Components

Application Security Management (IAST)

• 🐛 Fix IllegalFormatConversionException StringModuleImpl#onStringFormat (#9907 - @jandro996)

Application Security Management (WAF)

• 🐛 Fix API Security sampling in standalone mode (#10165 - @jandro996)
• ✨ AI Guard - Ensure messages are not modified before span serialization (#10116 - @manuel-alvarez-alvarez)

Build & Tooling

• ✨ Remove native libraries for unsupported environment (#10079 - @PerfectSlayer)

Configuration

• 🐛 Using stable config when a security manager is enabled should not prevent tracer startup (#10006 - @amarziali)

Continuous Integration Visibility

• ✨ Add support for Weaver Framework v0.11 (#10012 - @daniel-mohedano)

Crash Tracking

• 🐛 Don't send crash-ping to error tracking if not enabled (#10170 - @amarziali)
• ✨ Improve OOM parsing for Zulu8 (#10038 - @amarziali)
• ✨ Store some crashtracking options on initialisation (#10036 - @amarziali)
• ✨ Dual ship to error tracking (#10000 - @amarziali)

Data Streams Monitoring

• 🐛 Fix Kafka consumer instrumentation (#10100 - @piochelepiotr)

Dynamic Instrumentation

• 🐛 Fix metric expressions with @return (#10178 - @jpbempel)
• 🧹 fix method reference in comment (#10101 - @andreimatei)
• ✨ Make SymbolDB stand alone (#10064 - @jpbempel)
• 🐛 Make Code Origin fingerprint map concurrent (#10043 - @jpbempel)
• 🐛 Disable CodeOrigin by default (#10027 - @jpbempel)
• 🐛⚡ Avoid expensive Class.getMethod call in code-origin advice (#10019 - @mcculls)

Metrics

• ✨⚡ Avoid getTag overhead in ConflatingMetricsAggregator (#10070 - @amarziali)
• 🐛 Only enable client side stats if the host agent is at least 7.65.0 (#10041 - @bric3)

Platform

• ✨ Improve support for virtual thread detection (#9852 - @PerfectSlayer)

Profiling

• ✨ Bump ddprof-java to 1.34.4 (#10097 - @jbachorik)
• 🐛 Fix deadlock in dd-task-scheduler (#10096 - @rkennke)

Realtime User Monitoring

• 🐛 Filter setContentType headers (#10150 - @amarziali)
• 🐛 Prevent any Content-Length header from being set upon injection (#10081 - @amarziali)

Telemetry

• ✨ Don't send OutOfMemoryError to the telemetry (#10211 - @amarziali)

Trace context propagation

• ✨ Add context tracking support for virtual threads (#10040 - @PerfectSlayer)

Tracer core

• ✨ Don't send IO failures to telemetry logs (#10210 - @amarziali)
• 🐛 Avoid NPE on BaseDecorator (#10209 - @amarziali)
• ✨⚡ Support aot_training mode to be used when creating AOT caches (#10166 - @mcculls)
• ✨⚡ Optimize TagMap lookup & insertion for String literals (#10138 - @dougqh)
• 🐛 Remove colons from process tags values (#10109 - @vandonr)
• 🐛 Fix field-injection of ForkJoinTask on Java 25 (#10084 - @mcculls)
• ✨⚡ Use ClassLoaderValues to track class-loader state (#10075 - @mcculls)
• ✨⚡ Add primitive setters to DDSpanContext to take advantage of TagMap (#10018 - @dougqh)
• 🐛 Safely handle Files.exist on discovery and config when a Security Manager is present (#10009 - @amarziali)
• ✨⚡ Avoid SpanBuilder allocation for startSpan (#9998 - @dougqh)
• ✨ Add request-id to lambda start/end invocation calls (#9991 - @ojproductions)
• ✨⚡ Use ClassLoaderIndex to index class-loader related information (#9980 - @mcculls)
• ⚡🧹 Use ClassNameFilter to track uninteresting classes (#9976 - @mcculls)
• ✨⚡ Reduce PendingTrace Lock Contention (#9932 - @dougqh)
• ✨ Remove dependency on memfd_create for service discovery (#9913 - @raphaelgavache)

Instrumentations

Apache Spark instrumentation

• 🐛 Support Spark 4.1 by removing mention to StreamExecution class (#10228 - @aboitreaud)
• ✨ Duplicate service name in meta so it's not truncated in spark integration (#10063 - @aboitreaud)
• ✨ Add dd_tags into djm.tags spark.application span attribute (#10004 - @pawel-big-lebowski)

AWS SDK instrumentation

• 💡 Add inject Datadog attribute config (#9943 - @ojproductions)

Core Java language instrumentation

• ✨ Add context tracking support for virtual threads (#10040 - @PerfectSlayer)

JDBC instrumentation

• 🐛 Log injection issues in JDBC only once + promote to WARN (#10214 - @vandonr)
• 💡 Add a feature flag to disable extra calls to the DB in JDBC instrumentation (#9774 - @vandonr)

Kafka instrumentation

• 🐛 Fix Kafka consumer instrumentation (#10100 - @piochelepiotr)
• 🐛 Extract trace context from Kafka producer record headers (#10020 - @PlugaruT - thanks for the contribution!)

Servlet instrumentation

• 🐛 Avoid NPE when enumerating servlet headers (#10213 - @amarziali)

Spring instrumentation

• 🐛 Make spring-webflux instrumentation compatible with 7.0.0 (#10110 - @amarziali)

All other instrumentations

• 🐛 Avoid NPE on QuartzDecorator (#10181 - @amarziali)
• 🐛 Avoid NPE when setting resource with null path (#10180 - @amarziali)
• 🐛 Fix VerifyError when instrumenting org.apache.synapse.transport.passthru.SourceHandler (#10154 - @mcculls)
• 🐛 Ensure compatibility with jboss modules 2.2 (#10111 - @amarziali)