chore(ci): bump the gh-actions-packages group with 3 updates by dependabot[bot] · Pull Request #11114 · DataDog/dd-trace-java

dependabot · 2026-04-14T17:27:24Z

Bumps the gh-actions-packages group with 3 updates: actions/github-script, DataDog/commit-headless and actions/upload-artifact.

Updates actions/github-script from 8.0.0 to 9.0.0

Release notes

Sourced from actions/github-script's releases.

v9.0.0

New features:

getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.

Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.

getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.

If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

Add ACTIONS_ORCHESTRATION_ID to user-agent string by @Copilot in actions/github-script#695

ci: use deployment: false for integration test environments by @salmanmkc in actions/github-script#712

feat!: add getOctokit to script context, upgrade @actions/github v9, @octokit/core v7, and related packages by @salmanmkc in actions/github-script#700

New Contributors

@Copilot made their first contribution in actions/github-script#695

Full Changelog: actions/github-script@v8.0.0...v9.0.0

Commits

3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...
ca10bbd fix: use @octokit/core/types import for v7 compatibility
86e48e2 merge: incorporate main branch changes
c108472 chore: rebuild dist for v9 upgrade and getOctokit factory
afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...
ff8117e ci: fix user-agent test to handle orchestration ID
81c6b78 ci: use deployment: false to suppress deployment noise from integration tests
3953caf docs: update README examples from @v8 to @v9, add getOctokit docs and v9 brea...
c17d55b ci: add getOctokit integration test job
a047196 test: add getOctokit integration tests via callAsyncFunction
Additional commits viewable in compare view

Updates DataDog/commit-headless from 2.0.3 to 3.2.0

Changelog

Sourced from DataDog/commit-headless's changelog.

Changelog

v3.0.0

Breaking Changes

push command no longer accepts commit arguments: The push command now automatically determines which local commits need to be pushed by comparing local HEAD with the remote branch HEAD. Previously, you could specify which commits to push as arguments. If the remote HEAD is not an ancestor of local HEAD, the push will fail due to diverged history.

commit command no longer accepts file arguments: The commit command now reads from staged changes (via git add), similar to how git commit works. Previously, you had to specify the list of files to include in the commit. Stage your changes first, then run the command.

Action inputs removed:

commits input removed from push (commits are now auto-detected)

files input removed from commit (files are now read from staging area)

Features

New replay command: Replays existing remote commits as signed commits. Useful when a bot or action creates unsigned commits that you want to replace with signed versions. The command fetches the remote, extracts commits since a specified base, recreates them as signed, and force-updates the branch.

File mode preservation: Executable bits and other file modes are now preserved when pushing commits. Previously all files were created with mode 100644.

GitHub Actions logging: When running in GitHub Actions, output now uses workflow commands for better integration:

Commit operations are grouped for cleaner logs

Success/failure notices appear in the workflow summary

Warnings and errors use appropriate annotation levels

REST API: Switched from GraphQL API to REST API internally, enabling file mode support and improved error handling.

Other Changes

Added CI test workflow that runs integration tests on pull requests

Release workflow now verifies binaries on both amd64 and arm64 before releasing

Commits

ad36686 action: fix: encode binary content over rest api with base64 instead of utf-8...
8fca57d action: chore: bump deps, including Go toolchain (#51)
3b0f460 action: feat: use GraphQL when possible, fall back to REST if necessary (#46)
3e3353f action: release!: v3 (#37)
See full diff in compare view

Updates actions/upload-artifact from 7.0.0 to 7.0.1

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.1

What's Changed

Update the readme with direct upload details by @danwkennedy in actions/upload-artifact#795

Readme: bump all the example versions to v7 by @danwkennedy in actions/upload-artifact#796

Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in actions/upload-artifact#797

Full Changelog: actions/upload-artifact@v7...v7.0.1

Commits

043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
634250c Include changes in typespec/ts-http-runtime 0.3.5
e454baa Readme: bump all the example versions to v7 (#796)
74fad66 Update the readme with direct upload details (#795)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

pr-commenter · 2026-04-14T19:06:11Z

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	dependabot/github_actions/gh-actions-packages-8042785ad2
git_commit_date	1776382763	1776411984
git_commit_sha	`8b1580f`	`4fea5cb`
release_version	1.62.0-SNAPSHOT~8b1580f2ad	1.62.0-SNAPSHOT~4fea5cbbb1

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1776413764	1776413764
ci_job_id	1604455022	1604455022
ci_pipeline_id	108174970	108174970
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-1-snc56voh 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-1-snc56voh 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module	Agent	Agent
parent	None	None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 64 metrics, 7 unstable metrics.

