Skip to content

Bump ddtrace from 1.5.2 to 1.6.1 in /emmet-api#51

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/emmet-api/ddtrace-1.6.1
Closed

Bump ddtrace from 1.5.2 to 1.6.1 in /emmet-api#51
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/emmet-api/ddtrace-1.6.1

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 21, 2022

Bumps ddtrace from 1.5.2 to 1.6.1.

Release notes

Sourced from ddtrace's releases.

1.6.1

Bug Fixes

  • ASGI: response headers are correctly processed instead of ignored
  • ASM: fix a Flask body read problem on some corner case where not passing the content length makes wsgi.input.read() blocks.
  • ASM: Remove forbiddenfruit as dependency and rollback wrapt changes where forbiddenfruit was called (fixes #4484).
  • IAST: Patch builtins only when IAST is enabled.
  • ASM: Fix error in the agent response payload when the user disabled ASM in a dashboard using 1-click Remote Configuration.

1.6.0

Prelude

Initial library support has been added for Python 3.11. Continuous Profiler and Dynamic Instrumentation are not yet compatible and must be disabled in order to use the library with Python 3.11. Support for Continuous Profiler and Dynamic Instrumentation will be added in a future release. To track the status, see the Support Python 3.11 issue on GitHub.

Application Security Management (ASM) has added support for preventing attacks by blocking malicious IPs using one click within Datadog.

NOTE: One click activation for ASM is currently in beta.

Dynamic instrumentation allows instrumenting a running service dynamically to extract runtime information that could be useful for, e.g., debugging purposes, or to add extra metrics without having to make code changes and re-deploy the service. See https://ddtrace.readthedocs.io/en/stable/configuration.html for more details.

New Features

  • ASM: add support for one click activation using Remote Configuration Management (RCM). Set DD_REMOTE_CONFIGURATION_ENABLED=true to enable this feature.
  • ASM: ip address collection will be enabled if not explicitly disabled and appsec is enabled.
  • tracing: HTTP query string tagged by default in http.url tag (sensitive query strings will be obfuscated).
  • Django: set usr.id tag by default if request.user is authenticated.
  • Introduced the public interface for the dynamic instrumentation service. See https://ddtrace.readthedocs.io/en/stable/configuration.html for more details.
  • Add Span.set_tag_str() as an alternative to the overloaded functionality of Span.set_tag() when the value can be coerced to unicode text.
  • Enable telemetry <Instrumentation Telemetry> collection when tracing is enabled.
  • ASM: now http.client_ip and network.client.ip will only be collected if ASM is enabled.
  • tracer: added support for Python 3.11.

Upgrade Notes

  • Pin attrs dependency to version >=20 due to incompatibility with cattrs version 22.1.0.
  • Use Span.set_tag_str() instead of Span.set_tag() when the tag value is a text type as a performance optimizations in manual instrumentation.
  • Python 3.11: Continuous Profiler and Dynamic Instrumentation must be disabled as they do not currently support Python 3.11.

Bug Fixes

  • ASM: only report actor.ip on attack.
  • aioredis: added exception handling for CancelledError in the aioredis integration.
  • CI Visibility: fixed AppVeyor integration not extracting the full commit message.
  • Add iterable methods on TracedCursor. Previously these were not present and would cause iterable usage of cursors in DB API integrations to fail.
  • Fix parsing of the DD_TAGS environment variable value to include support for values with colons (e.g. URLs). Also fixed the parsing of invalid tags that begin with a space (e.g. DD_TAGS=" key:val" will now produce a tag with label key, instead of  key, and value val).
  • opentracing: don't raise an exception when distributed tracing headers are not present when attempting to extract.
  • sqlite3: fix error when using connection.backup method.
  • Change dependency from backport_ipaddress to ipaddress. Only install ipaddress for Python < 3.7.
  • gevent: disable gevent after fork hook which could result in a performance regression.
  • profiling: restart automatically on all Python versions.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [ddtrace](https://github.com/DataDog/dd-trace-py) from 1.5.2 to 1.6.1.
- [Release notes](https://github.com/DataDog/dd-trace-py/releases)
- [Changelog](https://github.com/DataDog/dd-trace-py/blob/1.x/CHANGELOG.md)
- [Commits](DataDog/dd-trace-py@v1.5.2...v1.6.1)

---
updated-dependencies:
- dependency-name: ddtrace
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 21, 2022
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Nov 28, 2022

Superseded by #52.

@dependabot dependabot bot closed this Nov 28, 2022
@dependabot dependabot bot deleted the dependabot/pip/emmet-api/ddtrace-1.6.1 branch November 28, 2022 13:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants