Components

Application Security Management (IAST)

• 🐛 Fix verify error when ctor params are used after a call site (#9083 - @manuel-alvarez-alvarez)
• 🐛 Limit the maximum size of the location path in IAST vulnerabilities (#9028 - @jandro996)
• 🐛 Fix IAST gRPC handler with null superclass (#8984 - @smola)
• ✨ Optimize IAST Vulnerability Detection (#8885 - @jandro996)

Application Security Management (WAF)

• ✨ Upgrade libddwaf-java to 15.0.0 (#9022 - @sezen-datadog)
• ✨ Extract RestEasy json body response schemas (#9015 - @jandro996)
• ✨ Extract Jersey json body response schemas (#9014 - @jandro996)
• ✨ Extract Ratpack json body response schemas (#9013 - @manuel-alvarez-alvarez)
• ✨ Enable API Security by default and make it lazy loading (#9009 - @smola)
• ✨ Extract Vert.x json body response schemas (#9001 - @manuel-alvarez-alvarez)
• ✨ Extract Play json body response schemas (#8995 - @manuel-alvarez-alvarez)
• 🐛 Fix Jackson nodes introspection for request/response schema extraction (#8980 - @manuel-alvarez-alvarez)
• ✨ Extract Spring json body response schemas (#8938 - @sezen-datadog)
• ✨ Default obfuscation regexp update (#8937 - @sezen-datadog)

Build & Tooling

• ✨ Cancel GitLab running pipeline on new PR push (#9023 - @PerfectSlayer)
• ✨ Migrate publishing to Maven Central Portal (#8807 - @sarahchen6)

Continuous Integration Visibility

• 🐛 Fix Test Optimization to work with JDK 24 (#9114 - @nikita-tkachenko-datadog)
• ✨ Add repo root as safe directory on git client creation (#9033 - @daniel-mohedano)
• ✨ Add PR number tag and improve PR information building (#8990 - @daniel-mohedano)
• ✨ Update impacted tests logic (#8923 - @daniel-mohedano)

Data Streams Monitoring

• 🧹 Clean up DSM context injection (#8776 - @PerfectSlayer)

Database Monitoring

• 🐛 Set trace_injected in try block (#9025 - @natashadada)

Dynamic Instrumentation

• 🐛 Add source file tracking enable option (#9115 - @jpbempel)
• ✨ Add java.util.Date support (#9111 - @jpbempel)
• ✨ Update file probe format (#9047 - @jpbempel)
• ✨ add safe local var hoisting (#9034 - @jpbempel)
• 🧹 Add new config for debugger upload interval (#8959 - @jpbempel)
• ✨ Enable Code Origin with Dynamic instrumentation (#8940 - @jpbempel)

ML Observability (LLMObs)

• 💡 LLM Observability SDK (#8781 - @gary-huang, @nayeem-kamal)

Metrics

• 🐛 Ensure client stat reporter is started when the agent is not available at bootstrap (#9082 - @amarziali)
• ✨ Create metric: appsec.waf.config_errors (#8394 - @sezen-datadog)

Platform components

• ✨ Introduce environment component (#9071 - @PerfectSlayer)

Profiling

• 🐛 Remove annoying warning for smap event parsing (#9119 - @jbachorik)
• 🐛 Fix ByteCountingInputStream when reading past EOF (#8988 - @manuel-alvarez-alvarez)

Realtime User Monitoring

• ✨ Add RUM SDK injection for servlet based web servers (#9110 - @PerfectSlayer @amarziali)

Telemetry

• ✨ Update the config origin metric to match what it's mapping (#9045 - @sezen-datadog)

Testing

• ✨ Add testing for latest stable version (JDK 24) (#8875 - @sarahchen6)

Trace context propagation

• 🐛 Fix bug with dropping baggage when TracePropagationBehaviorExtract=IGNORE (#9037 - @mhlidd)
• 🐛 Fix ArrayIndexOutOfBoundsException in PercentEscaper (#9032 - @mhlidd)

Tracer core

• 🐛 Fix Error handling for trace interceptors (#9097 - @AlexeyKuznetsov-DD)
• 💡 Add wildcard feature for DD_TRACE_HEADER_TAGS and enabling for Http Response headers (#9067 - @mhlidd)

Tracer public API

• 💡 Add LLM Observability SDK (#8781 - @gary-huang)

Instrumentations

Akka instrumentation

• 🐛 Fix NPE in akka-http and pekko-http integrations (#9019 - @mcculls)

Eclipse Vert.x instrumentation

• ✨ Extract Vert.x json body response schemas (#9001 - @manuel-alvarez-alvarez)
• ✨ Write http.route tag as soon as possible in vert.x (#8952 - @manuel-alvarez-alvarez)

JAX-WS instrumentation

• 💡⚠️ Enable jax-ws integration by default (#9030 - @bm1549)
• ✨ Extract Jersey json body response schemas (#9014 - @jandro996)

Mule instrumentation

• 🐛 Propagate grizzly http span in filters if nothing is active (#9016 - @amarziali)

Play Framework instrumentation

• ✨ Extract Play json body response schemas (#8995 - @manuel-alvarez-alvarez)

Ratpack instrumentation

• ✨ Extract Ratpack json body response schemas (#9013 - @manuel-alvarez-alvarez)

Spring instrumentation

• ✨ Extract Spring json body response schemas (#8938 - @sezen-datadog)