v5.105.0 proposal#8708
Merged
Merged
Conversation
…d off in v6 (#8319) * refactor(span)!: gate addLink(spanContext, attributes) legacy overload off in v6 v5 keeps the OpenTracing-style positional shape; v6 only accepts `addLink({ context, attributes })` on both the OpenTracing `Span` and the OpenTelemetry bridge. Tests that exercised the legacy form switch to the canonical shape (works on both versions) or are gated with `DD_MAJOR < 6`. * fix: convert remaining addLink call sites to canonical form `addLink(spanContext, attrs)` no longer works on v6 — the legacy positional overload now TypeErrors on `context._ddContext`. Several plugins (`kafkajs`, `google-cloud-pubsub`, `azure-*`), the OTel `addSpanPointer` helper, and the `dd-trace-api` plugin spec still passed that shape. They switch to `addLink({ context, attributes })`, which also works on v5. `docs/test.ts` drops the two legacy-form lines that no longer compile against the updated type definitions, and the `version` import in `opentracing/span.js` moves above `./span_context` to satisfy `import/order`. A `DD_MAJOR < 6`-gated regression test on the OpenTracing `Span` pins the legacy v5 path so v5 coverage stays after the canonical-only conversion in the surrounding tests.
…ss 1 directory with 2 updates (#8562) Bumps the runtime-minor-and-patch-dependencies group with 2 updates in the / directory: [@datadog/openfeature-node-server](https://github.com/DataDog/openfeature-js-client/tree/HEAD/packages/node-server) and [oxc-parser](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser). Updates `@datadog/openfeature-node-server` from 1.1.2 to 1.2.1 - [Release notes](https://github.com/DataDog/openfeature-js-client/releases) - [Changelog](https://github.com/DataDog/openfeature-js-client/blob/main/CHANGELOG.md) - [Commits](https://github.com/DataDog/openfeature-js-client/commits/v1.2.1/packages/node-server) Updates `oxc-parser` from 0.129.0 to 0.130.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/napi/parser/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/crates_v0.130.0/napi/parser) --- updated-dependencies: - dependency-name: "@datadog/openfeature-node-server" dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: runtime-minor-and-patch-dependencies - dependency-name: oxc-parser dependency-version: 0.130.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: runtime-minor-and-patch-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore: update dependabot and support ranges Split dependabot into multiple groups so one laggy module no longer blocks the others, refresh the test fixtures to match, and regenerate the supported-versions output. Aerospike's `['4', '5', '6']` -> `['>=4']` and stripe's explicit list -> `['>=9 <22']` are kept -- aerospike v7 has not shipped on npm and stripe's range collapse covers the same set. Multer's `^1.4.4-lts.1` -> `>=1.4.4-lts.1` widening moves to a separate PR per @watson's review (would have added v2 support to a "support ranges" refresh). Refs: #8337 (comment) * chore(deps): raise plugin-versions Dependabot PR cap to fit cohort design The cohort grouping under `/packages/dd-trace/test/plugins/versions` only helps when the matching PRs can open in parallel. With `open-pull-requests-limit: 1` Dependabot still serializes the cohorts, so a blocked group continues to stall every other group — the bottleneck the groups were meant to remove. Bump to 10 (one slot per cohort plus headroom). Refs: #8337 * fix(test): scope same-name externals install by PACKAGE_VERSION_RANGE Externals entries whose `name` matches the plugin key (e.g. the new aerospike entry that mirrors the addHook versions for `withVersions`) ignored `PACKAGE_VERSION_RANGE` and forced every major to install on every CI job. Aerospike@4 has no Node-22 prebuilt binary, aerospike@6 has no Node-16 binary -- the per-major aerospike matrix can't boot once the externals entry exists. Also move aerospike's `hoistingLimits` install-config out of the `!external` branch so the externals-loop write does not silently overwrite the workspace setup the internal pass put down. * fixup!
ci: avoid Yarn quarantine for Datadog packages
On Windows, the JS-based actions/cache action and Git Bash resolve /tmp
to different directories, causing the cached Node.js version file to
never be found. This means check-latest always fires on Windows, making
a manifest API call that can fail. Replace /tmp with ${{ runner.temp }}
/ $RUNNER_TEMP which resolves consistently across both contexts.
Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
* chore(eslint): require messages on boolean test assertions
Add a custom ESLint rule that flags `assert(...)` / `assert.ok(...)`
calls whose first argument is a non-trivial expression and no second
message argument is provided. Without a message, failures only report
"Expected true, got false", hiding the actual value being asserted on —
debugging a flaky `assert.ok(duration >= 1000)` is painful when you
can't tell if `duration` was 500ms or 5ms.
Self-describing shapes are still allowed without a message: bare
references (`isReady`, `obj.prop`), structural unary ops (`!x`,
`typeof x`, `delete obj.k`), `in` / `instanceof` with trivial operands,
predicate-style calls (`arr.includes('foo')`, `Array.isArray(x)`), and
zero-arg method-chain calls used as getter-style navigation
(`span.context()._tags`).
Scoped to test files via the existing `TEST_FILES` glob.
