fix(deps): update module gopkg.in/datadog/dd-trace-go.v1 to v1.47.0 #20
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![self-hosted-renovatebot[bot]](https://avatars.githubusercontent.com/u/30105612?s=60&v=4){kind=small}
self-hosted-renovatebot
bot
force-pushed
the
renovate/gopkg.in-datadog-dd-trace-go.v1-1.x
branch
3 times, most recently
from
c77e7e7
to
d42a1c9
Compare
self-hosted-renovatebot
bot
changed the title
self-hosted-renovatebot
bot
force-pushed
the
renovate/gopkg.in-datadog-dd-trace-go.v1-1.x
branch
3 times, most recently
from
bea22a3
to
9577a2c
Compare
self-hosted-renovatebot
bot
force-pushed
the
renovate/gopkg.in-datadog-dd-trace-go.v1-1.x
branch
from
9577a2c
to
d90b9a0
Compare
self-hosted-renovatebot
bot
changed the title
self-hosted-renovatebot
bot
force-pushed
the
renovate/gopkg.in-datadog-dd-trace-go.v1-1.x
branch
2 times, most recently
from
b86f426
to
eff4387
Compare
self-hosted-renovatebot
bot
force-pushed
the
renovate/gopkg.in-datadog-dd-trace-go.v1-1.x
branch
from
eff4387
to
6c7a399
Compare
Renovate Ignore NotificationAs this PR has been closed unmerged, Renovate will now ignore this update (v1.47.0). You will still receive a PR once a newer version is released, so if you wish to permanently ignore this dependency, please add it to the If this PR was closed by mistake or you changed your mind, you can simply rename this PR and you will soon get a fresh replacement PR opened. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.29.0->v1.47.0Release Notes
DataDog/dd-trace-go
v1.47.0Compare Source
Summary
In this release, Application Performance Monitoring (APM) adds W3C trace context propagation support. The new default propagation list is
tracecontext,Datadogfor injection and extraction. See the docs for more configuration details.APM also re-introduces the collection of client ip address as an opt-in feature, even when ASM isn't configured. This can be enabled by setting
DD_TRACE_CLIENT_IP_ENABLED.Application Security Management (ASM) introduces IP blocking to Gin and Echo, along with a new public API to log security-related events.
The profiler now uses the faster delta profile implementation by default, first introduced in version 1.44.0. This significantly reduces the memory allocations from profile manipulation.
Changes
Application Performance Monitoring (APM)
Application Security Management (ASM)
Profiler
Fixes
Application Performance Monitoring (APM)
Full Changelog: DataDog/dd-trace-go@v1.46.1...v1.47.0
v1.46.1Compare Source
Summary
This is a patch release containing a minor fix that ensures userinfo strings are not present in URLs sent in the
http.urltag.What's Changed
Application Performance Monitoring (APM)
Full Changelog: DataDog/dd-trace-go@v1.46.0...v1.46.1
v1.46.0Compare Source
Summary
DD_PROPAGATION_STYLE_INJECTandDD_PROPAGATION_STYLE_EXTRACTenvironment variables are now deprecated. Prefer the new environment variablesDD_TRACE_PROPAGATION_STYLE_INJECT,DD_TRACE_PROPAGATION_STYLE_EXTRACT, andDD_TRACE_PROPAGATION_STYLE(which generally applies to both inject and extract).For example, the environment variables would take the following precedence:
DD_TRACE_PROPAGATION_STYLE_INJECTDD_PROPAGATION_STYLE_INJECT(deprecated)DD_TRACE_PROPAGATION_STYLE(applies to both inject and extract)What's Changed
Full Changelog: DataDog/dd-trace-go@v1.45.1...v1.46.0
v1.45.1Compare Source
Fix the version number reported by dd-trace-go to avoid the release candidate label.
v1.45.0Compare Source
Summary
Application Security Monitoring now becomes Application Security Management (ASM) with the release of IP blocking for HTTP and gRPC servers, which allows you to block attackers based on their IP addresses, managed from your denylist. You can request a private beta access to this feature here.
Changes
Application Performance Monitoring (APM)
b3multialias forb3carrier by @katiehockman in https://github.com/DataDog/dd-trace-go/pull/1594error.msgintoerror.messageby @zhamza99 in https://github.com/DataDog/dd-trace-go/pull/1605Application Security
MonitoringManagement (ASM)Others
Fixes
Profiler
Full Changelog: DataDog/dd-trace-go@v1.44.1...v1.45.0
v1.44.1Compare Source
This patch release fixes an issue with Go modules version selection when dd-trace-go is updated using
go get -u all, where an unstable indirect dependency was unexpectedly upgrading to an incompatible version and therefore leading to a compilation error.Full Changelog: DataDog/dd-trace-go@v1.44.0...v1.44.1
v1.44.0Compare Source
Summary
This version notably brings:
gofibertrace propagation: Users of thegofiberpackage will now have fully connected traces.DD_PROFILING_DELTA_METHOD=fastdeltaenvironment variable. It will become the default in a future release.envtag to profiles unless one is explicitly configured, either through theDD_ENVenvironment variable or through theWithEnvoption. This allows profiles to be tagged with theenvvalue configured by the agent, if one is available, rather than getting the previousenv:nonedefault tag.A list of minor improvements and fixes can be found in the list below:
Changes
General
Application Performance Monitoring (APM)
Application Security Monitoring (ASM)
Profiler
Other
Fixes
Application Performance Monitoring (APM)
Application Security Monitoring (ASM)
Full Changelog: DataDog/dd-trace-go@v1.43.1...v1.44.0
v1.43.1Compare Source
Summary
The
http.client_iptag of HTTP request spans is no longer collected by Application Performance Monitoring (APM) and is now only reported by Application Security Monitoring (ASM), as part of its security monitoring metadata. If you are still interested in this feature without ASM, please file a feature request.Fixes
http.client_iponly when appsec is enabled (#1523)Full Changelog: DataDog/dd-trace-go@v1.43.0...v1.43.1
v1.43.0Compare Source
Summary
This version notably brings:
ddtrace.UseLoggerfunction can be used to configure logging for both the tracer and profiler.A couple of improvements and fixes can also be found in the list of changes below.
Changes
General
DD_TELEMETRY_HEARTBEAT_INTERVALconfiguration environment variable by @katiehockman in https://github.com/DataDog/dd-trace-go/pull/1475Application Performance Monitoring (APM)
Routefield by @bitterbit in https://github.com/DataDog/dd-trace-go/pull/1471NewServeMuxrespectsWithResourceNameroption by @mccutchen in https://github.com/DataDog/dd-trace-go/pull/1436UseLoggerpublic by @nsrip-dd in https://github.com/DataDog/dd-trace-go/pull/1466tracer.SetUseron a mockspan by @Julio-Guerra in https://github.com/DataDog/dd-trace-go/pull/1480Database Monitoring
DriverContextby @david-ds in https://github.com/DataDog/dd-trace-go/pull/1502Application Security Monitoring (ASM)
Profiler
Full Changelog: DataDog/dd-trace-go@v1.42.1...v1.43.0
v1.42.1Compare Source
Summary
This release fixes a compilation issue when building with
appsecon some macOS versions.Fixes
Application Security Monitoring (ASM)
Full Changelog: DataDog/dd-trace-go@v1.42.0...v1.42.1
v1.42.0Compare Source
Summary
This release has several exciting features:
DD_TRACE_SQL_COMMENT_INJECTION_MODEenvironment variable or via theWithSQLCommentInjection()option.WithHostnameoption for the profiler, which allows overriding the value used for the"host"tagChanges
General
APM
WithCustomTagto various integrations by @ajgajg1134 in https://github.com/DataDog/dd-trace-go/pull/1359Database Management
ASM
Profiler
Full Changelog: DataDog/dd-trace-go@v1.41.1...v1.42.0
v1.41.1Compare Source
Summary
This release fixes a bug in the
tracerlibrary which incorrectly calculated client-side stats for dropped P0 traces.Changes