Startup time reports for petclinic

gantt
    title petclinic - global startup overhead: candidate=1.62.0-SNAPSHOT~4fea5cbbb1, baseline=1.62.0-SNAPSHOT~8b1580f2ad

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.062 s) : 0, 1061659
Total [baseline] (11.069 s) : 0, 11069213
Agent [candidate] (1.061 s) : 0, 1060881
Total [candidate] (11.106 s) : 0, 11106009
section appsec
Agent [baseline] (1.247 s) : 0, 1247334
Total [baseline] (11.132 s) : 0, 11132113
Agent [candidate] (1.247 s) : 0, 1246603
Total [candidate] (11.121 s) : 0, 11121482
section iast
Agent [baseline] (1.233 s) : 0, 1233015
Total [baseline] (11.331 s) : 0, 11331083
Agent [candidate] (1.237 s) : 0, 1236625
Total [candidate] (11.445 s) : 0, 11445022
section profiling
Agent [baseline] (1.195 s) : 0, 1194546
Total [baseline] (11.12 s) : 0, 11120082
Agent [candidate] (1.191 s) : 0, 1190575
Total [candidate] (11.121 s) : 0, 11121437

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.062 s	-
Agent	appsec	1.247 s	185.676 ms (17.5%)
Agent	iast	1.233 s	171.356 ms (16.1%)
Agent	profiling	1.195 s	132.887 ms (12.5%)
Total	tracing	11.069 s	-
Total	appsec	11.132 s	62.9 ms (0.6%)
Total	iast	11.331 s	261.871 ms (2.4%)
Total	profiling	11.12 s	50.869 ms (0.5%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.061 s	-
Agent	appsec	1.247 s	185.722 ms (17.5%)
Agent	iast	1.237 s	175.744 ms (16.6%)
Agent	profiling	1.191 s	129.694 ms (12.2%)
Total	tracing	11.106 s	-
Total	appsec	11.121 s	15.472 ms (0.1%)
Total	iast	11.445 s	339.013 ms (3.1%)
Total	profiling	11.121 s	15.427 ms (0.1%)

gantt
    title petclinic - break down per module: candidate=1.62.0-SNAPSHOT~4fea5cbbb1, baseline=1.62.0-SNAPSHOT~8b1580f2ad

