Potentially Breaking Changes

Components

Application Security Management (IAST)

• Add support for precise tainting of byte array objects (#6741 - @manuel-alvarez-alvarez)
• Add Lookup api support for reflection injection (#6708 - @jandro996)
• ⚡ Add bounds to all range related operations (#6698 - @manuel-alvarez-alvarez)
• ⚡ Optimizations to check if string arrays can be tainted (#6690 - @manuel-alvarez-alvarez)
• Attach values to sources coming from non char sequences (#6675 - @manuel-alvarez-alvarez)
• ⚡ Improve application module performance and security bounds (#6647 - @manuel-alvarez-alvarez)
• Add Reflection Injection support (#6622 - @jandro996)
• Partial IAST opt-out when AppSec is enabled (#6621 - @manuel-alvarez-alvarez)

Application Security Management (WAF)

• Added API Security option DD_API_SECURITY_ENABLED (#6735 - @ValentinZakharov)

Continuous Integration Visibility

• Update JUnit 4 method name extraction logic to properly handle Kotlin test names (#6751 - @nikita-tkachenko-datadog)
• Implement telemetry for early flakiness detection (#6746 - @nikita-tkachenko-datadog)
• Implement early flakiness detection (#6727 - @nikita-tkachenko-datadog)
• Make signal client timeout configurable (#6724 - @nikita-tkachenko-datadog)
• Add ITR correlator to test events (#6674 - @nikita-tkachenko-datadog)
• Implement telemetry for CI Visibility events (#6669 - @nikita-tkachenko-datadog)
• Implement telemetry for CI Visibility intakes (#6668 - @nikita-tkachenko-datadog)
• Implement telemetry for CI Visibility APIs (#6667 - @nikita-tkachenko-datadog)

Data Streams Monitoring

• Add DSM support to SNS (#6721 - @vandonr)

Dynamic Instrumentation

• Add "applicationkey" as redacted keyword (#6769 - @jpbempel)

JMX fetch

• Bump integrations-core submodule to 7.51.0 (#6750 - @mcculls)

Profiling

• Collapse implementations of timer and checkpointer interfaces into profiling context (#6738 - @richardstartin)
• Add failure to load dd profiler as periodic JFR event (#6726 - @richardstartin)
• Refactor profiling module initialisation and composition (#6719 - @richardstartin)
• Avoid permission issues for the crash uploader script (#6697 - @jbachorik)

Configuration at Runtime

• 🐛 Fix NPE on traceState() in DDSpanLink.java (#6758 - @cecile75)
• Custom Tags via Remote Config for Tracing (#6649 - @nayeem-kamal)
• Implement extra_services for remote config (#6130 - @jandro996)

Telemetry

• Implement telemetry for early flakiness detection (#6746 - @nikita-tkachenko-datadog)
• ✨ Improve dependency resolver heuristics for MANIFEST.MF (#6744 - @smola)
• 🐛 Limit DependencyResolverQueue size with a config flag (#6729 - @nayeem-kamal)
• 🐛 Fix dependency resolution for nested JARs (with fix for Spring Boot) (#6720 - @smola)
• Standardize common configuration telemetry (#6694 - @ygree)

Trace context propagation

• Support context propagation over WebSphere Axis2 transports (#6745 - @mcculls)
• ⚠️ Setting propagation style to None should extract headers and baggage (#6718 - @amarziali)

Tracer core

• 🐛 Ensure span links trace ids and attributes can't be null (#6766 - @PerfectSlayer)
• ⚠️ Setting propagation style to None should extract headers and baggage (#6718 - @amarziali)
• ⚡ Ensure superclasses and interfaces are loaded before classes that extend/implement them (#6677 - @mcculls)
• ⚡ Configure byte-buddy to use simpler method-graph (#6579 - @mcculls)

Instrumentations

Apache Spark instrumentation

• Spark Executor Tasks Instrumentation (#6515 - @paul-laffon-dd)

AWS SDK instrumentation

• Add aws.object.key tag for aws-sdk-2 (#6709 - @paul-laffon-dd)

Couchbase instrumentation

• Add option to not include Couchbase internal spans (#6763 - @brentm5 - thanks for the contribution!)

JAX-WS instrumentation

• Support context propagation over WebSphere Axis2 transports (#6745 - @mcculls)

JDBC instrumentation

• 🐛 Don't inject comment for callable JDBC statements (#6743 - @sethsamuel)

OpenTelemetry instrumentation

• 🧪 Do not generate contextStore() from OTel instrumentation if no context store is used (#6739 - @PerfectSlayer)
• 🧪 Add OpenTelemetry integrations support (#6526 - @PerfectSlayer)

Spring instrumentation

• 🧪 Spring boot: autodetect service name from environment (#6663 - @amarziali)

Other changes

• Update JNR dependencies to pick up fix for GLIBC minimum version (#6749 - @mcculls)