Tracer
Full Changelog: DataDog/dd-trace-go@v1.41.0...v1.41.1
v1.41.0Compare Source
Summary
This release introduces rule based span sampling for the tracer which can be configured through the env var
DD_SPAN_SAMPLING_RULES. For configuration details, see the docs.Additionally it is now possible to propagate an HTTP request's user id across services when using the
SetUser()tracer function, thanks to theWithPropagation()option.Also, the tracer now flushes trace stats when stopping, and some changes to contribs were also made:
net/httpthe RoundTripper has a new option to ignore outgoing requestssegmentio/kafka.go.v0the message's topic name is used when the writer's topic name is unavailable99designs/gqlgen, basic support was added for tracing GraphQL functionsThe profiler fixed a bug which caused the first minute of activity to be missing from profiles. The profiler now respects the
DD_TRACE_STARTUP_LOGSenvironment variable, which can be set tofalseto turn off start-up logging. Profiles are now tagged with theseq_idtag, which counts how many profiles have been uploaded so far.Some more improvements and fixes can also be found in the list of changes below.
Changes
Tracer
Profiler
Full Changelog: DataDog/dd-trace-go@v1.40.1...v1.41.0
v1.40.1Compare Source
Summary
This release updates the
version.gofile so that the version is not a release candidate anymore, but a full release one.This will be reflected in the tracer's startup logs. There is no changelog since this release is just a version bump to correct the content of
version.go.v1.40.0Compare Source
Summary
This release adds the
http.urltag to the list of collected security tags (documentation). This tag will now hold the full http request's URL for server requests instead of the http request's path, so be sure to check that it doesn't break anything on your side when switching over to this version.Additionally, some more changes were made to a few contribs:
echo.v4: it is now possible to skip tracing for some endpoints using theWithIgnoreRequestoption.gocql: errors can now be selectively ignored using theWithErrorCheckoption.kafka-go: tracing of theFetchMessage()reader method is now possible.A couple of improvements and fixes can also be found in the list of changes below.
Changes
General
Tracer
ASM
Full Changelog: DataDog/dd-trace-go@v1.39.1...v1.40.0
v1.39.1Compare Source
Summary
This release fixes a bug in the
profilerlibrary which caused theservicetag to sometimes be missing from uploaded profiles. This resulted in profiles appearing on Datadog with the service nameunnamed-service.Changes
Profiler
Full Changelog: DataDog/dd-trace-go@v1.39.0...v1.39.1
v1.39.0Compare Source
Summary
With this release, the Go tracer now starts reporting a set of security monitoring tags for each server request without the need to enable ASM. Currently, the collected tags are
http.client_ip,http.useragent,http.status_codeandhttp.method, and more will come with future releases. More information about this can be found in the Datadog documentation.Other additions include a new integration for the
logruslogging package, and overriding the sampling decision of a tracein downstream services is now possible. Additionally, a new tag
aws.request_idwas added to spans for the aws-sdk-gointegration. On top of this the tracer has a new option,
WithUniversalVersion, which removes the limitation of having the service namematch the name defined when starting the tracer for version tracking.
Some more fixes and improvements were made which you can find in the changelog below.
Changes
Repo
APM
ASM
Profiler
Full Changelog: DataDog/dd-trace-go@v1.38.1...v1.39.0
v1.38.1Compare Source
This release contains a set of small fixes for Application Security Monitoring (ASM) and Profiler.
