.3)

---
updated-dependencies:
- dependency-name: "@isaacs/ttlcache"
  dependency-version: 2.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: vendor-minor-and-patch-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Add plugin for GCP PubSub Push Subscriptions
* feat: add producer-side batch message handling with span linking
* feat: add span linking from delivery span to pubsub.request
* feat: add span linking and batch metadata to pull-based consumer

- Collect span links from messages 2-N (first becomes parent)
- Extract parent context from first message trace context
- Create pubsub.request span with span links metadata
- Inject batch metadata into all messages (_dd.pubsub_request.*, _dd.batch.*)
- Add 128-bit trace ID support (_dd.p.tid)
- Add operation tag for batched vs single requests
- HTTP plugin now checks if a delivery span is active in storage
- If found, uses delivery span as parent for http.request
- Ensures proper span hierarchy for push subscriptions
- Extract pubsub.request span ID from message attributes
- Add span link correlation tags
- Calculate delivery duration from publish start time
- Add batch size and index tags for batched messages
There was a race condition of running the tests vs merging the
PR that still contained chai tests.
Some frameworks like fastify include request injection for
communicating between services in the same process. This
needs special handling to treat the inject calls like
regular http requests.

Co-authored-by: Stephen Belanger <admin@stephenbelanger.com>
* initial

* uncomment test

* Update packages/datadog-plugin-azure-service-bus/test/integration-test/tryAddMessageRegressionTest/client.spec.js

Co-authored-by: Ruben Bridgewater <ruben@bridgewater.de>

* Update packages/datadog-plugin-azure-service-bus/test/integration-test/tryAddMessageRegressionTest/client.spec.js

Co-authored-by: Ruben Bridgewater <ruben@bridgewater.de>

* remove chai import

* Merge branch 'storms/fix-azure-service-bus-try-add-message' of github.com:DataDog/dd-trace-js into storms/fix-azure-service-bus-try-add-message

---------

Co-authored-by: Ruben Bridgewater <ruben@bridgewater.de>
dependabot Bot and others added 5 commits January 14, 2026 05:10
…with 4 updates (#7191)

Bumps the gh-actions-packages group with 4 updates in the / directory: [codecov/codecov-action](https://github.com/codecov/codecov-action), [wechuli/allcheckspassed](https://github.com/wechuli/allcheckspassed), [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) and [DataDog/commit-headless](https://github.com/datadog/commit-headless).
Bumps the gh-actions-packages group with 4 updates in the /.github/workflows directory: [codecov/codecov-action](https://github.com/codecov/codecov-action), [wechuli/allcheckspassed](https://github.com/wechuli/allcheckspassed), [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) and [DataDog/commit-headless](https://github.com/datadog/commit-headless).


Updates `codecov/codecov-action` from 5.5.1 to 5.5.2
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v5.5.1...671740a)

Updates `wechuli/allcheckspassed` from 2.1.0 to 2.2.0
- [Release notes](https://github.com/wechuli/allcheckspassed/releases)
- [Commits](wechuli/allcheckspassed@f423b27...b0eaef5)

Updates `dependabot/fetch-metadata` from 2.4.0 to 2.5.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@08eff52...21025c7)

Updates `DataDog/commit-headless` from 2.0.1 to 2.0.2
- [Commits](DataDog/commit-headless@5a0f387...583489e)

Updates `codecov/codecov-action` from 5.5.1 to 5.5.2
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v5.5.1...671740a)

Updates `wechuli/allcheckspassed` from 2.1.0 to 2.2.0
- [Release notes](https://github.com/wechuli/allcheckspassed/releases)
- [Commits](wechuli/allcheckspassed@f423b27...b0eaef5)

Updates `dependabot/fetch-metadata` from 2.4.0 to 2.5.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@08eff52...21025c7)

Updates `DataDog/commit-headless` from 2.0.1 to 2.0.2
- [Commits](DataDog/commit-headless@5a0f387...583489e)

Updates `codecov/codecov-action` from 5.5.1 to 5.5.2
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v5.5.1...671740a)

Updates `wechuli/allcheckspassed` from 2.1.0 to 2.2.0
- [Release notes](https://github.com/wechuli/allcheckspassed/releases)
- [Commits](wechuli/allcheckspassed@f423b27...b0eaef5)

Updates `dependabot/fetch-metadata` from 2.4.0 to 2.5.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@08eff52...21025c7)

Updates `DataDog/commit-headless` from 2.0.1 to 2.0.2
- [Commits](DataDog/commit-headless@5a0f387...583489e)

Updates `codecov/codecov-action` from 5.5.1 to 5.5.2
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v5.5.1...671740a)

Updates `wechuli/allcheckspassed` from 2.1.0 to 2.2.0
- [Release notes](https://github.com/wechuli/allcheckspassed/releases)
- [Commits](wechuli/allcheckspassed@f423b27...b0eaef5)

Updates `dependabot/fetch-metadata` from 2.4.0 to 2.5.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@08eff52...21025c7)

Updates `DataDog/commit-headless` from 2.0.1 to 2.0.2
- [Commits](DataDog/commit-headless@5a0f387...583489e)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: wechuli/allcheckspassed
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: dependabot/fetch-metadata
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: DataDog/commit-headless
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: wechuli/allcheckspassed
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: dependabot/fetch-metadata
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: DataDog/commit-headless
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: wechuli/allcheckspassed
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: dependabot/fetch-metadata
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: DataDog/commit-headless
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: wechuli/allcheckspassed
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: dependabot/fetch-metadata
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: DataDog/commit-headless
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ruben Bridgewater <ruben@bridgewater.de>
…7227)

* add evaluation metrics assertion helper

* remove .only
* add test fixes

* missing cassettes
CarlesDD and others added 7 commits January 15, 2026 05:11
* Bump sinon.js to 21.0.1

* Workaround for sinon spies in appsec test
- Split `spawnProc` into two functions with distinct return types:
  - `spawnProc`: expects long-running processes, always returns SpawnedProcess with `url`
  - `spawnProcAndExpectExit`: expects clean exit, may return void
- Make `url` property a lazy getter that throws if accessed before port message
- Ensures TypeScript knows `proc.url` is always defined for long-running processes
This adds a global counter next to the local error numbers as well
as adding the file name next to the failure counter of each file.

In addition, it accounts to crashes as failed tests instead of
getting a confused output.
* add pubsub.delivery_duration_ms to push subscriptions

* update push tests and names of span tags

* update tests for push subscriptions

* update tests: remove K_SERVICE delete

* Update all tests and naming convention of inferred span

* create global const for gc

* remove ts error check for gc
* ws plugins will be disabled when config is set to false
@nina9753 nina9753 marked this pull request as ready for review January 15, 2026 16:38
@nina9753 nina9753 requested review from a team as code owners January 15, 2026 16:38
@nina9753 nina9753 requested review from khanayan123 and removed request for a team January 15, 2026 16:38
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 571acb2eff

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment on lines +9 to +10
let autoUserInstrumModeId
let rc
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Reset auto-user mode state per enable()

autoUserInstrumModeId is now module-scoped and never reset when enable() is called, so in any process that initializes the tracer more than once (e.g., test harnesses, serverless warm starts, or multiple tracer instances) the old config ID persists. When the next ASM_FEATURES config arrives with a different ID, the handler throws “Multiple auto_user_instrum…” and the new config is marked ERROR, meaning the new tracer never applies the remote setting. This was previously reset per enable call; consider moving the state into enable() or clearing it at the start of enable.

Useful? React with 👍 / 👎.

@nina9753 nina9753 merged commit 22b21d4 into v5.x Jan 15, 2026
793 checks passed
@nina9753 nina9753 deleted the v5.82.0-proposal branch January 15, 2026 18:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.