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.24 ms) : 0, 1240
crashtracking [candidate] (1.228 ms) : 0, 1228
BytebuddyAgent [baseline] (636.628 ms) : 0, 636628
BytebuddyAgent [candidate] (635.381 ms) : 0, 635381
AgentMeter [baseline] (29.71 ms) : 0, 29710
AgentMeter [candidate] (29.412 ms) : 0, 29412
GlobalTracer [baseline] (249.08 ms) : 0, 249080
GlobalTracer [candidate] (249.125 ms) : 0, 249125
AppSec [baseline] (32.306 ms) : 0, 32306
AppSec [candidate] (32.447 ms) : 0, 32447
Debugger [baseline] (60.065 ms) : 0, 60065
Debugger [candidate] (59.923 ms) : 0, 59923
Remote Config [baseline] (598.651 µs) : 0, 599
Remote Config [candidate] (595.474 µs) : 0, 595
Telemetry [baseline] (8.088 ms) : 0, 8088
Telemetry [candidate] (8.073 ms) : 0, 8073
Flare Poller [baseline] (7.521 ms) : 0, 7521
Flare Poller [candidate] (8.264 ms) : 0, 8264
section appsec
crashtracking [baseline] (1.234 ms) : 0, 1234
crashtracking [candidate] (1.221 ms) : 0, 1221
BytebuddyAgent [baseline] (660.835 ms) : 0, 660835
BytebuddyAgent [candidate] (660.041 ms) : 0, 660041
AgentMeter [baseline] (12.05 ms) : 0, 12050
AgentMeter [candidate] (12.09 ms) : 0, 12090
GlobalTracer [baseline] (248.678 ms) : 0, 248678
GlobalTracer [candidate] (248.314 ms) : 0, 248314
AppSec [baseline] (185.096 ms) : 0, 185096
AppSec [candidate] (185.178 ms) : 0, 185178
Debugger [baseline] (65.992 ms) : 0, 65992
Debugger [candidate] (66.272 ms) : 0, 66272
Remote Config [baseline] (629.977 µs) : 0, 630
Remote Config [candidate] (610.879 µs) : 0, 611
Telemetry [baseline] (8.341 ms) : 0, 8341
Telemetry [candidate] (8.498 ms) : 0, 8498
Flare Poller [baseline] (3.542 ms) : 0, 3542
Flare Poller [candidate] (3.548 ms) : 0, 3548
IAST [baseline] (24.53 ms) : 0, 24530
IAST [candidate] (24.427 ms) : 0, 24427
section iast
crashtracking [baseline] (1.229 ms) : 0, 1229
crashtracking [candidate] (1.245 ms) : 0, 1245
BytebuddyAgent [baseline] (806.654 ms) : 0, 806654
BytebuddyAgent [candidate] (807.222 ms) : 0, 807222
AgentMeter [baseline] (11.523 ms) : 0, 11523
AgentMeter [candidate] (11.531 ms) : 0, 11531
GlobalTracer [baseline] (240.29 ms) : 0, 240290
GlobalTracer [candidate] (241.654 ms) : 0, 241654
AppSec [baseline] (32.489 ms) : 0, 32489
AppSec [candidate] (32.904 ms) : 0, 32904
Debugger [baseline] (64.758 ms) : 0, 64758
Debugger [candidate] (65.667 ms) : 0, 65667
Remote Config [baseline] (551.915 µs) : 0, 552
Remote Config [candidate] (559.98 µs) : 0, 560
Telemetry [baseline] (9.462 ms) : 0, 9462
Telemetry [candidate] (9.578 ms) : 0, 9578
Flare Poller [baseline] (3.614 ms) : 0, 3614
Flare Poller [candidate] (3.588 ms) : 0, 3588
IAST [baseline] (26.004 ms) : 0, 26004
IAST [candidate] (26.268 ms) : 0, 26268
section profiling
ProfilingAgent [baseline] (95.111 ms) : 0, 95111
ProfilingAgent [candidate] (94.396 ms) : 0, 94396
crashtracking [baseline] (1.189 ms) : 0, 1189
crashtracking [candidate] (1.191 ms) : 0, 1191
BytebuddyAgent [baseline] (696.455 ms) : 0, 696455
BytebuddyAgent [candidate] (696.57 ms) : 0, 696570
AgentMeter [baseline] (9.201 ms) : 0, 9201
AgentMeter [candidate] (9.092 ms) : 0, 9092
GlobalTracer [baseline] (208.699 ms) : 0, 208699
GlobalTracer [candidate] (207.109 ms) : 0, 207109
AppSec [baseline] (33.261 ms) : 0, 33261
AppSec [candidate] (32.873 ms) : 0, 32873
Debugger [baseline] (66.635 ms) : 0, 66635
Debugger [candidate] (65.664 ms) : 0, 65664
Remote Config [baseline] (592.225 µs) : 0, 592
Remote Config [candidate] (582.364 µs) : 0, 582
Telemetry [baseline] (7.907 ms) : 0, 7907
Telemetry [candidate] (7.793 ms) : 0, 7793
Flare Poller [baseline] (3.579 ms) : 0, 3579
Flare Poller [candidate] (3.541 ms) : 0, 3541
Profiling [baseline] (95.693 ms) : 0, 95693
Profiling [candidate] (94.959 ms) : 0, 94959

Startup time reports for insecure-bank

gantt
    title insecure-bank - global startup overhead: candidate=1.62.0-SNAPSHOT~4fea5cbbb1, baseline=1.62.0-SNAPSHOT~8b1580f2ad