* Add auto-fix
* Apply auto-fixes
* AI fix
* bump datadog/pprof * add node-gyp-build resolutions * update pprof nodejs version
…#8506) The Express autocannon profile pins the HTTP server entry as the dominant per-request hot path. Each request allocated three short-lived `{ req, res, abortController }` / `{ req }` objects through the instrumentation -> plugin -> AppSec chain, the plugin re-ran `serviceName()`, `operationName()`, and a `{ ...this.config, service }` spread on every call, and a couple of secondary frames did per-call work that was easy to drop. Three coordinated pieces tighten the path: 1. `wrapEmit` keeps one `{ req, res, abortController }` ctx alive and shares it with `exitServerCh` and the plugin's forward to `incomingHttpRequestStart`. This resolves the explicit `TODO: no need to make a new object here` on the AppSec publish; the start, exit, and AppSec subscribers all read from the same message without mutating it. 2. `HttpServerPlugin#configure` resolves `serviceName`, `operationName`, `serviceSource`, and the pre-merged `{ ...this.config, service }` once into the new `#startConfig`, `#operationName`, and `#serviceSource` private fields. The hot path reads cached fields; the next `configure` call refreshes them so remote-config flips still win. 3. `wrapResponseEmit` checks the event name with `||` instead of allocating a `['finish', 'close']` array on every response emit, and `wrapWriteHead` skips a no-op `Object.assign(this.getHeaders(), undefined)` when `writeHead` is called without an explicit headers object (the common Express case). The per-request allocations the diff removes are deterministic from reading the code; the targeted profile frames stop paying lookup cost they did before. Span shape (resource, http.method, http.url, http.status_code, http.route), CORS / correlation header handling, and the `incomingHttpRequestStart` published message all match the prior diagnostic-channel payload by deep-equal.
* ci(verify-tests): flag specs no CI invocation reaches The existing "spec is matched by some script glob" check passes whenever a `package.json` test script could in principle run a spec. It misses the inverse failure: a glob exists but no workflow ever sets the env (typically `PLUGINS=<name>`) that would expand the glob to reach the spec. That is how PR #8516's `packages/datadog-instrumentations/test/fastify.spec.js` slipped through with no CI invocation running it, and why codecov reported 8 new lines as patch misses despite the spec covering them locally. Two prerequisites ride along so the joint check produces truthful results: 1. `normalizeScriptGlob` collapsed every `@(${PLUGINS})` to `*` even in `preserveEnv` mode, so a single-plugin job (e.g. `PLUGINS=bluebird`) looked like it exercised every spec in the same directory. Unwrap the extglob to `${PLUGINS}` before the env-aware expansion runs. 2. `instrumentation-http` wraps `yarn test:instrumentations:ci` in `nick-fields/retry@*`'s `command:` input. Treat that input like an inline `run:` so the verifier sees the underlying invocation. On `master` the new check surfaces 14 pre-existing orphans (instrumentation specs with no matching `PLUGINS=` job, plus two plugin integration-test specs and `datadog-plugin-jest/test/util.spec.js`); closing each is out of scope and tracked in follow-up PRs. * ci(instrumentation): run 11 orphan instrumentation specs `packages/datadog-instrumentations/test/{ai,aws-sdk,couchbase,crypto, express-multi-version,fetch,hono,http-client-options,otel-sdk-trace, stripe,zlib}.spec.js` are matched by `test:instrumentations`' glob but no workflow set `PLUGINS=<name>` for `test:instrumentations:ci`, so the new joint-coverage check in `scripts/verify-exercised-tests.js` flagged each as never reached by a CI invocation. Add the matching `instrumentation-<name>` jobs alongside the existing siblings; nine of the eleven are plain Node unit specs (proxyquire / agent harness) and need no service containers, so the existing `instrumentations/test` composite action runs them as-is. Two specs need a custom job shape on top of that: 1. `couchbase` ships its own libcouchbase whose 3.x line only builds on Node 18 and whose 4.2+ line only builds on Node 20+; the composite action runs both oldest (18) and latest (24), so neither range survives the install on its own. Use a matrix that pins one Node version per range, mirroring the existing `couchbase` plugin job. 2. `http-client-options` listened on `127.0.0.1` only, but `http.request(undefined, callback)` resolves to `localhost`, which Node 18+ may resolve to `::1` first -- the request then fails with `ECONNREFUSED ::1:<port>` before the spec can assert. Bind the test server to all interfaces. * ci(apm-integrations): run axios/body-parser integration-test specs `packages/datadog-plugin-{axios,body-parser}/test/integration-test/client.spec.js` are matched by `test:integration:plugins`' glob but no workflow set `PLUGINS=<name>` for `test:integration:plugins:coverage`; the existing `axios:` and `body-parser:` jobs only invoked `plugins/upstream`, which runs the non-glob `test:plugins:upstream` suite-runner. The new joint check flagged both specs as never reached. Append `plugins/integration-test` to each job (which runs `test:integration:plugins:coverage` with the same `PLUGINS=` env) rather than spinning up sibling jobs; both specs are self-contained (`FakeAgent` + `useSandbox`) and slot into the existing harness without extra service setup. The axios sandbox previously called `axios.get('/foo')`, which throws synchronously without producing an http.request, so the spec timed out waiting for a span. Switch to a full URL pointing at an unused port to match the existing fetch sandbox; the request can fail and the instrumentation still ships a span. * ci(test-optimization): run datadog-plugin-jest unit spec `packages/datadog-plugin-jest/test/util.spec.js` is matched by `test:plugins`' glob but no workflow set `PLUGINS=jest` for `test:plugins:ci`; the existing `integration-jest` matrix runs `integration-tests/jest/*.spec.js` only, which does not cover the plugin package's own unit tests. The new joint check flagged it as never reached. Add a single `jest:` job invoking the `plugins/test` composite action. `util.spec.js` is a pure unit test on `getFormattedJestTestParameters` and `getJestSuitesToRun`, so no service containers or matrix axes are needed beyond what `plugins/test` already covers (oldest-maintenance and latest Node). Restore the three fixture files (`test-to-run.js`, `test-to-skip.js`, `test-unskippable.js`) under `packages/datadog-plugin-jest/test/fixtures/` that `getJestSuitesToRun` reads via `isMarkedAsUnskippable`. They were deleted alongside the other jest plugin specs when those moved to integration tests, but `util.spec.js` was kept and silently broke because no CI invocation reached it. * ci(instrumentation): run 11 orphan instrumentation specs `packages/datadog-instrumentations/test/{ai,aws-sdk,couchbase,crypto, express-multi-version,fetch,hono,http-client-options,otel-sdk-trace, stripe,zlib}.spec.js` are matched by `test:instrumentations`' glob but no workflow set `PLUGINS=<name>` for `test:instrumentations:ci`, so the new joint-coverage check in `scripts/verify-exercised-tests.js` flagged each as never reached by a CI invocation. Add the matching `instrumentation-<name>` jobs alongside the existing siblings; nine of the eleven are plain Node unit specs (proxyquire / agent harness) and need no service containers, so the existing `instrumentations/test` composite action runs them as-is. Two specs need a custom job shape on top of that: 1. `couchbase` ships its own libcouchbase: the 3.x line has no prebuilt binary for Node 18+ and its bundled sources do not compile under modern gcc (missing <cstdint> for std::uint8_t). The composite action runs both oldest (18) and latest (24), so neither survives the install on its own. Use a matrix that pins one Node version per range, mirroring the existing `couchbase` plugin job's `eol` (16) for `^3.0.7` and Node 18 for `>=4.2.0`. 2. `http-client-options` listened on `127.0.0.1` only, but `http.request(undefined, callback)` resolves to `localhost`, which Node 18+ may resolve to `::1` first -- the request then fails with `ECONNREFUSED ::1:<port>` before the spec can assert. Bind the test server to all interfaces.
This widens the install retry envelope so CI yarn / bun installs survive more shapes of transient registry failure: 1. `network-timeout 60000` in the repo-root `.yarnrc` doubles yarn's per-request timeout from the default 30s; yarn 1.x walks `.yarnrc` upward, so the single root entry covers every yarn install in the repo tree. 2. Composite install actions use `nick-fields/retry` (pinned in `instrumentation.yml`) instead of `|| (sleep N && cmd)`: three attempts with a 30s wait between, plus a per-attempt `timeout_minutes` cap that bounds a hung install.
…8485) Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
…#8597) IPC tests that trigger loadWindow() need more than the default 1000ms for a Chromium BrowserWindow to load and deliver its span in CI. Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
Open upstream bug actions/cache#1754: @actions/cache silently exits non-zero on Windows during cache restore with no error output, failing the calling step. Symptoms: ~0.6s silent death in setup-bun, setup-node, or any direct actions/cache use. Affects every job that hits a cold Windows cache; retrying the job manually almost always succeeds. - node action: split implementation into node/setup and have node/action call it twice (continue-on-error + if failure), so the whole composite (setup-node, our version cache, setup-bun) retries once on Windows failure. All existing callers and version aliases are unchanged. - datadog-ci action: drop the actions/cache step. @datadog/datadog-ci is a bundled package with no transitive deps; the install is fast enough that the cache wasn't pulling its weight, and it directly exposed us to the same bug. Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
…tes (#8601) * chore(deps): bump the ai-and-llm group across 1 directory with 8 updates Bumps the ai-and-llm group with 8 updates in the /packages/dd-trace/test/plugins/versions directory: | Package | From | To | | --- | --- | --- | | [@langchain/anthropic](https://github.com/langchain-ai/langchainjs) | `1.3.29` | `1.4.0` | | [@langchain/classic](https://github.com/langchain-ai/langchainjs) | `1.0.32` | `1.0.33` | | [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.1.46` | `1.1.47` | | [@langchain/google-genai](https://github.com/langchain-ai/langchainjs) | `2.1.30` | `2.1.31` | | [@langchain/langgraph](https://github.com/langchain-ai/langgraphjs/tree/HEAD/libs/langgraph-core) | `1.3.0` | `1.3.1` | | [@langchain/openai](https://github.com/langchain-ai/langchainjs) | `1.4.5` | `1.4.6` | | [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `6.0.184` | `6.0.185` | | [langchain](https://github.com/langchain-ai/langchainjs) | `1.4.0` | `1.4.1` | Updates `@langchain/anthropic` from 1.3.29 to 1.4.0 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/commits/@langchain/anthropic@1.4.0) Updates `@langchain/classic` from 1.0.32 to 1.0.33 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/commits/@langchain/classic@1.0.33) Updates `@langchain/core` from 1.1.46 to 1.1.47 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.1.46...@langchain/core@1.1.47) Updates `@langchain/google-genai` from 2.1.30 to 2.1.31 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/commits/@langchain/google-genai@2.1.31) Updates `@langchain/langgraph` from 1.3.0 to 1.3.1 - [Release notes](https://github.com/langchain-ai/langgraphjs/releases) - [Changelog](https://github.com/langchain-ai/langgraphjs/blob/main/libs/langgraph-core/CHANGELOG.md) - [Commits](https://github.com/langchain-ai/langgraphjs/commits/@langchain/langgraph@1.3.1/libs/langgraph-core) Updates `@langchain/openai` from 1.4.5 to 1.4.6 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/commits/@langchain/openai@1.4.6) Updates `ai` from 6.0.184 to 6.0.185 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/ai@6.0.185/packages/ai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/ai@6.0.185/packages/ai) Updates `langchain` from 1.4.0 to 1.4.1 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/openai@1.4.0...langchain@1.4.1) --- updated-dependencies: - dependency-name: "@langchain/anthropic" dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ai-and-llm - dependency-name: "@langchain/classic" dependency-version: 1.0.33 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-and-llm - dependency-name: "@langchain/core" dependency-version: 1.1.47 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-and-llm - dependency-name: "@langchain/google-genai" dependency-version: 2.1.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-and-llm - dependency-name: "@langchain/langgraph" dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-and-llm - dependency-name: "@langchain/openai" dependency-version: 1.4.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-and-llm - dependency-name: ai dependency-version: 6.0.185 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-and-llm - dependency-name: langchain dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ai-and-llm ... Signed-off-by: dependabot[bot] <support@github.com> * chore: update supported-integrations --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: dd-octo-sts[bot] <200755185+dd-octo-sts[bot]@users.noreply.github.com>
