Summary
In this release, Application Performance Monitoring (APM) improved trace and span IDs generation using math/rand/v2 for Go 1.22 and later. APM introduced support for Go 1.22 ServeMux patterns and OTel env vars and better OTel HTTP status code remapping. Also, APM fixed a race condition when using spans concurrently and how dropped traces were reported to the agent.
Application Security Management (ASM) introduces its new "Exploit Prevention" in public beta, a new type of in-app security monitoring that detects and blocks vulnerability exploits. This release includes Exploit Prevention of Server-Side Request Forgeries (SSRF) for HTTP client requests.
Data Streams Monitoring (DSM) updates sketch mapping to improve accuracy and moves to google.golang.org/protobuf.
And last, multiple dependencies have been upgraded to fixed versions for reported vulnerabilities and to reduce our dependency on github.com/golang/protobuf.
Changes
Application Performance Monitoring (APM)
- go.mod: update github.com/DataDog/sketches-go to v1.4.5 by @darccio in #2698
- contrib/database/sql: allow peer.service to be set explicitly and add into propagated context by @tabgok in #2679
- contrib/net/http: Support go1.22 ServeMux patterns by @felixge in #2716
- ddtrace/tracer: use math/rand/v2 for SpanID and TraceID by @knusbaum in #2689
- ddtrace/tracer: fix concurrent map writes when applying trace sampling rules and setting tags concurrently by @darccio in #2727
- w3c: ensure _dd.parent_id is set using x-datadog-parent-id by @mabdinur in #2696
- ddtrace/tracer: increment droppedP0Traces iff it's not going to be sent by @darccio in #2713
- ddtrace/tracer: support default origin on dynamic config to support Active Tracing telemetry spec by @darccio in #2623
- ddtrace/tracer: only finish execution trace task, restore pprof labels once by @nsrip-dd in #2708
- ddtrace/tracer: add support for OTEL env vars by @mtoffl01 in #2715
- ddtrace/tracer: report trace and span sampling rules separately by @darccio in #2718
- ddtrace/opentelemetry: adds http status code remapping for otel trace metrics by @zarirhamza in #2728
Application Security Management (ASM)
- appsec: support for SSRF Exploit Prevention by @Hellzy in #2707
- appsec/grpc: fix rpc message blocking by @Julio-Guerra in #2723
Data Streams Monitoring
- Move to google.golang.org/protobuf by @piochelepiotr in #2694
- datastreams: Update mapping by @piochelepiotr in #2703
- [DSMS-19] Fix SNS topic format issue by @juliannzhou in #2725
Genera
- internal: stacktrace: skip internal packages by @eliottness in #2697
- go.mod: upgrade github.com/mattn/go-sqlite3 up to v1.14.18 (#2693) by @darccio in #2714
- go.mod: upgrade github.com/go-jose/go-jose/v3 to v3.0.3 by @darccio in #2700
- go.mod: upgrade google.golang.org/protobuf to v1.33.0 by @darccio in #2699
- go.mod: upgrade richardartoul/molecule by @darccio in #2724
New Contributors
- @juliannzhou made their first contribution in #2725
Full Changelog: v1.64.0...v1.65.0