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.061 s) : 0, 1061274
Total [baseline] (8.877 s) : 0, 8877243
Agent [candidate] (1.056 s) : 0, 1055837
Total [candidate] (8.866 s) : 0, 8865708
section iast
Agent [baseline] (1.241 s) : 0, 1240575
Total [baseline] (9.612 s) : 0, 9612490
Agent [candidate] (1.223 s) : 0, 1222703
Total [candidate] (9.563 s) : 0, 9562968

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.061 s	-
Agent	iast	1.241 s	179.301 ms (16.9%)
Total	tracing	8.877 s	-
Total	iast	9.612 s	735.247 ms (8.3%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.056 s	-
Agent	iast	1.223 s	166.866 ms (15.8%)
Total	tracing	8.866 s	-
Total	iast	9.563 s	697.26 ms (7.9%)

gantt
    title insecure-bank - break down per module: candidate=1.62.0-SNAPSHOT~4fea5cbbb1, baseline=1.62.0-SNAPSHOT~8b1580f2ad

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.228 ms) : 0, 1228
crashtracking [candidate] (1.234 ms) : 0, 1234
BytebuddyAgent [baseline] (634.331 ms) : 0, 634331
BytebuddyAgent [candidate] (632.918 ms) : 0, 632918
AgentMeter [baseline] (29.522 ms) : 0, 29522
AgentMeter [candidate] (29.389 ms) : 0, 29389
GlobalTracer [baseline] (249.706 ms) : 0, 249706
GlobalTracer [candidate] (248.821 ms) : 0, 248821
AppSec [baseline] (32.663 ms) : 0, 32663
AppSec [candidate] (32.336 ms) : 0, 32336
Debugger [baseline] (59.712 ms) : 0, 59712
Debugger [candidate] (58.969 ms) : 0, 58969
Remote Config [baseline] (602.087 µs) : 0, 602
Remote Config [candidate] (588.585 µs) : 0, 589
Telemetry [baseline] (8.18 ms) : 0, 8180
Telemetry [candidate] (7.99 ms) : 0, 7990
Flare Poller [baseline] (9.087 ms) : 0, 9087
Flare Poller [candidate] (7.377 ms) : 0, 7377
section iast
crashtracking [baseline] (1.272 ms) : 0, 1272
crashtracking [candidate] (1.262 ms) : 0, 1262
BytebuddyAgent [baseline] (813.849 ms) : 0, 813849
BytebuddyAgent [candidate] (799.534 ms) : 0, 799534
AgentMeter [baseline] (11.771 ms) : 0, 11771
AgentMeter [candidate] (11.389 ms) : 0, 11389
GlobalTracer [baseline] (241.664 ms) : 0, 241664
GlobalTracer [candidate] (238.662 ms) : 0, 238662
AppSec [baseline] (32.25 ms) : 0, 32250
AppSec [candidate] (30.626 ms) : 0, 30626
Debugger [baseline] (63.526 ms) : 0, 63526
Debugger [candidate] (65.606 ms) : 0, 65606
Remote Config [baseline] (546.7 µs) : 0, 547
Remote Config [candidate] (550.699 µs) : 0, 551
Telemetry [baseline] (9.364 ms) : 0, 9364
Telemetry [candidate] (9.512 ms) : 0, 9512
Flare Poller [baseline] (3.591 ms) : 0, 3591
Flare Poller [candidate] (3.551 ms) : 0, 3551
IAST [baseline] (26.057 ms) : 0, 26057
IAST [candidate] (25.807 ms) : 0, 25807

Load

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	dependabot/github_actions/gh-actions-packages-8042785ad2
git_commit_date	1776382763	1776411984
git_commit_sha	`8b1580f`	`4fea5cb`
release_version	1.62.0-SNAPSHOT~8b1580f2ad	1.62.0-SNAPSHOT~4fea5cbbb1

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1776414145	1776414145
ci_job_id	1604455023	1604455023
ci_pipeline_id	108174970	108174970
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-1-8xji5dad 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-1-8xji5dad 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 2 performance improvements and 2 performance regressions! Performance is the same for 16 metrics, 16 unstable metrics.