…up/everything-fixture in the npm_and_yarn group across 1 directory (#8596) Bumps the npm_and_yarn group with 1 update in the /benchmark/sirun/startup/everything-fixture directory: [uuid](https://github.com/uuidjs/uuid). Updates `uuid` from 9.0.1 to 14.0.0 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v9.0.1...v14.0.0) --- updated-dependencies: - dependency-name: uuid dependency-version: 14.0.0 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ss 1 directory with 4 updates (#8561) Bumps the dev-minor-and-patch-dependencies group with 4 updates in the / directory: [axios](https://github.com/axios/axios), [bun](https://github.com/oven-sh/bun), [semver](https://github.com/npm/node-semver) and [yaml](https://github.com/eemeli/yaml). Updates `axios` from 1.16.0 to 1.16.1 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.16.0...v1.16.1) Updates `bun` from 1.3.13 to 1.3.14 - [Release notes](https://github.com/oven-sh/bun/releases) - [Commits](oven-sh/bun@bun-v1.3.13...bun-v1.3.14) Updates `semver` from 7.7.4 to 7.8.0 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.7.4...v7.8.0) Updates `yaml` from 2.8.4 to 2.9.0 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.8.4...v2.9.0) --- updated-dependencies: - dependency-name: axios dependency-version: 1.16.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-minor-and-patch-dependencies - dependency-name: bun dependency-version: 1.3.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-minor-and-patch-dependencies - dependency-name: semver dependency-version: 7.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-minor-and-patch-dependencies - dependency-name: yaml dependency-version: 2.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-minor-and-patch-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
#8594) Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
#8564) The "sends a heap profile on OOM with external process and exits successfully" test consistently fails on Node 22.22.3 on Linux. With 3 extensions of 15MB each (50MB initial + 45MB), V8 finishes the test program's 12 x 5MB allocations only by a narrow margin. On Node 22's V8, the GCs running under tight-heap pressure trigger V8's separate "Ineffective mark-compacts near heap limit" abort path (independent of the near-heap-limit callback) before the program completes. Raising each extension to 20MB gives V8 more breathing room between OOM events, making individual GCs more likely to be "effective" and keeping V8's consecutive-ineffective-GC counter from reaching its threshold. The test still exercises 3 OOM events; only the per-step size changes.
* Implementation of azure/cosmos integration * diff reduction * more diff reduction * first draft of unit and integration tests * unit tests working * testing * Working integration tests * linting * linting * Some linting, draft of function trigger implementation * added function trigger instrumentation and tests * cleanup * Skip tracing extraneous reads * Using operation type instead of resource * move adding error tag to within null check * temp * no changes to yarn.lock * linting and config * simplify integration test checks * lint * add id token perms * node options on integration test * node options for non-esm tests * add timeout waiting for cosmos emulator * try logging * try env var to allow emulator connection * trying http again for non-esm tests * add cosmosdb to azure-functions test spec * skip node 18 for testing * more node skips * try to refactor azure cosmos import in azure functions integration tests * use 127.0.0.1 instead of localhost * remove skipping node 18 * re-lower the minimum supported sdk version * load azure/cosmos differently * increase timeout * restructure checking trace payload * more debug * logging * more debugging * stronger assertions * check resources * fix up trigger tests * Linting * trying to fix skip span behavior * more skip span work * fixing span skipping * fix resource in azure functions test * Responding to reviews, fixing error test * remove specific version for cosmos package * linting * fix use of spread operator * revert spread operator * try changing the node options for azure functions cosmos * normalize resource * reformatting * undoing formatting * Fixing error method in instrumentation * simplify getting tags * supported integrations * Small fixes in index.js * Unit tests for getResource * fixing azure functions, use of emulator, and status code tags * lint * try disabling cookie * image digests * lint * changing status code to string * cookie * proxy agent module * more packages * dotnet 8 for azure functions * crypto * timeout * fixing azure functions cosmos test * teardown of azure cosmos client * Cleanup * linting * Fixing span skip * use noop to skip account based operations * Add test for noop * remove additional file * modifying getConnectionMode
