Components
Application Security Management (IAST)
- 🐛 Exclude com.stripe.net.HttpURLConnectionClient to solve IAST SSRF vulnerability false positives (#8483 - @jandro996)
- 🐛 Add exclusion to solve IAST weak randomness vulnerability false positives (#8462 - @jandro996)
- ✨ Fix weak randomness false positive in Kafka client (#8408 - @smola)
- ✨ Fix location for SSRF with Kong Unirest (#8407 - @smola)
- ✨ Exclude IBM Instana from IAST (#8406 - @smola)
- 🐛 Fix org.json iast instrumentation test for latest dependency (#8347 - @jandro996)
- ✨ Configuration to Disable APM Tracing (#8219 - @jandro996)
- ✨ Address cookie vulnerability cardinality issues (#8210 - @jandro996)
- ✨ Email HTML Injection detection in IAST (#8205 - @sezen-datadog)
Application Security Management (WAF)
- 🐛✨ Ensure usr.exists tag is not overridden when UsernameNotFoundException is thrown (#8376 - @manuel-alvarez-alvarez)
- 🐛✨ Ensure usr.exists tag is not overridden by auto instrumentation (#8374 - @manuel-alvarez-alvarez)
- ✨ Update appsec metrics with event_rules_version tag (#8354 - @sezen-datadog)
- ✨ Update metrics: appsec.waf.requests (#8353 - @Mariovido)
- ✨ Improve ASM support in vert.x 5.0 (#8285 - @manuel-alvarez-alvarez)
- ✨ Update metrics: appsec.waf.updates and appsec.waf.init (#8280 - @Mariovido)
- ✨ Configuration to Disable APM Tracing (#8219 - @jandro996)
Build & Tooling
- 🐛 Do not generate Muzzle references for primitive arrays in method body (#8361 - @amarziali)
- 📖 Improve dev env setup documentation for Windows (#8180 - @lucaspimentel)
Continuous Integration Visibility
- ✨ Add support for skip-EFD tagging (#8487 - @nikita-tkachenko-datadog)
- 🐛 Fix an NPE in Gradle Android instrumentation (#8484 - @nikita-tkachenko-datadog)
- ✨ Consider modified tests when applying fail-fast tests ordering (#8474 - @nikita-tkachenko-datadog)
- ✨ Implement tests reordering for TestNG (#8467 - @nikita-tkachenko-datadog)
- 🐛 Fix Gradle Launcher instrumentation to not interfere with Gradle Test Kit (#8465 - @nikita-tkachenko-datadog)
- 🧹 Use separate TestEventHandlers per framework in CI Vis instrumentations (#8451 - @daniel-mohedano)
- ✨ Remove warning log when JUnit 4 test method cannot be retrieved (#8445 - @nikita-tkachenko-datadog)
- 🐛 Fix Scalatest tracing for tests that are reported asynchronously (#8444 - @nikita-tkachenko-datadog)
- ✨ Implement attempt to fix tests (#8393 - @daniel-mohedano)
- ✨ Implement test disabling (#8377 - @daniel-mohedano)
- ✨ Update CODEOWNERS parser to not log errors on comments with leading whitespace (#8349 - @nikita-tkachenko-datadog)
- ✨ Request Test Management tests list (#8345 - @daniel-mohedano)
- ✨ Receive test management settings from CIVis settings request (#8331 - @daniel-mohedano)
- ✨ Implement quarantined tests tagging (#8326 - @nikita-tkachenko-datadog)
- ✨ Implement tests quarantining (#8320 - @nikita-tkachenko-datadog)
- ✨ Add tag to specify if the user is setting DD_SERVICE (#8318 - @daniel-mohedano)
Crash tracking
- ✨ Only fork jps when required (#8419 - @mcculls)
- 🐛 Use Java home of the crashed process to launch crash uploader (#8348 - @jbachorik)
Data Streams Monitoring
- 🐛 Fix error happening when sqs message attributes are readonly (#8473 - @vandonr)
- 🐛 Fix bug on proto schema extraction (#8403 - @vandonr)
- 🐛 Fix service name overrides in consumers (#8387 - @piochelepiotr)
Database Monitoring
Dynamic Instrumentation
- ✨ Look in another location for grpc service methods (#8468 - @evanchooly)
- 🐛 Fix Exception Replay with Lambda proxy classes (#8452 - @jpbempel)
