Changes

Core

• Skip dropped upstream_services tag value validation #3794

Integrations

• Add missing argument constraint to ThreadPoolExecutorInstrumentation.execute #3844
• Added v3 class names for MariaDB Connector/J #3799
• Introduced GraphQL integration #3703
• Record storage class for S3 PutObject requests #3835

Performance

• Avoid these Instrumenter anonymous inner classes… #3860
• Simplify Muzzle side-classes to make them easier to unload... #3854
• Separate optimising class-loader matchers from required matchers #3802
• Rework context store injection #3797
• Simplify Throwable instrumentation as its target is a known-type #3796
• Introduce class loader masks #3789
• Turn off URL connection cache when locating class resources… #3843

Profiling

• Disabled jdk.ExceptionStatistics event which can be confusing #3882
• Added direct allocation profiling #3817
• Upload profile on JVM exit #3763

AppSec

• Updated AppSec rules (v1.4.0) #3841
• Updated AppSec WAF to 1.5.0 #3795
• Apply AppSec instrumentation if remote config is enabled #3642

Debugger

• Rename debugger config properties #3839

IAST

• Add manual.keep tag when a vulnerability is reported #3850
• Fix weak cipher vulnerability detection #3807
• Standarise IAST config flags #3783
• Adding _dd.iast.enabled flag to span during request end event #3780