… 24.16+ (#8604) Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
…ts (#8616) * fix(ci): replace setup-bun with npm install to avoid GitHub rate limits setup-bun hits GitHub Cache API and Releases API rate limits when many jobs run in parallel. Installing via npm pulls the binary from npm's CDN instead, avoiding GitHub entirely. Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com> * fix(ci): skip Bun install on unsupported Node.js versions npm install for bun@1.3.1 runs a postinstall script that fails on Node.js < 12. Skip the install step on those versions since they don't use Bun anyway (e.g. integration-guardrails-unsupported). Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
…p/everything-fixture in the npm_and_yarn group across 1 directory (#8611) Bumps the npm_and_yarn group with 1 update in the /benchmark/sirun/startup/everything-fixture directory: [qs](https://github.com/ljharb/qs). Updates `qs` from 6.15.1 to 6.15.2 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.15.1...v6.15.2) --- updated-dependencies: - dependency-name: qs dependency-version: 6.15.2 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
v1.0.3 fixes a race condition that can cause the API key to never be outputted. Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
…stall (#8576) `FileCoverage.getLineCoverage()` walks `statementMap` only, so function-declaration lines, `} else {` continuations, and inline ternary arms never appear in the returned hit map. The `lcovonly` reporter emits `DA:` records straight from that map, so Codecov's patch view marks those lines as missing on every PR that touches them — even when the test run exercised the function or branch arm — until upstream lands the fix. Untaken branch arms record as `0` so `LF` totals stay honest. The patch is idempotent via an inline sentinel and refuses to apply if the locked upstream code shape changes, so a future `istanbul-lib-coverage` bump fails the install loudly instead of silently no-op'ing. The patch runs in `prepare`, not `postinstall`, and the script logs to stderr only. Two distinct failure modes drive both choices: 1. `postinstall` runs on consumer installs and crashes with `MODULE_NOT_FOUND` before any in-script guard can fire, because the script is not in the `files` allowlist; `prepare` is skipped on consumer installs entirely. 2. `prepare` also runs under `npm pack`, where CI captures the tarball name via `FILENAME=$(npm pack --silent …)`; output on stdout lands inside `$FILENAME` and breaks the downstream `mv` / `tar`, so diagnostic output goes to stderr (matching `scripts/release/swap-v5-types.js`). Refs: istanbuljs/istanbuljs#809
Contributor
Author
Overall package sizeSelf size: 6.07 MB Dependency sizes| name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 3.0.1 | 82.56 kB | 817.39 kB | | opentracing | 0.14.7 | 194.81 kB | 194.81 kB | | dc-polyfill | 0.1.11 | 25.74 kB | 25.74 kB |🤖 This report was automatically generated by heaviest-objects-in-the-universe |
🎉 All green!🧪 All tests passed 🎯 Code Coverage (details) 🔗 Commit SHA: 19c06ca | Docs | Datadog PR Page | Give us feedback! |
BenchmarksBenchmark execution time: 2026-05-29 16:50:03 Comparing candidate commit 19c06ca in PR branch Found 52 performance improvements and 43 performance regressions! Performance is the same for 1400 metrics, 98 unstable metrics. scenario:encoders-0.4-20
scenario:encoders-0.4-22
scenario:encoders-0.4-24
scenario:encoders-0.4-events-legacy-20
scenario:encoders-0.4-events-legacy-22
scenario:encoders-0.4-events-legacy-24
scenario:encoders-0.4-events-native-20
scenario:encoders-0.4-events-native-22
scenario:encoders-0.4-events-native-24
scenario:encoders-0.5-20
scenario:encoders-0.5-22
scenario:encoders-0.5-24
scenario:encoders-0.5-events-legacy-20
scenario:encoders-0.5-events-legacy-22
scenario:encoders-0.5-events-legacy-24
scenario:exporting-pipeline-0.4-22
scenario:exporting-pipeline-0.4-24
scenario:exporting-pipeline-0.4_with_stats-22
scenario:exporting-pipeline-0.4_with_stats-24
scenario:exporting-pipeline-0.5-20
scenario:exporting-pipeline-0.5-22
scenario:exporting-pipeline-0.5-24
scenario:exporting-pipeline-0.5_with_stats-24
scenario:plugin-bluebird-with-tracer-24
scenario:plugin-graphql-long-with-depth-and-collapse-off-20
scenario:plugin-graphql-long-with-depth-and-collapse-off-22
scenario:plugin-graphql-long-with-depth-and-collapse-on-20
scenario:plugin-graphql-long-with-depth-and-collapse-on-24
scenario:plugin-graphql-long-with-depth-off-20
scenario:plugin-graphql-long-with-depth-off-22
scenario:plugin-graphql-long-with-depth-on-max-20
scenario:plugin-graphql-long-with-depth-on-max-24
scenario:plugin-q-with-tracer-24
scenario:shimmer-startup-arrow-wrap-22
scenario:shimmer-startup-arrow-wrap-24
scenario:shimmer-startup-asyncarrow-wrap-24
