fix missing pprof dependency

[rochdev]

What does this PR do?

Fix missing @datadog/pprof dependency.

Motivation

Removing optional dependencies broke profiling since @datadog/pprof is now an optional dependency.

Testing Guidelines

Good question 😅 This should be caught by CI but it doesn't seem profiling is tested in CI.

Additional Notes

Types of Changes

• Bug fix
• New feature
• Breaking change
• Misc (docs, refactoring, dependency upgrade, etc.)

Check all that apply

• This PR's description is comprehensive
• This PR contains breaking changes that are documented in the description
• This PR introduces new APIs or parameters that are documented and unlikely to change in the foreseeable future
• This PR impacts documentation, and it has been updated (or a ticket has been logged)
• This PR's changes are covered by the automated tests
• This PR collects user input/sensitive content into Datadog
• This PR passes the integration tests (ask a Datadog member to run the tests)

[BridgeAR]

Can we not just define it as regular dependency? Similar with dd-trace?

[rochdev]

This is so that it resolves to the version transitively installed by dd-trace.

[rochdev]

And for dd-trace, it shouldn't be a regular dependency because if you don't need profiling there is no reason to install it. Ideally we'd have a better modularized project that ships each package individually and then have top level packages that only include what they need, but right now optional dependencies seem like the easiest way to achieve something similar.

[BridgeAR]

Thinking about it: this would change the behavior compared to before. We pinned pprof and profiling does not want to get auto updates. So if I am not mistaken, we could end up installing a newer version than the one in dd-trace.

[rochdev]

This should use the pinned version no? The package manager will resolve, realize that the pinned version fulfills both ranges, and use that for both.

[BridgeAR]

I am uncertain how this install works here. It seems to be copied and it does not end up as regular dependency, so you are probably correct.

[ojproductions]

lgtm