New Features
- Code Security: to enable IAST in the application, you had to start it with the command
ddtrace-run [your-application-run-command]so far. Now, you can also activate IAST with thepatch_allfunction.
Bug Fixes
- Code Security: fix setting the wrong source on map elements tainted from taint_structure.
- Code Security: Fixes an issue where the AST patching process fails when the origin of a module is reported as None, raising a
FileNotFoundError. - CI Visibility: fixes an issue where tests were less likely to be skipped due to ITR skippable tests requests timing out earlier than they should
- Code Security: Fixed an issue with AES functions from the pycryptodome package that caused the application to crash and stop.
- kafka: This fix resolves an issue where an empty message list returned from consume calls could cause crashes in the Kafka integration. Empty lists from consume can occur when the call times out.
- ASM: This fix removes unrequired API security metrics.
- instrumentation: fixes crashes that could occur in certain integrations with packages that use non-integer components in their version specifiers