Components

Application Security Management (IAST)

• Extend apache commons StringEscapeUtils tainting support (#5638)
• Update IAST exclusions to not filter JSPs and hdiv related classes (#5625)
• 🐛 Fix HttpOnly cookie detection and add small refactorings (#5615)
• Implemented trust boundary violation vulnerability detection (#5612)
• Support escape functions used in OWASP Benchmark for Trust Boundary Violation (#5608)
• Add support for XSS vulnerability (#5589)
• Add String#split taint tracking (#5584)
• Add String#toCharArray taint tracking (#5576)
• Update IAST redaction algorithm (#5528)

Application Security Management (WAF)

• Upgrade to libddwaf 1.12.0/libsqreen 7.1.0 (#5658)
• 🐛 More accurately report whether the request was blocked (#5594)
• Add Fastly and CloudFlare headers to ASM attacks (#5579)
• Response substitution on undertow (#5536)
• Response header substitution in jetty (#5467)
• Automatic user events tracking (Spring Security) (#5350)

Continuous Integration Visibility

• 🐛 Close outstanding APM spans before finishing test span (#5689)
• Disable code coverage segments data gathering by default (#5627)
• Report test framework data from child processes instead of parsing project dependencies (#5613)
• Add Cucumber support to CI Visibility (#5611)
• ⚡ Replace reflection calls with method handle invocations in test utils (#5610)
• Send test session events when build system is not instrumented (#5603)
• Implement Intelligent Test Runner metadata tags (#5602)
• 🐛 Fix Maven instrumentation for parallel builds (#5598)
• 🐛 Fix TestNG instrumentation to use immutable ITestResult.getName() instead of mutable ITestResult.getTestName() (#5595)
• Pass skippable tests from parent to children with signal server (#5581)
• Support test framework version extraction for legacy TestNG (#5580)
• 🧹 Move ITR skipping logic to test events handler (#5575)
• Tag test spans with method description (#5564)
• 🧹 Split DDTestModuleImpl into parent process and child process implementations (#5549)
• Implement repository index sharing between processes (#5512)
• Update signal server and client with mechanism to send/receive signal responses (#5511)

Data Streams Monitoring

• Add DSM Context Propagation for SQS v2 (#5637)

Dynamic Instrumentation

• Fix sampling when log probe is evaluation at Exit (#5692)
• Add UDS support for the debugger by using OkHttpUtils.buildHttpClient (#5621)
• Add capture of inherited (static) fields (#5609)
• Add capture of static fields (#5588)

Metrics

• Enable/disable embedded JMXFetch with dynamic config (#5586)

Profiling

• Upgrade to ddprof 0.70.0 (#5676)
• Upgrade to ddprof 0.67.0 (#5639)
• Upgrade to ddprof 0.65.0 (#5590)
• Disable wallclock profiling during Socket.connect (#5587)
• Improve profiler config ergonomics (#5583)

Remote Configuration

• Add debug log when sending RC request (#5672)
• Enable/disable embedded JMXFetch with dynamic config (#5586)
• Avoid logging InterruptedIOExceptions from remote-config as parsing/processing failures (#5577)
• Change traceDebug with dynamic config (#5482)

Telemetry

• 🐛 Fix spans_created and spans_finished integration_name tags (#5681)
• ⚡ Fix #5640 Telemetry startup degradation (#5678)
• 🧹 Telemetry V2 preps (Serialization Refactoring) (#5640)
• 🐛 Fix span metric names for created and finished spans (#5600)

Tracer core

• Updated config parsing for integer ranges for grpc (#5683)
• Make partial flushing settings consistent with other tracer libraries (#5682)
• Only check CLIENT/SERVER_ERROR_STATUSES when we know we have a status to check (#5596)
• Support HTTP client header tagging (#5585)
• ✨ Add span links support (#5569)
• 🐛 Add config option to disable baggage as tag injection (#5563)

Instrumentations

Apache Spark instrumentation

• ✨ Capture more Spark parameters (#5630)
• ✨ Add support for spark structured streaming (#5629)
• Compute distribution of task metrics for each stage (#5542)
• Aggregate peak execution memory using the max of all stages (#5205)

AWS SDK instrumentation

• Avoid sending trace context twice when using JMS-over-SQS (#5626)

JDBC instrumentation

• 🐛 Add edb as supported postgres connection type (#5623)
• 💡 Add IBM Informix support to JDBC instrumentation (#5599)

JMS instrumentation

• Avoid sending trace context twice when using JMS-over-SQS (#5626)

Netty instrumentation

• ✨ Fix async propagation in some versions of undertow (#5649)

OpenTelemetry instrumentation

• ✨ Add support for OpenTelemetry Context.makeCurrent() (#5673)
• 🐛 Fix OpenTelemetry Context instrumentation activation (#5671)
• 🐛 Fix possible invalid parent span using OpenTelemetry API (#5644)
• 🐛 Fix empty string attribute value (#5574)

Spring instrumentation

• 💡 Add Spring Web Service error capture instrumentation (#5643)
• Instrument spring-messaging to reduce chance of disconnected traces (#5631)
• Disabling `spring-path-filter' integration should remove all path-related filters (#5578)
• Automatic user events tracking (Spring Security) (#5350)