Bump ddtrace from 2.1.7 to 2.4.1

[dependabot]

Bumps ddtrace from 2.1.7 to 2.4.1.

Release notes

Sourced from ddtrace's releases.

2.4.1

Bug Fixes

• IAST: Don't split AST Assign nodes since it's not needed for propagation to work.
• CI Visibility: Fix for an import issue that caused the pytest plugin to fail to properly initialize a test session and exit with an import exception.
• tracing: Fixes a bug that prevents span links from being visualized in the Datadog UI.
• Vulnerability Management for Code-level (IAST): Fix an unhandled ValueError in ast_function thrown in some cases (i.e. Numpy arrays when converted to bool).
• langchain: This fix resolves an get_openai_token_cost_for_model import error in langchain version 0.0.351 or later.
• tracing: Ensures all fields in ddtrace.context.Context are picklable.

2.4.0

New Features

• ASM: dependency telemetry metrics now will only report dependencies actually in use (imported) and will also report new imported modules periodically.

• ASM: This introduces Threat Monitoring and Blocking on FastAPI.

  • IP Blocking and all input addresses are supported on requests and responses
  • Custom Blocking (This does not contain user blocking specific features yet).

• Vulnerability Management for Code-level (IAST): Adds Python 3.12 compatibility

• tracing: Introduces support for OpenTracing Baggage Items with HTTP Propagation. Enable this support by DD_TRACE_PROPAGATION_HTTP_BAGGAGE_ENABLED=true. The Context._set_baggage_item and Context._get_baggage_item internal methods are provided for manual modifications to the Baggage Items. These API changes are subject to change.

• dynamic instrumentation: Add support for more built-in container types, such as defaultdict, frozenset, OrderedDict and Counter.

• Optionally lazy loads and disables Instrumentation Telemetry. Users must explicitly set "DD_INSTRUMENTATION_TELEMETRY_ENABLED=false".

• tracer: Add support for remotely setting the trace sample rate from the Datadog UI. This functionality is enabled by default when using ddtrace-run and library injection. To enable it when using the library manually, use ddtrace.config.enable_remote_config().

Upgrade Notes

• This removes the pylons integration, which does not support Python 3.

Deprecation Notes

• aioredis: The aioredis integration is deprecated and will be removed in a future version. As an alternative to the aioredis integration, you can use the redis integration with redis>=4.2.0.

Bug Fixes

• ASM: This fix resolves an issue where IAST could cause circular dependency at startup.
• Vulnerability Management for Code-level (IAST): Cookies vulnerabilities are only reported if response cookies are insecure.
• Vulnerability Management for Code-level (IAST): Fix propagation error on .format string method.
• Vulnerability Management for Code-level (IAST): Ensure that Cookies vulnerabilities report only the cookie name.
• Vulnerability Management for Code-level (IAST): This fix resolves an issue where certain aspects incorrectly expected at least one argument, leading to an IndexError when none were provided. The solution removes this constraint and incorporates regression tests for stability assurance.
• tracing: Resolves span encoding errors raised when span links do not contain expected types
• tracer: tag spans that have been sampled due to an Agent sampling configuration.
• lambda: This change disables the use of multiprocessing.queue in Lambda, because it is not supported in Lambda

... (truncated)

Commits

• 605dc5d fix(langchain): import error [backport 2.4] (#8061)
• 663293a ci: skip some test_stack.py tests on 3.12 [backport 2.4] (#8084)
• 9f80f12 fix(internal): support for namespace packages [backport 2.4] (#8086)
• 7b2d983 fix: avoid changing the AST assign node since it's not needed for propagation...
• adacac7 fix(iast): handle value error thrown by numpy [backport 2.4] (#8091)
• ec25dd9 fix(ci): pin versions of sphinx dependencies to unlock ci [backport 2.4] (#8106)
• a9a225a fix(span_links): revert regression in v04 encoding [backport 2.4] (#8100)
• b086a4c fix(otel): ensures ids in span links are in hex [backport 2.4] (#8065)
• 92eac20 ci: pin trio for starlette (#8058) [backport 2.4] (#8070)
• c6d996c fix(context): ensures all fields in Context are picklable [backport 2.4] (#8056)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #66.