- ✨ Add code origin support for spring-webmvc (#8416 - @evanchooly)
- ✨ Add support for scanning jar from loaded class (#8370 - @jpbempel)
- 🐛 Disable capture of entry values (#8369 - @jpbempel)
- 🐛 Fix CodeOrigin for
@Traceannotation (#8344 - @jpbempel) - 🐛 Fix equals/hashCode for CodeOrigin probe (#8319 - @jpbempel)
- ✨ Add code origin support to kafka message listeners (#8301 - @evanchooly)
Metrics
- ✨ Create metric: appsec.waf.error (#8381 - @sezen-datadog)
- ✨ Create metric: appsec.rasp.error (#8364 - @sezen-datadog)
Profiling
- ✨ Bump ddprof library to 1.22.0 (#8463 - @jbachorik)
- IBM J9 8u361 corresponds to OpenJDK 8u362 by @jbachorik in DataDog/java-profiler#187
- Fix compatibility with musl libc 1.2.4 by @jbachorik in DataDog/java-profiler#189
- Modify version extraction by @jbachorik in DataDog/java-profiler#179
- Do not write null values to jvminfo event by @jbachorik in DataDog/java-profiler#184
- Productize VMStructs-based stack walker by @jbachorik in DataDog/java-profiler#177
- A few minor downport issues by @jbachorik in DataDog/java-profiler#180
- Enable ASGCT by default on fairly safe J9 JDK versions by @jbachorik in DataDog/java-profiler#181
- 🐛 Exclude OrderedThreadPoolExecutor from queue-time measurements (#8456 - @jbachorik)
- ✨ Record JVM info on JVMs without JFR (#8431 - @jbachorik)
- 🐛 Actually use CleanupTask in TempLocationManager (#8420 - @mcculls)
- ✨ Only fork jps when required (#8419 - @mcculls)
- 🐛 Adjust JFR checks for J9 (#8405 - @jbachorik)
- 🧹 Disable smap RSS parsing by default (#8342 - @MattAlp)
Telemetry
- 🐛 Add support for JBoss jar:file format to DependencyResolver (#8428 - @jandro996)
- ✨ Update metrics: appsec.waf.requests (#8353 - @Mariovido)
Trace context propagation
- ✨ Introduce tracing propagator (#8313 - @PerfectSlayer)
Tracer core
- 🐛 Fix Stable Config telemetry source names (#8460 - @BaptisteFoy)
- ✨ Probe trace endpoints with a valid payload of empty arrays (#8414 - @mcculls)
- ✨ Add 1 minute fail-safe to JUL/JMX class-loading callback (#8399 - @mcculls)
- ✨ Migrate DSM injection calls to context-first APIs (#8383 - @PerfectSlayer)
- 🧹 Move continuation capture methods from scope to tracer (#8371 - @mcculls)
- ✨ Migrate context extraction calls to context-first APIs (#8368 - @PerfectSlayer)
- 🧹 Migrate context injection calls to context-first APIs (#8358 - @PerfectSlayer)
- 💡 Support reading configurations from files (#8338 - @mtoffl01)
- 💡 Implementation of BaggagePropagator and BaggageContext (#8330 - @mhlidd)
- 🧹 Combine continuation implementations into one which supports multiple activations (#8324 - @mcculls)
- ✨ Introduce tracing propagator (#8313 - @PerfectSlayer)
- ✨ Remove old context propagation API (#8271 - @PerfectSlayer)
Instrumentations
AWS Lambda instrumentation
AWS SDK instrumentation
- 🐛 Fix error happening when sqs message attributes are readonly (#8473 - @vandonr)
- 💡 Inject trace context into AWS Step Functions input (#7585 - @DylanLovesCoffee)
Core Java language instrumentation
- ✨ Look in another location for grpc service methods (#8468 - @evanchooly)
- ✨ Add code origin support for spring-webmvc (#8416 - @evanchooly)
- 💡 Implementation of BaggagePropagator and BaggageContext (#8330 - @mhlidd)
- ✨ Add code origin support to kafka message listeners (#8301 - @evanchooly)
gRPC instrumentation
- ✨ Look in another location for grpc service methods (#8468 - @evanchooly)
Kafka instrumentation
- ✨ Add messaging.destination.name tag to kafka integrations (#8366 - @rarguelloF)