scenario	Δ mean agg_http_req_duration_p50	Δ mean agg_http_req_duration_p95	Δ mean throughput	candidate mean agg_http_req_duration_p50	candidate mean agg_http_req_duration_p95	candidate mean throughput	baseline mean agg_http_req_duration_p50	baseline mean agg_http_req_duration_p95	baseline mean throughput
scenario:load:petclinic:no_agent:high_load	worse [+1.301ms; +2.649ms] or [+7.762%; +15.802%]	unstable [+1.176ms; +4.139ms] or [+4.148%; +14.591%]	unstable [-57.075op/s; +1.450op/s] or [-21.134%; +0.537%]	18.736ms	31.022ms	242.250op/s	16.761ms	28.365ms	270.062op/s
scenario:load:petclinic:iast:high_load	worse [+422.435µs; +1232.200µs] or [+2.382%; +6.947%]	unsure [+152.202µs; +1543.373µs] or [+0.523%; +5.305%]	unstable [-38.017op/s; +17.455op/s] or [-14.760%; +6.777%]	18.565ms	29.939ms	247.281op/s	17.738ms	29.092ms	257.562op/s
scenario:load:petclinic:tracing:high_load	better [-1.845ms; -1.031ms] or [-9.882%; -5.524%]	better [-2.507ms; -1.243ms] or [-8.367%; -4.148%]	unstable [-9.401op/s; +46.963op/s] or [-3.822%; +19.096%]	17.229ms	28.094ms	264.719op/s	18.667ms	29.969ms	245.938op/s

Request duration reports for petclinic

gantt
    title petclinic - request duration [CI 0.99] : candidate=1.62.0-SNAPSHOT~4fea5cbbb1, baseline=1.62.0-SNAPSHOT~8b1580f2ad
    dateFormat X
    axisFormat %s
section baseline
no_agent (17.275 ms) : 17104, 17446
.   : milestone, 17275,
appsec (18.651 ms) : 18462, 18841
.   : milestone, 18651,
code_origins (17.951 ms) : 17774, 18128
.   : milestone, 17951,
iast (18.114 ms) : 17934, 18293
.   : milestone, 18114,
profiling (19.233 ms) : 19042, 19424
.   : milestone, 19233,
tracing (18.975 ms) : 18787, 19164
.   : milestone, 18975,
section candidate
no_agent (19.272 ms) : 19073, 19471
.   : milestone, 19272,
appsec (18.846 ms) : 18657, 19035
.   : milestone, 18846,
code_origins (17.653 ms) : 17479, 17827
.   : milestone, 17653,
iast (18.868 ms) : 18679, 19057
.   : milestone, 18868,
profiling (18.57 ms) : 18386, 18754
.   : milestone, 18570,
tracing (17.62 ms) : 17449, 17792
.   : milestone, 17620,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	17.275 ms [17.104 ms, 17.446 ms]	-
appsec	18.651 ms [18.462 ms, 18.841 ms]	1.376 ms (8.0%)
code_origins	17.951 ms [17.774 ms, 18.128 ms]	676.095 µs (3.9%)
iast	18.114 ms [17.934 ms, 18.293 ms]	838.717 µs (4.9%)
profiling	19.233 ms [19.042 ms, 19.424 ms]	1.958 ms (11.3%)
tracing	18.975 ms [18.787 ms, 19.164 ms]	1.7 ms (9.8%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	19.272 ms [19.073 ms, 19.471 ms]	-
appsec	18.846 ms [18.657 ms, 19.035 ms]	-425.379 µs (-2.2%)
code_origins	17.653 ms [17.479 ms, 17.827 ms]	-1.619 ms (-8.4%)
iast	18.868 ms [18.679 ms, 19.057 ms]	-403.683 µs (-2.1%)
profiling	18.57 ms [18.386 ms, 18.754 ms]	-701.772 µs (-3.6%)
tracing	17.62 ms [17.449 ms, 17.792 ms]	-1.651 ms (-8.6%)

