6.25.0

Features

• AI Guard: Add custom span tags to evaluate #10964
• async-mutex: Add tracing integration #11160
• Feature Flags: Add flag selection provider option #11121
• LLM Observability: Instrument ElevenLabs Agents WebSocket conversations #10988
• LLM Observability: Report Realtime audio, text, image and cached token usage #10547
• LLM Observability: Trace Agents SDK realtime sideband calls #10896
• OpenTelemetry: Implement OTel HTTP semantic conventions for span status #11103
• OpenTelemetry: Report effective SDK startup configuration #10810
• Serverless: Add migration lifecycle and configuration foundation #10488
• Test Optimization: Add known-tests pagination metrics #9305
• trpc: Trace server procedures and name Express requests #10499

Fixes

• AppSec: Keep the blocking status code when it is rewritten after a block #11132
• AppSec: Keep tracing working when IAST fails to start #11201
• Feature Flags: Fail initialization at once without an agentless API key #11111
• General: Align distribution sketch relative accuracy #11138
• General: Apply OTel HTTP policy before sampling #10881
• General: Distinguish default and configured error status ranges #10895
• General: Isolate prepared request options #10214
• General: Keep loader entrypoints working without module.register #11163
• General: Prioritize dd in oversized tracestate #10503
• google-cloud-pubsub: Preserve batch trace metadata #11144
• graphql: Compile default arguments with graphql-jit 0.9.4 #11089
• graphql: Restore GraphQL 17 tracing and signatures #11090
• ioredis: Avoid duplicate spans without mutating commands #11051
• LLM Observability: Carried the experiment tags to child spans in order to display roll up in experiment run #11151
• LLM Observability: Count thinking, tool-use and cached tokens for @google/genai #11012
• LLM Observability: Include expected output on experiment spans #11065
• next: Name image optimizer request spans #11098
• OpenTelemetry: Preserve HTTP URL attributes #11097
• OpenTelemetry: Preserve HTTP URL attributes #11097
• OpenTelemetry: Require explicit opt-in for APM RED metrics #11105
• OpenTelemetry: Support API 1.10 and SDK 0.300 #11091
• prisma: Honor client and engine span options #11178
• Profiling: Disable allocation profiling by default #11189
• sampling: Use the lower 64 bits of 128-bit trace IDs #11143
• Test Optimization: Align test annotation tags with Ruby #11220
• Test Optimization: Use the tested checkout for Git metadata and repository root #11115

Performance

• AppSec: Run the WAF once per argument-less GraphQL field per request #10978
• AppSec: Skip empty GraphQL resolver inputs when rules allow #10996
• General: Cache package versions per hook #11192
• Test Optimization: Skip security and LLMObs initialization #11167

Internal (CI, Testing, Benchmarking)

• agents: Require PR contents to serve the PR title #10028
• AppSec: Tie GraphQL blocked-trace assertions to their own request #11140
• AppSec: Upddate appsec-event-rules to v1.19.0 #10995
• aws-sdk: Pace kinesis readiness polling #11043
• aws-sdk: Preserve s3 trace observation window #10943
• aws-sdk: Stop expecting clock-skew poisoning from @aws-sdk/core 3.980.2 #11147
• benchmarks: Refresh image inputs and reuse Poetry #11000
• bundlers: Extract shared bundler instrumentation and helpers #11002
• ci: Rename dependencyName to libraryName in supported versions #11120
• Dependencies: Bump pprof-format from 2.3.2 to 2.4.0 in /vendor in the vendor-minor-and-patch-dependencies group across 1 directory #11195
• docs: Require evidence for special input option support #11088
• elasticsearch: Compile fixtures before loading dependencies #11174
• elasticsearch: Stabilize garbage collection in serialization benchmarks #11135
• General: Accept POST trace intake in test agents #9720
• General: Add supported version generator #9763
• General: Enable merge queue status labels #11100
• General: Pin compatible Azure HTTP dependencies #11134
• General: Run elevenlabs APM tests in the LLMObs workflow #11185
• General: Simplify merge queue configuration #11076
• General: Test durable execution SDK 3, pino-pretty 13 and redis 5+ #11183
• General: Update one-pipeline version #11141
• google-genai: Pin API version for VCR replay #11149
• grpc: Avoid sandbox fixture copy race #11041
• llm: Correct configuration criteria and clarify promise rules #11118
• next: Await server teardown #11044
• pr-title: Simplify label synchronization #11075
• Profiling: Bump profiler to 5.20.1 #11219
• sirun: Log CPU contention when a variant exceeds the time limit #11161
• Test Optimization: Align ATR collection timeouts #11022
• Test Optimization: Await test management child exit #11021
• Test Optimization: Isolate output dirs of programmatic rerun scenarios #11096
• Test Optimization: Isolate output dirs of test management runs #11139
• Test Optimization: Remove agent debugging runbook #11157
• Test Optimization: Support latest framework releases #11114
• vendor: Include transitive dependency licenses #11102
• webdriverio: Load runtime setup through rewrite activation #10654
• workflows: Limit inline JavaScript in GitHub Actions YAML #11085

Contributors