Bump ddtrace from 1.5.2 to 1.6.3 in /emmet-api

[dependabot]

Bumps ddtrace from 1.5.2 to 1.6.3.

Release notes

Sourced from ddtrace's releases.

1.6.3

Bug Fixes

• httpx: Fixes an incompatibility from httpx==0.23.1 when the URL.raw property is not available.

1.6.2

Bug Fixes

• ASM: Do not raise exceptions when failing to parse XML request body.

1.6.1

Bug Fixes

• ASGI: response headers are correctly processed instead of ignored
• ASM: fix a Flask body read problem on some corner case where not passing the content length makes wsgi.input.read() blocks.
• ASM: Remove forbiddenfruit as dependency and rollback wrapt changes where forbiddenfruit was called (fixes #4484).
• IAST: Patch builtins only when IAST is enabled.
• ASM: Fix error in the agent response payload when the user disabled ASM in a dashboard using 1-click Remote Configuration.

1.6.0

Prelude

Initial library support has been added for Python 3.11. Continuous Profiler and Dynamic Instrumentation are not yet compatible and must be disabled in order to use the library with Python 3.11. Support for Continuous Profiler and Dynamic Instrumentation will be added in a future release. To track the status, see the Support Python 3.11 issue on GitHub.

Application Security Management (ASM) has added support for preventing attacks by blocking malicious IPs using one click within Datadog.

NOTE: One click activation for ASM is currently in beta.

Dynamic instrumentation allows instrumenting a running service dynamically to extract runtime information that could be useful for, e.g., debugging purposes, or to add extra metrics without having to make code changes and re-deploy the service. See https://ddtrace.readthedocs.io/en/stable/configuration.html for more details.

New Features

• ASM: add support for one click activation using Remote Configuration Management (RCM). Set DD_REMOTE_CONFIGURATION_ENABLED=true to enable this feature.
• ASM: ip address collection will be enabled if not explicitly disabled and appsec is enabled.
• tracing: HTTP query string tagged by default in http.url tag (sensitive query strings will be obfuscated).
• Django: set usr.id tag by default if request.user is authenticated.
• Introduced the public interface for the dynamic instrumentation service. See https://ddtrace.readthedocs.io/en/stable/configuration.html for more details.
• Add Span.set_tag_str() as an alternative to the overloaded functionality of Span.set_tag() when the value can be coerced to unicode text.
• Enable telemetry <Instrumentation Telemetry> collection when tracing is enabled.
• ASM: now http.client_ip and network.client.ip will only be collected if ASM is enabled.
• tracer: added support for Python 3.11.

Upgrade Notes

• Pin attrs dependency to version >=20 due to incompatibility with cattrs version 22.1.0.
• Use Span.set_tag_str() instead of Span.set_tag() when the tag value is a text type as a performance optimizations in manual instrumentation.
• Python 3.11: Continuous Profiler and Dynamic Instrumentation must be disabled as they do not currently support Python 3.11.

Bug Fixes

... (truncated)

Commits

• bb77681 chore(docs): add missing release note for #4595 (#4597) (#4601)
• 44c1fbe ci: disable broken windows profiling jobs (#4579) (#4602)
• 0b01239 fix(httpx): manually construct removed URL.raw property (#4595) (#4596)
• 6d3183d fix(asm): capture XML parsing errors on body parse (#4559) (#4574)
• 56b6086 fix(iast): forbbidenfruit package conflict (backport #4546) (#4549)
• 619db15 fix(asgi): process response header (#4443) (#4504) (#4543)
• 3963d55 fix(circleci): enable asynctest (#4531) (#4538)
• fd09a23 fix(wrapt): fix error in patching functions (backport #4514) (#4523)
• 4ddd3ca fix(rcm): disable ASM if it is disabled in the dashboard (backport #4506) (#4...
• 78a1faa ci(profiling): disable Python 3.8 and 3.9 on Windows (#4516) (#4520)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #56.