scenario:shimmer-startup-asyncdeclared-wrap-24
scenario:shimmer-startup-declared-wrap-22
scenario:shimmer-startup-declared-wrap-24
scenario:spans-finish-later-24
|
auto-merge was automatically disabled
May 29, 2026 16:50
Rebase failed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
1382cfd4de] - (SEMVER-PATCH) ci(project): remove supported integrations push jobs (Juan Antonio Fernández de Alba) #8707947a5360d2] - (SEMVER-PATCH) chore(deps): bump axios from 1.15.2 to 1.16.0 in /integration-tests/webpack in the npm_and_yarn group across 1 directory (dependabot[bot]) #8705f1543762c4] - (SEMVER-MINOR) revert: feat(http,http2): apply http.endpoint and queryStringObfuscation to client spans (feat(http,http2): apply http.endpoint and queryStringObfuscation to client spans #8407) (Ruben Bridgewater) #870668619de614] - (SEMVER-PATCH) perf(encode): consolidate the msgpack hot path (Ruben Bridgewater) #8504130446e69c] - (SEMVER-PATCH) perf(format): split addTag into typed helpers to kill throwaway {} al… (Ruben Bridgewater) #85134c88a9753d] - (SEMVER-PATCH) fix(mongodb): unify obfuscateQuery sanitizer and speed up query tagging (Ruben Bridgewater) #8703cfb2f0113e] - (SEMVER-PATCH) chore(cypress): bump latest test version (Juan Antonio Fernández de Alba) #8701a8496bd01e] - (SEMVER-PATCH) fix(jest): report coverage metric without skipped suites (Juan Antonio Fernández de Alba) #8702c6be3b9c47] - (SEMVER-PATCH) fix(jest): gate coverage backfill by jest version (Juan Antonio Fernández de Alba) #8700c2810de6f3] - (SEMVER-MINOR) feat(cypress): report TIA line coverage totals in cypress (Juan Antonio Fernández de Alba) #845342a4f4f24b] - (SEMVER-PATCH) ci: add retry with 60s delay to coverage, dd-sts-api-key, and node actions (Roch Devost) #86947d1aa519a6] - (SEMVER-PATCH) docs(types): add missing properties into v5 ts file (Pablo Erhard) #86924b2f5d2908] - (SEMVER-PATCH) fix(hono): set resource name for single-handler routes (William Conti) #810042151577da] - (SEMVER-PATCH) chore(deps): update @apm-js-collab/code-transformer to 0.13.0 (Roch Devost) #8631328a44dd02] - (SEMVER-PATCH) ci(test-optimization): fix flaky cypress@latest before-hook timeout (Roch Devost) #86668f1897b169] - (SEMVER-PATCH) fix(ci): rerun only failed jobs for cancelled workflows in all-green (Roch Devost) #86733ed178ced1] - (SEMVER-PATCH) test(appsec): drain preload span before RASP SSRF axios tests (Roch Devost) #8652845d19d793] - (SEMVER-PATCH) ci: simplify pr-title workflow triggers and condition (Roch Devost) #86959f9bcccd44] - (SEMVER-PATCH) fix(ci): cancel running workflows on all-green timeout, reduce retries and initial delay (Roch Devost) #86745f75d2afae] - (SEMVER-PATCH) test(debugger): fix zombie processes causing flaky redact tests on Node.js 20 (Roch Devost) #866390ac905be3] - (SEMVER-MINOR) feat(openfeature): add FFE span enrichment for APM traces (Sameeran Kunche) #83430a7f3e0589] - (SEMVER-PATCH) chore(ci): fold codeowners-audit and verify-exercised-tests into npm run lint (Ruben Bridgewater) #86860bae706bec] - (SEMVER-PATCH) fix(ts): add interface DatabaseInstrumentation into v5 ts file (Pablo Erhard) #8690e2b0fdcccf] - (SEMVER-PATCH) docs(llmobs): drop restated category rules from the LLMObs skills (Ruben Bridgewater) #868711cb345d76] - (SEMVER-MINOR) feat(nats): experimental support for @nats-io/nats-core / @nats-io/transport-node (Thomas Hunter II) #860868443e431c] - (SEMVER-PATCH) ci(profiling): capture Windows crash dumps via WER LocalDumps (Attila Szegedi) #8593c7e114cb1d] - (SEMVER-PATCH) fix(debugger): generalize @-prefix ref desugaring (Thomas Watson) #86281c71ca14b7] - (SEMVER-PATCH) ci: install gpg before Codecov upload to fix intermittent failures (Roch Devost) #84871d0301cd92] - (SEMVER-PATCH) fix(oracledb): keep caller SQL when tracing is suppressed (Ruben Bridgewater) #8685e50934bc8c] - (SEMVER-PATCH) ci(test-optimization): install Chrome in Docker image for Selenium tests (Roch Devost) #86698cb2b7711f] - (SEMVER-PATCH) bench(encode): make the encoding bench reflect a real Node.js HTTP request (Ruben Bridgewater) #8668d3bea48de9] - (SEMVER-PATCH) ci(pr-title): allowbenchas a Conventional Commits type (Ruben Bridgewater) #8683d885382d88] - (SEMVER-MINOR) feat(aiguard): evaluate openai SDK calls automatically (Alberto Vara) #80535a08c20f35] - (SEMVER-MINOR) [test optimization] report ITR line coverage totals in cucumber (Juan Antonio Fernández de Alba) #845219252d91e5] - (SEMVER-PATCH) chore(ci): Download authanywhere binary over https (Rithika Narayan) #8688707b21a534] - (SEMVER-MINOR) [test optimization] prevent payload loss (Sebastián Kay) #8658a611dc5a06] - (SEMVER-MINOR) [test optimization] report ITR line coverage totals in mocha (Juan Antonio Fernández de Alba) #8450485a6474a3] - (SEMVER-MINOR) [test optimization] report TIA line coverage totals in jest (Juan Antonio Fernández de Alba) #8541aba729a656] - (SEMVER-PATCH) fix(ci): install Playwright browser dependencies (Juan Antonio Fernández de Alba) #8671664d873abb] - (SEMVER-PATCH) ci: pin all Windows runners to windows-2022 (Roch Devost) #8675e6dc6753de] - (SEMVER-PATCH) perf(pino): inject dd into the JSON line, skip the Proxy view (Ruben Bridgewater) #8501f99bb7a8f7] - (SEMVER-PATCH) fix(llmobs): cover every LLMObs span registration with OTel bridge tags (MLOS-591) (Zachary Groves)78ecd98e06] - (SEMVER-PATCH) perf(plugins/util/web): trim request-lifecycle helper work (Ruben Bridgewater) #8492f0e4773115] - (SEMVER-MINOR) feat(tracing): stamp manual spans through span.finish() resolution (Pablo Erhard) #862155ed50f87e] - (SEMVER-MINOR) feat(http,http2): apply http.endpoint and queryStringObfuscation to client spans (Ruben Bridgewater) #8407696841f8cc] - (SEMVER-PATCH) perf(graphql): tighten resolver execute hot path (Ruben Bridgewater) #84985c43988b36] - (SEMVER-PATCH) chore: update protobufjs, ttlcache, and code-transformer (Ruben Bridgewater) #865675b7743aa2] - (SEMVER-PATCH) perf(span): write tags directly on _tags in setTag and addTags (Ruben Bridgewater) #8507f9016be6a8] - (SEMVER-PATCH) perf(fastify): fast-path addHook wrapper when no parser channels have… (Ruben Bridgewater) #851633a821da2b] - (SEMVER-PATCH) chore(release): replace semver-major exclusion with only-land-on-next label (Roch Devost) #8660a8a566d308] - (SEMVER-PATCH) test(profiling): stabilize Poisson sampling filter spec (Attila Szegedi) #86595344d3f2cd] - (SEMVER-MINOR) feat: add Node.js 26 support (Ruben Bridgewater) #84292516fe8981] - (SEMVER-PATCH) ci(playwright): install libatomic for Node 26 (Juan Antonio Fernández de Alba) #8657d87533afc0] - (SEMVER-PATCH) fix(ci): add unzip to Playwright Docker image (Roch Devost) #8615a1fa4434ec] - (SEMVER-PATCH) fix(dbm): rename _dd.dbm.propagation_hash to _dd.propagated_hash (Thomas Hunter II) #86432c1d5ae3cc] - (SEMVER-PATCH) fix(plugins): scope extractIp per-plugin instead of module-level (Ruben Bridgewater) #8508fe7d7a35f2] - (SEMVER-PATCH) chore(deps-dev): bump eslint-plugin-jsdoc from 62.9.0 to 63.0.0 (dependabot[bot]) #864894c23b4bee] - (SEMVER-PATCH) chore(deps): bump the gh-actions-packages group across 3 directories with 3 updates (dependabot[bot]) #8649b210ba395b] - (SEMVER-PATCH) chore(deps): bump oxc-parser from 0.130.0 to 0.132.0 in the runtime-minor-and-patch-dependencies group across 1 directory (dependabot[bot]) #86473e7de49119] - (SEMVER-PATCH) chore(deps-dev): bump the dev-minor-and-patch-dependencies group across 1 directory with 3 updates (dependabot[bot]) #8646db4a61149f] - (SEMVER-PATCH) chore(deps): bump the serverless group across 1 directory with 13 updates (dependabot[bot]) #8645e6e0689155] - (SEMVER-MINOR) feat(dbm): add dynamic_service propagation mode (Andrea Marziali) #8592b7bbc4b6b3] - (SEMVER-PATCH) add workflow to validate pull request title and sync labels (Roch Devost) #8196c2470f1f26] - (SEMVER-PATCH) ci(node): replace version cache with pinned versions from test/plugins/versions (Roch Devost) #861749f16f10fc] - (SEMVER-PATCH) test(http2): fix flaky cancelled-request span assertion (Roch Devost) #8642fb120f1b97] - (SEMVER-PATCH) test(http2): avoid port reuse in server tests (Roch Devost) #86413e0eceb16c] - (SEMVER-PATCH) perf(profiler): skip redundant setContext under AsyncContextFrame (Attila Szegedi) #86385a0644eb21] - (SEMVER-PATCH) perf(span): fast-path setTag for the common non-sampling case (Pablo Erhard) #8640cd7fee8ce2] - (SEMVER-MINOR) feat(dns): instrument dns.promises API (Ruben Bridgewater) #8404dd068f1764] - (SEMVER-MINOR) feat(kafkajs): instrument producer.sendBatch (Ruben Bridgewater) #84038a377d11eb] - (SEMVER-PATCH) perf(mongodb): fast path sanitiseAndStringify for flat-primitive filters (Ruben Bridgewater) #85146e3846019c] - (SEMVER-PATCH) perf(router): consolidate per-request state, drop redundant ALS read (Ruben Bridgewater) #850959951d598c] - (SEMVER-PATCH) perf(propagation): cheap extract on carriers without propagation context (Ruben Bridgewater) #8511c943187407] - (SEMVER-PATCH) perf(shimmer): reuse name and length descriptor literals (Ruben Bridgewater) #85153e9c9fb635] - (SEMVER-MINOR) feat(opentracing): tag accessor API on span context + lint rule (Bryan English) #8491cd376c2cf3] - (SEMVER-MINOR) feat(oracledb): inject DBM SQL comment (Bowen Brooks) #8481a7318b6201] - (SEMVER-PATCH) chore(deps): bump @datadog/datadog-ci from 5.16.0 to 5.17.0 in /.github/actions/datadog-ci in the runtime-minor-and-patch-dependencies group across 1 directory (dependabot[bot]) #85709641153901] - (SEMVER-MINOR) test-optimization(feat): Add cypress command spans (analog to playwright steps) (Sebastián Kay) #8580491710ef63] - (SEMVER-PATCH) chore(deps): bump the test-optimization group across 1 directory with 8 updates (dependabot[bot]) #86232d3ff214fc] - (SEMVER-PATCH) chore(ci) update one-pipeline (gh-worker-campaigns-3e9aa4[bot]) #86369130e0e0c6] - (SEMVER-PATCH) fix(aws-sdk): hook @smithy/core/client.Client.send