Full Changelog: DataDog/dd-trace-go@v1.38.0...v1.38.1
v1.38.0Compare Source
This release comes with new Application Security Monitoring capabilities including sensitive data obfuscation for security events, a new set of metrics to monitor the WAF execution and security rules processing, as well as the latest version of the security rules which includes NoSQL-injection monitoring.
On a side note, AppSec has been renamed to ASM (Application Security Monitoring) and will be referred to as such in the future.
On the Tracer side, the
service.nametag was removed from the spans for kubernetes and theresource.nametag is now set using the context's route for gofiber/fiber.The Profiler introduces a new
CPUProfileRateoption to allow users to use a specific CPU profiling rate.Features
Tracer
Application Security Monitoring
Profiler
Fixes
Tracer
Profiler
Full Changelog: DataDog/dd-trace-go@v1.37.1...v1.38.0
v1.37.1Compare Source
This release contains fixes to the AppSec security rules where a Local-File Injection rule has been improved in order to avoid some false positives, and the monitoring of HTTP request cookies has been temporarily disabled until the AppSec obfuscator is added in the near future to the library.
Full Changelog: DataDog/dd-trace-go@v1.37.0...v1.37.1
v1.37.0: 1.37.0Compare Source
This release comes with the new AppSec capability to monitor the parsed HTTP body thanks to a new public
appsecpackage. This package provides a function -appsec.MonitorParsedHTTPBody()- that should be called from within your http request handlers with the parsed http body payload, such as returned byjson.Unmarshal(),proto.Unmarshal()or any other parser.It also introduces support for the web framework gin, as well as the latest AppSec security rules which include the new OGNL & Cassandra injection detections.
Additionally, this update provides a new user monitoring tracing function -
tracer.SetUser()- allowing to associate user attributes to a trace. This allows to add user context to traces which can then be leveraged by Datadog's monitoring, for example by identifying the user of an AppSec attack.The profiler's code hotspots and endpoints is now enabled by default in order to connect APM traces and profiles.
Note that dd-trace-go's go.mod file has been updated to now include every dependency required by dd-trace-go and its integrations. It now lists the minimum secure versions required, according to the Go module registry of vulnerabilities.
Features
APM
x-datadog-tagsheader parser (#1155)AppSec
Profiler
v1.36.2Compare Source
This release contains a small patch that disables service propagation in the Tracer.
ddtrace/tracer: disable Datadog internal tag propagation (#1182)
To view the changes check out the list of commits
v1.36.1Compare Source
v1.36.0Compare Source
This version comes with the Application Security (AppSec) public beta which includes a broader security coverage of HTTP servers, now also extended to gRPC servers. It is powered by new security rules that allow monitoring the OWASP Top 10 attack attempts, such as SQL injections, Log4Shell and Server-Side Request Forgeries.
It also includes many APM tracing improvements, along with a fix for a regression introduced in v1.35.0.
Features
AppSec
APM Tracer
Profiler
Fixes
To view all changes check out the list of commits and the 1.36.0 milestone.
v1.35.0Compare Source
Features
Fixes
To view all changes check out new commits and the 1.35.0 milestone.
v1.34.0: 1.34.0Compare Source
This version comes with a first release of Application Security (AppSec), which includes a Web-App Firewall (WAF). You can apply to the AppSec private beta by visiting https://app.datadoghq.com/security/appsec and following the instructions detailed here.
We've also included support for
github.com/urfave/negroni, along with other enhancements and bug fixes.Features
Fixes
mongodb.query(#996)To view all changes check out new commits and the 1.34.0 milestone.
v1.33.0: 1.33.0Compare Source
This change delivers support for Delta Profiles along with a performance improvement in situations when the application generates very large traces.
Features
Fixes
To view all changes check out new commits and the 1.33.0 milestone.
v1.32.0: 1.32.0Compare Source
This version includes a new contrib integration for
github.com/aws/aws-sdk-go-v2along with some integration improvements and various fixes for the tracer and profiler. Thanks to the community for helping push this project forward! 🥇Features
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.