ddtrace 2.16.1

on Python PyPI

Bug Fixes

• Code Security

  • The new user events policy is preventing users PII to be added by default as span tags. To allow customers using the Django auto instrumentation to still have those information, new environment variables have been added. In particular DD_DJANGO_INCLUDE_EMAIL (false by default), will tag user events with user email as before.
  • Add googlecloudsdk and google auth to the Code Security deny list.

• Crashtracking

  • Fixes an issue where the use of the crashtracking component could result in zombie processes.

• Lib-Injection

  • This fix adds more commands to the auto-injection denylist.
  • This fix ensures we do not import the user installed ddtrace if it is present.

• LLM Observability

  • Resolves an issue where annotating spans with non-ASCII language input/output values resulted in encoded unicode being submitted.

• Profiling

  • Fixes an issue where cpu-time was not profiled for services using gunicorn, when DD_PROFILING_STACK_V2_ENABLED was set.
  • Fixes an issue where the profiler was allocating too much memory from ensure_binary_or_empty() function, on Python versions before 3.12, with DD_PROFILING_EXPORT_LIBDD_ENABLED or DD_PROFILING_TIMELINE_ENABLED.
  • Fixes an issue where the sample pool could deadlock after fork() by clearing it in the child process.