Request duration reports for insecure-bank

gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.62.0-SNAPSHOT~4fea5cbbb1, baseline=1.62.0-SNAPSHOT~8b1580f2ad
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.252 ms) : 1240, 1264
.   : milestone, 1252,
iast (3.298 ms) : 3252, 3344
.   : milestone, 3298,
iast_FULL (5.946 ms) : 5886, 6006
.   : milestone, 5946,
iast_GLOBAL (3.723 ms) : 3662, 3784
.   : milestone, 3723,
profiling (2.105 ms) : 2086, 2124
.   : milestone, 2105,
tracing (1.929 ms) : 1910, 1947
.   : milestone, 1929,
section candidate
no_agent (1.237 ms) : 1225, 1249
.   : milestone, 1237,
iast (3.28 ms) : 3234, 3326
.   : milestone, 3280,
iast_FULL (5.98 ms) : 5920, 6041
.   : milestone, 5980,
iast_GLOBAL (3.66 ms) : 3599, 3721
.   : milestone, 3660,
profiling (2.219 ms) : 2198, 2240
.   : milestone, 2219,
tracing (1.872 ms) : 1857, 1887
.   : milestone, 1872,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.252 ms [1.24 ms, 1.264 ms]	-
iast	3.298 ms [3.252 ms, 3.344 ms]	2.046 ms (163.5%)
iast_FULL	5.946 ms [5.886 ms, 6.006 ms]	4.695 ms (375.1%)
iast_GLOBAL	3.723 ms [3.662 ms, 3.784 ms]	2.471 ms (197.4%)
profiling	2.105 ms [2.086 ms, 2.124 ms]	853.388 µs (68.2%)
tracing	1.929 ms [1.91 ms, 1.947 ms]	676.824 µs (54.1%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.237 ms [1.225 ms, 1.249 ms]	-
iast	3.28 ms [3.234 ms, 3.326 ms]	2.043 ms (165.2%)
iast_FULL	5.98 ms [5.92 ms, 6.041 ms]	4.743 ms (383.5%)
iast_GLOBAL	3.66 ms [3.599 ms, 3.721 ms]	2.423 ms (195.9%)
profiling	2.219 ms [2.198 ms, 2.24 ms]	982.274 µs (79.4%)
tracing	1.872 ms [1.857 ms, 1.887 ms]	634.713 µs (51.3%)

Dacapo

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	dependabot/github_actions/gh-actions-packages-8042785ad2
git_commit_date	1776382763	1776411984
git_commit_sha	`8b1580f`	`4fea5cb`
release_version	1.62.0-SNAPSHOT~8b1580f2ad	1.62.0-SNAPSHOT~4fea5cbbb1

See matching parameters

	Baseline	Candidate
application	biojava	biojava
ci_job_date	1776414162	1776414162
ci_job_id	1604455024	1604455024
ci_pipeline_id	108174970	108174970
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-2-o56h3gzy 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-2-o56h3gzy 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics.

Execution time for biojava

gantt
    title biojava - execution time [CI 0.99] : candidate=1.62.0-SNAPSHOT~4fea5cbbb1, baseline=1.62.0-SNAPSHOT~8b1580f2ad
    dateFormat X
    axisFormat %s
section baseline
no_agent (14.999 s) : 14999000, 14999000
.   : milestone, 14999000,
appsec (14.708 s) : 14708000, 14708000
.   : milestone, 14708000,
iast (18.563 s) : 18563000, 18563000
.   : milestone, 18563000,
iast_GLOBAL (18.113 s) : 18113000, 18113000
.   : milestone, 18113000,
profiling (15.181 s) : 15181000, 15181000
.   : milestone, 15181000,
tracing (15.122 s) : 15122000, 15122000
.   : milestone, 15122000,
section candidate
no_agent (14.903 s) : 14903000, 14903000
.   : milestone, 14903000,
appsec (14.807 s) : 14807000, 14807000
.   : milestone, 14807000,
iast (18.509 s) : 18509000, 18509000
.   : milestone, 18509000,
iast_GLOBAL (18.06 s) : 18060000, 18060000
.   : milestone, 18060000,
profiling (15.0 s) : 15000000, 15000000
.   : milestone, 15000000,
tracing (14.944 s) : 14944000, 14944000
.   : milestone, 14944000,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	14.999 s [14.999 s, 14.999 s]	-
appsec	14.708 s [14.708 s, 14.708 s]	-291.0 ms (-1.9%)
iast	18.563 s [18.563 s, 18.563 s]	3.564 s (23.8%)
iast_GLOBAL	18.113 s [18.113 s, 18.113 s]	3.114 s (20.8%)
profiling	15.181 s [15.181 s, 15.181 s]	182.0 ms (1.2%)
tracing	15.122 s [15.122 s, 15.122 s]	123.0 ms (0.8%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	14.903 s [14.903 s, 14.903 s]	-
appsec	14.807 s [14.807 s, 14.807 s]	-96.0 ms (-0.6%)
iast	18.509 s [18.509 s, 18.509 s]	3.606 s (24.2%)
iast_GLOBAL	18.06 s [18.06 s, 18.06 s]	3.157 s (21.2%)
profiling	15.0 s [15.0 s, 15.0 s]	97.0 ms (0.7%)
tracing	14.944 s [14.944 s, 14.944 s]	41.0 ms (0.3%)