for >=3.1046 clients (Ruben Bridgewater) #8532a6e6d25603] - (SEMVER-PATCH) fix(graphql): fix field-type tag, release contexts WeakMap, and more (Ruben Bridgewater) #85029c7cde1371] - (SEMVER-PATCH) chore(test): bump mongodb to 7.2.0 and mongoose to 9.6.2 (Ruben Bridgewater) #85330518beee67] - (SEMVER-PATCH) perf(plugin): drop per-publish storage lookup and handler rest-spread (Ruben Bridgewater) #8512b032ef455d] - (SEMVER-PATCH) chore(deps): bump the ai-and-llm group across 1 directory with 4 updates (dependabot[bot]) #8632659ad0005a] - (SEMVER-PATCH) [test optimization] support playwright 1.60 with rewriter hooks (Juan Antonio Fernández de Alba) #8590e0b94eca0c] - (SEMVER-PATCH) fix(eslint): skip autofix on ${} in string literal (Thomas Watson) #8627eb74c995a9] - (SEMVER-PATCH) chore(deps): bump the ai-and-llm group across 1 directory with 10 updates (dependabot[bot]) #86248b9481fca9] - (SEMVER-PATCH) chore: deactivate eslint-require-boolean-assert-message (Ruben Bridgewater) #86205763151c0e] - (SEMVER-PATCH) test(test-optimization): replace nock with direct stub in git_metadata tests (Roch Devost) #8613b50f1cad1d] - (SEMVER-PATCH) chore(deps): bump the test-versions group across 1 directory with 2 updates (dependabot[bot]) #86224b3a0f05c4] - (SEMVER-PATCH) chore(log): drop the orphaned StructuredLogPlugin subclass (Ruben Bridgewater) #857959ea620f0d] - (SEMVER-PATCH) fix(ci): always write flakiness report and fire Slack notification (Roch Devost) #86092be6d4286e] - (SEMVER-PATCH) chore(deps): bump qs from 6.15.0 to 6.15.2 (dependabot[bot]) #8612b92c5df537] - (SEMVER-PATCH) ci(coverage): patch istanbul-lib-coverage's getLineCoverage in postinstall (Ruben Bridgewater) #8576f031818d89] - (SEMVER-PATCH) chore(ci): update dd-sts-action to v1.0.3 (Roch Devost) #8603761d5a70ba] - (SEMVER-PATCH) chore(deps): bump qs from 6.15.1 to 6.15.2 in /benchmark/sirun/startup/everything-fixture in the npm_and_yarn group across 1 directory (dependabot[bot]) #86118e57bd7d41] - (SEMVER-PATCH) fix(ci): replace setup-bun with npm install to avoid GitHub rate limits (Roch Devost) #8616de48a2db85] - (SEMVER-PATCH) fix(ci): fix azure-functions cosmosdb test regressions (Roch Devost) #86102a1b0e4e2a] - (SEMVER-PATCH) add openai error type (Sam Brenner) #8605e7f8e7a928] - (SEMVER-PATCH) fix(ci): restore azure-cosmos lint and fix electron packaging on Node 24.16+ (Roch Devost) #8604126cb67d0d] - (SEMVER-MINOR) feat(azure/cosmos): add Azure CosmosDB integration (Rithika Narayan) #7943ae4481fabb] - (SEMVER-PATCH) test(profiling): bump OOM extension size to 20MB for Node 22+ headroom (Attila Szegedi) #85649767d0f752] - (SEMVER-PATCH) ci(test-optimization): build versioned Playwright Docker image in GHCR (Roch Devost) #859445462e3600] - (SEMVER-PATCH) chore(deps-dev): bump the dev-minor-and-patch-dependencies group across 1 directory with 4 updates (dependabot[bot]) #8561eed98dab7b] - (SEMVER-PATCH) chore(deps): bump uuid from 9.0.1 to 14.0.0 in /benchmark/sirun/startup/everything-fixture in the npm_and_yarn group across 1 directory (dependabot[bot]) #859653292acb4c] - (SEMVER-PATCH) chore(deps): bump the ai-and-llm group across 1 directory with 8 updates (dependabot[bot]) #86019013e58945] - (SEMVER-PATCH) ci: work around actions/cache windows flakiness (Roch Devost) #8584526a2183c1] - (SEMVER-PATCH) fix(electron): increase assertSomeTraces timeout for IPC window tests (Roch Devost) #8597c94e32e027] - (SEMVER-PATCH) ci: only run SSI tests on master, release proposals, and labeled PRs (Roch Devost) #8485c0a31e9bcc] - (SEMVER-PATCH) ci: structured retry and longer network-timeout for CI installs (Ruben Bridgewater) #8566e385b8a047] - (SEMVER-PATCH) ci(verify-tests): flag specs no CI invocation reaches (Ruben Bridgewater) #8543625f561c5d] - (SEMVER-PATCH) perf(http-server): reuse request ctx and cache config in plugin start (Ruben Bridgewater) #8506105fdbaef1] - (SEMVER-PATCH) bump datadog/pprof (Ilyas Shabi) #8565098e20fbf8] - (SEMVER-PATCH) bump native-iast-taint-tracking (Ilyas Shabi) #8591bcf2f1dc74] - (SEMVER-PATCH) [test optimization] normalize seed suffix in test names injest(Juan Antonio Fernández de Alba) #8587600610bcaa] - (SEMVER-PATCH) chore(eslint): require messages on boolean test assertions (Thomas Watson) #85373929ed654d] - (SEMVER-PATCH) fix(electron): guard find() result and increase startApp timeout (Roch Devost) #8559ce294bf9c0] - (SEMVER-PATCH) ci: fix node version cache path on Windows (Roch Devost) #85787caa2c988a] - (SEMVER-PATCH) fix(test): retry topic creation on UNKNOWN_TOPIC_OR_PARTITION in kafkajs tests (William Conti) #8469ad4b5e7cc7] - (SEMVER-PATCH) ci: avoid Yarn quarantine for Datadog packages (Ilyas Shabi) #8577f8a60480e3] - (SEMVER-PATCH) chore: update dependabot and support ranges (Ruben Bridgewater) #8337d72f7da8c0] - (SEMVER-PATCH) chore(deps): bump the runtime-minor-and-patch-dependencies group across 1 directory with 2 updates (dependabot[bot]) #8562