6.5.0

Features

• AI Guard: Evaluating anthropic calls with AI guard automatically #9219
• AI Guard: Revert "Remove Anthropic auto-instrumentation" #9495
• AppSec: Report DD_APPSEC_AGENTIC_ONBOARDING in config telemetry #9486
• ci: Add code coverage report flags #9418
• ci: Add Test Optimization validation runbook #9323
• express: Surface repeated middleware next() as a span event #9243
• Feature Flags: Support agentless feature flag configuration #9397
• frontdoor-agw: Add implementation for Azure Frontdoor and App Gateway inferred spans #9089
• graphql: Add field schema coordinates #9346
• LLM Observability: Capture audio in messages and OpenAI chat completions #9083
• LLM Observability: Control-plane HTTP client for experiments #9158
• LLM Observability: Support ai sdk v7 embedMany operations #9466
• OpenTelemetry: Correct Next.js root request span naming #9119
• Test Optimization: Upload failure screenshots #9433

Fixes

• Feature Flags: Support file-traced optional provider loading #9324
• General: Apply pm2_env env vars before tracer init #8863
• General: Preserve ESM export aliases #9436
• graphql: Preserve hook error overrides #9435
• LLM Observability: Fix infinite recursion when using BedrockChatLanguageModel #9487
• loader: Defer instrumentation graph during preload #9485
• nyc: Preserve report generation failures #9337
• standalone: Stamp _dd.apm.enabled on every exported chunk #9483
• Test Optimization: Clear policies after settings failure #9347
• Test Optimization: Harden RUM correlation failures #9408
• Test Optimization: Release removed replay probes #9336
• Test Optimization: Restore manual test context #9356
• Test Optimization: Support NODE_OPTIONS auto-instrumentation #9371
• Test Optimization: Support numeric retries with ATR #9484
• Test Optimization: Support version 13.2 #9456

Performance

• graphql: Reuse path-string cache for collapsed fields #9401

Documentation

• electron: Replace README with internal-use-only notice on publish #9407
• orchestrion: Refresh AST-rewriter reference for current engine #9133

Internal (CI, Testing, Benchmarking)

• AppSec: Deflake RASP SSRF "should not detect threat" express tests #9417
• AppSec: Drop redundant yarn install from sourcemap test #9448
• ci: Tolerate coverage preload in clean env tests #9429
• couchbase, kafkajs: Wait for client readiness #9455
• coverage: Warm source maps before process exit #9330
• Dependencies: Bump @anthropic-ai/claude-agent-sdk #9474
• Dependencies: Bump brace-expansion #9452
• Dependencies: Bump bullmq #9471
• Dependencies: Bump import-in-the-middle to 3.3.2 #9447
• Dependencies: Bump the vendor-minor-and-patch-dependencies group across 1 directory with 3 updates #9470
• electron: Give HTTP trace assertions the same timeout as IPC tests #9409
• electron: Stabilize flaky CI (install/apt retries, IPC teardown) #9316
• General: Assert DD_APPSEC_AGENTIC_ONBOARDING in v5 appsec config #9489
• General: Bind mock server to tracer address #9400
• General: Isolate span sampling rules fixture #9430
• General: Run package scripts with npm #9405
• General: Update eslint unicorn plugin to v65 #8838
• General: Update one-pipeline to 1.1.0 #9438
• General: Validate CPU percentage against process usage #9289
• init: Guard fixture source logging #9269
• LLM Observability: Bump tested openai version with new cassettes #9439
• workflows: Add dd-octo-sts chainguard policy files #8438
• workflows: Replace GITHUB_TOKEN with dd-octo-sts #8432