Execution time for tomcat

gantt
    title tomcat - execution time [CI 0.99] : candidate=1.62.0-SNAPSHOT~4fea5cbbb1, baseline=1.62.0-SNAPSHOT~8b1580f2ad
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.498 ms) : 1486, 1510
.   : milestone, 1498,
appsec (3.85 ms) : 3628, 4073
.   : milestone, 3850,
iast (2.272 ms) : 2203, 2341
.   : milestone, 2272,
iast_GLOBAL (2.326 ms) : 2257, 2396
.   : milestone, 2326,
profiling (2.102 ms) : 2047, 2157
.   : milestone, 2102,
tracing (2.088 ms) : 2034, 2141
.   : milestone, 2088,
section candidate
no_agent (1.49 ms) : 1479, 1502
.   : milestone, 1490,
appsec (3.835 ms) : 3611, 4058
.   : milestone, 3835,
iast (2.282 ms) : 2213, 2351
.   : milestone, 2282,
iast_GLOBAL (2.321 ms) : 2251, 2390
.   : milestone, 2321,
profiling (2.109 ms) : 2054, 2164
.   : milestone, 2109,
tracing (2.079 ms) : 2026, 2133
.   : milestone, 2079,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.498 ms [1.486 ms, 1.51 ms]	-
appsec	3.85 ms [3.628 ms, 4.073 ms]	2.352 ms (157.0%)
iast	2.272 ms [2.203 ms, 2.341 ms]	774.067 µs (51.7%)
iast_GLOBAL	2.326 ms [2.257 ms, 2.396 ms]	828.472 µs (55.3%)
profiling	2.102 ms [2.047 ms, 2.157 ms]	603.837 µs (40.3%)
tracing	2.088 ms [2.034 ms, 2.141 ms]	589.588 µs (39.4%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.49 ms [1.479 ms, 1.502 ms]	-
appsec	3.835 ms [3.611 ms, 4.058 ms]	2.344 ms (157.3%)
iast	2.282 ms [2.213 ms, 2.351 ms]	791.574 µs (53.1%)
iast_GLOBAL	2.321 ms [2.251 ms, 2.39 ms]	830.548 µs (55.7%)
profiling	2.109 ms [2.054 ms, 2.164 ms]	619.045 µs (41.5%)
tracing	2.079 ms [2.026 ms, 2.133 ms]	589.106 µs (39.5%)

PerfectSlayer · 2026-04-15T09:37:15Z

/merge

gh-worker-devflow-routing-ef8351 · 2026-04-15T09:37:20Z

View all feedbacks in Devflow UI.

2026-04-15 09:37:19 UTC ℹ️ Start processing command /merge

2026-04-15 09:37:30 UTC ℹ️ MergeQueue: waiting for PR to be ready

This pull request is not mergeable according to GitHub. Common reasons include pending required checks, missing approvals, or merge conflicts — but it could also be blocked by other repository rules or settings.
It will be added to the queue as soon as checks pass and/or get approvals. View in MergeQueue UI.
Note: if you pushed new commits since the last approval, you may need additional approval.
You can remove it from the waiting list with /remove command.

