v3.38.0

Bug Fixes

• appsec: Fix SQLi location when using knex (#3607)
• appsec: Enable appsec telemetry before waf init (#3693)

Improvements

• core: Disable memcached.command by default (#3627)
• appsec: Include the extra services found in spans in the remote config client request payloads (#3635)
• telemetry: Removed old fields from Instrumentation Telemetry Metrics (#3367)
• appsec: Change source origin for URL tainted sources from HTTP_REQUEST_PATH to HTTP_REQUEST_URI (#3644)
• release: dd-trace is now published with NPM provenance statements (#3645)
• profiler: Emit sample timestamps in wall profiles (#3651)
• profiler: Code Hotspots and Endpoint Profiling can now be enabled with non-experimental env vars (#3659)
• ci-visibility: Unskippable tests by ITR: #3684, #3681, #3661 and #3649
• ci-visibility: Add support for AWS Codepipeline #3692

Features

• appsec: Support threat detection in nextjs (#3641)
• appsec Mongodb nosqli detection (#3483)