Merge branch 'master' of github.com:DataDog/dd-trace-dotnet into pavlo.khrebto/EX-2703/ffe-config-and-endpoint

Author: pavlokhrebto

.azure-pipelines/ultimate-pipeline.yml

@@ -121,7 +121,7 @@ variables:
   DD_INSTRUMENTATION_TELEMETRY_ENABLED: 0
   NUKE_TELEMETRY_OPTOUT: 1
   # Include all test frameworks when (variable is set) OR ((running on master/release/hotfix) and (NOT scheduled build)),
-  IncludeAllTestFrameworks: $[or(eq(variables['run_all_test_frameworks'], 'true'), and(or(in(variables['Build.SourceBranch'], 'refs/heads/master', 'refs/heads/main'), startsWith(variables['Build.SourceBranch'], 'refs/heads/release/'), startsWith(variables['Build.SourceBranch'], 'refs/heads/hostfix/')), not(eq(variables['Build.Reason'], 'Schedule'))))]
+  IncludeAllTestFrameworks: $[or(eq(variables['run_all_test_frameworks'], 'true'), and(or(in(variables['Build.SourceBranch'], 'refs/heads/master', 'refs/heads/main'), startsWith(variables['Build.SourceBranch'], 'refs/heads/release/'), startsWith(variables['Build.SourceBranch'], 'refs/heads/hotfix/')), not(eq(variables['Build.Reason'], 'Schedule'))))]
   IntegrationTestSampleName:  $(TEST_SAMPLE_NAME)
   IntegrationTestFilter:  $(TEST_FILTER)
   DockerComposeProjectName: ddtrace-$(Build.BuildNumber)

.github/CODEOWNERS

@@ -53,6 +53,7 @@
 
 ## integration tests for auto-instrumentations
 /tracer/test/Datadog.Trace.ClrProfiler.IntegrationTests/                                                @DataDog/apm-idm-dotnet  @DataDog/tracing-dotnet
+/tracer/test/Datadog.Trace.ClrProfiler.IntegrationTests/DataStreamsMonitoring*                          @DataDog/tracing-dotnet  @DataDog/data-streams-monitoring
 /tracer/test/Datadog.Trace.ClrProfiler.IntegrationTests/**/DataStreamsMonitoring*                       @DataDog/tracing-dotnet  @DataDog/data-streams-monitoring
 
 ### co-owned integrations tests

.github/actions/create-signed-pull-request/action.yml

@@ -30,6 +30,10 @@ inputs:
   reviewers:
     description: 'Comma-separated reviewers to request. GitHub usernames, not teams.'
     required: false
+  draft:
+    description: 'Whether to create the pull request as a draft.'
+    required: false
+    default: 'false'
 
 outputs:
   pull-request-number:
@@ -55,4 +59,5 @@ runs:
         body: ${{ inputs.body }}
         labels: ${{ inputs.labels }}
         reviewers: ${{ inputs.reviewers }}
+        draft: ${{ inputs.draft }}
         delete-branch: true

.github/chainguard/self.update_ffe_fixtures.create-pr.sts.yaml

@@ -0,0 +1,13 @@
+issuer: https://token.actions.githubusercontent.com
+
+subject_pattern: repo:DataDog/dd-trace-dotnet:.*
+
+claim_pattern:
+  event_name: (schedule|workflow_dispatch)
+  ref: refs/heads/master
+  ref_protected: "true"
+  job_workflow_ref: DataDog/dd-trace-dotnet/\.github/workflows/update_ffe_fixtures\.yml@refs/heads/master
+
+permissions:
+  contents: write
+  pull_requests: write

.github/workflows/update_ffe_fixtures.yml

@@ -0,0 +1,77 @@
+name: Update FFE fixtures
+
+on:
+  schedule:
+    - cron: "0 0 * * 0" # Every Sunday at midnight UTC
+  workflow_dispatch:
+    inputs:
+      fixture_ref:
+        description: Branch, tag, or commit from DataDog/ffe-system-test-data
+        required: true
+        default: main
+        type: string
+
+concurrency:
+  group: update-ffe-fixtures
+  cancel-in-progress: false
+
+jobs:
+  update_ffe_fixtures:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+
+    steps:
+      - name: Get dd-octo-sts token
+        uses: DataDog/dd-octo-sts-action@96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a # v1.0.4
+        id: octo-sts
+        with:
+          scope: DataDog/dd-trace-dotnet
+          policy: self.update_ffe_fixtures.create-pr
+
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: Update fixture snapshot
+        id: fixtures
+        env:
+          FFE_FIXTURE_REF: ${{ inputs.fixture_ref || 'main' }}
+        run: ./tracer/build.sh UpdateFfeFixtures --FfeFixtureRef "$FFE_FIXTURE_REF"
+
+      - name: Create Pull Request
+        if: steps.fixtures.outputs.changed == 'true'
+        uses: ./.github/actions/create-signed-pull-request
+        with:
+          token: ${{ steps.octo-sts.outputs.token }}
+          branch: bot/ffe-fixtures-update
+          commit-message: "test(ffe): update canonical fixtures"
+          base: master
+          title: "test(ffe): update canonical fixtures"
+          draft: true
+          labels: "area:tests,feature_flags"
+          body: |
+            ## Summary of changes
+
+            Updates the FFE tests to commit ${{ steps.fixtures.outputs.source_commit }}.
+
+            ## Reason for change
+
+            Keep dd-trace-dotnet synchronized with the canonical FFE evaluator fixtures. New fixtures may intentionally make unit tests fail when they expose evaluator bugs that must be addressed before this update is merged.
+
+            Canonical source: https://github.com/DataDog/ffe-system-test-data
+            Source commit: ${{ steps.fixtures.outputs.source_commit }}
+
+            ## Implementation details
+
+            - Refresh the checked-in FFE fixture snapshot from the canonical repository.
+            - Load ${{ steps.fixtures.outputs.fixture_count }} canonical JSON fixture cases.
+
+            ## Test coverage
+
+            The existing FFE unit tests run against the refreshed canonical fixtures.
+
+            ## Other details
+
+            Address evaluator failures in this update PR before merging it.

.gitlab/one-pipeline.locked.yml

@@ -1,5 +1,5 @@
 # DO NOT EDIT THIS FILE MANUALLY
 # This file is auto-generated by automation.
 include:
-  - remote: https://gitlab-templates.ddbuild.io/libdatadog/include/versions/1.3.0/one-pipeline.yml
+  - remote: https://gitlab-templates.ddbuild.io/libdatadog/include/versions/1.3.1/one-pipeline.yml