2026-04-15 13:40:21 UTC ⚠️ MergeQueue: This merge request was unqueued

devflow unqueued this merge request: It did not become mergeable within the expected time

Bumps the gh-actions-packages group with 3 updates: [actions/github-script](https://github.com/actions/github-script), [DataDog/commit-headless](https://github.com/datadog/commit-headless) and [actions/upload-artifact](https://github.com/actions/upload-artifact). Updates `actions/github-script` from 8.0.0 to 9.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@ed59741...3a2844b) Updates `DataDog/commit-headless` from 2.0.3 to 3.2.0 - [Changelog](https://github.com/DataDog/commit-headless/blob/main/CHANGELOG.md) - [Commits](DataDog/commit-headless@05d7b7e...ad36686) Updates `actions/upload-artifact` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@bbbca2d...043fb46) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions-packages - dependency-name: DataDog/commit-headless dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions-packages - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions-packages ... Signed-off-by: dependabot[bot] <support@github.com>

PerfectSlayer · 2026-04-17T07:50:32Z

Rebased on top of master to give CI another try

PerfectSlayer · 2026-04-17T08:51:03Z

/merge

gh-worker-devflow-routing-ef8351 · 2026-04-17T08:51:08Z

View all feedbacks in Devflow UI.

2026-04-17 08:51:08 UTC ℹ️ Start processing command /merge

2026-04-17 08:51:12 UTC ℹ️ MergeQueue: pull request added to the queue

The expected merge time in master is approximately 2h (p90).

2026-04-17 10:00:51 UTC ℹ️ MergeQueue: This merge request was merged

dependabot Bot added comp: tooling Build & Tooling tag: dependencies Dependencies related changes tag: no release notes Changes to exclude from release notes labels Apr 14, 2026

dependabot Bot requested a review from a team as a code owner April 14, 2026 17:27

dependabot Bot added the tag: no release notes Changes to exclude from release notes label Apr 14, 2026

dependabot Bot requested review from bric3 and removed request for a team April 14, 2026 17:27

dependabot Bot added tag: dependencies Dependencies related changes comp: tooling Build & Tooling labels Apr 14, 2026

PerfectSlayer approved these changes Apr 15, 2026

View reviewed changes

PerfectSlayer force-pushed the dependabot/github_actions/gh-actions-packages-8042785ad2 branch from b43f1bd to 4fea5cb Compare April 17, 2026 07:46

gh-worker-dd-mergequeue-cf854d Bot merged commit 11f3ec9 into master Apr 17, 2026
747 of 749 checks passed

gh-worker-dd-mergequeue-cf854d Bot deleted the dependabot/github_actions/gh-actions-packages-8042785ad2 branch April 17, 2026 10:00

github-actions Bot added this to the 1.62.0 milestone Apr 17, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(ci): bump the gh-actions-packages group with 3 updates#11114

chore(ci): bump the gh-actions-packages group with 3 updates#11114
gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit intomasterfrom
dependabot/github_actions/gh-actions-packages-8042785ad2

dependabot Bot commented on behalf of github Apr 14, 2026

Uh oh!

pr-commenter Bot commented Apr 14, 2026 •

edited

Loading

Uh oh!

PerfectSlayer commented Apr 15, 2026

Uh oh!

gh-worker-devflow-routing-ef8351 Bot commented Apr 15, 2026 •

edited

Loading

Uh oh!

PerfectSlayer commented Apr 17, 2026 •

edited

Loading

Uh oh!

PerfectSlayer commented Apr 17, 2026

Uh oh!

gh-worker-devflow-routing-ef8351 Bot commented Apr 17, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Apr 14, 2026

v9.0.0

What's Changed

New Contributors

Changelog

v3.0.0

Breaking Changes

Features

Other Changes

v7.0.1

What's Changed

Uh oh!

pr-commenter Bot commented Apr 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Benchmarks

Startup

Parameters

Summary

Load

Parameters

Summary

Dacapo

Parameters

Summary

Uh oh!

PerfectSlayer commented Apr 15, 2026

Uh oh!

gh-worker-devflow-routing-ef8351 Bot commented Apr 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

PerfectSlayer commented Apr 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

PerfectSlayer commented Apr 17, 2026

Uh oh!

gh-worker-devflow-routing-ef8351 Bot commented Apr 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

pr-commenter Bot commented Apr 14, 2026 •

edited

Loading

gh-worker-devflow-routing-ef8351 Bot commented Apr 15, 2026 •

edited

Loading

PerfectSlayer commented Apr 17, 2026 •

edited

Loading

gh-worker-devflow-routing-ef8351 Bot commented Apr 17, 2026 •

edited

Loading