Skip to content

v5.96.0 proposal#7948

Merged
sabrenner merged 16 commits intov5.xfrom
v5.96.0-proposal
Apr 8, 2026
Merged

v5.96.0 proposal#7948
sabrenner merged 16 commits intov5.xfrom
v5.96.0-proposal

Conversation

@dd-octo-sts
Copy link
Copy Markdown
Contributor

@dd-octo-sts dd-octo-sts bot commented Apr 8, 2026

  • [7d5fa996bb] - (SEMVER-PATCH) ci(llmobs): fix test failing on v5 branch (Sam Brenner) #7951
  • [c04b08e755] - (SEMVER-PATCH) chore: bump import-in-the-middle to 3.0.1 (Sam Brenner) #7947
  • [fd74461d92] - (SEMVER-PATCH) chore(deps): bump the test-versions group across 3 directories with 6 updates (dependabot[bot]) #7934
  • [c097033479] - (SEMVER-PATCH) fix(llmobs): log at startup instead of throwing for invalid initializations (Sam Brenner) #7885
  • [91fa0f8ccf] - (SEMVER-PATCH) chore(deps): bump the gh-actions-packages group across 4 directories with 3 updates (dependabot[bot]) #7939
  • [90758aeac8] - (SEMVER-PATCH) [incident-52391][SINT-5091] Use dd-sts for secrets, with split policies (Kylian Serrania) #7924
  • [9a3cd3b465] - (SEMVER-PATCH) feat(lambda): skip flushInterval=0 and use agent exporter when mini agent is present (Tianning Li) #7584
  • [efc96812a0] - (SEMVER-PATCH) ci: adjust SLO calculation for being less flaky (Fayssal DEFAA) #7930
  • [5e5ba433ea] - (SEMVER-PATCH) [test optimization] Fix bug that makes some tags not visible on mocha tests with hooks (Sebastián Kay) #7912
  • [a3baec5b21] - (SEMVER-PATCH) Revert "chore: use dd-sts for secrets" (Sam Brenner) #7940
  • [dba55f50f7] - (SEMVER-PATCH) [test optimization] Pin office-addin-mock dependency (Juan Antonio Fernández de Alba) #7931
  • [3126529555] - (SEMVER-MINOR) [test optimization] Add better support for lage (Juan Antonio Fernández de Alba) #7920
  • [c32e8a6c6a] - (SEMVER-PATCH) feat(aiguard): Evaluating vercel-ai calls with AI guard automatically (Ilyas Shabi) #7798
  • [ba2d007271] - (SEMVER-PATCH) chore(deps): bump lodash from 4.17.23 to 4.18.1 (dependabot[bot]) #7927
  • [6afb4f9ed2] - (SEMVER-PATCH) chore: use dd-sts for secrets (Bryan English) #7924

bengl and others added 9 commits April 8, 2026 05:38
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.23...4.18.1)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…#7798)

* feat(aiguard): Evaluating vercel-ai calls with AI guard automatically
…gent is present (#7584)

Adds DATADOG_MINI_AGENT_PATH constant (/tmp/datadog/mini_agent_ready) to
detect Lambda Lite + mini agent environments. In that setup:
- flushInterval is left at its default (batching is safe; flushInterval=0
  would saturate the 8-request exporter limit)
- The agent exporter is selected instead of the log exporter, same as when
  the Datadog Lambda Extension is present
@dd-octo-sts dd-octo-sts bot mentioned this pull request Apr 8, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 8, 2026

Overall package size

Self size: 5.48 MB
Deduped: 6.33 MB
No deduping: 6.33 MB

Dependency sizes | name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 3.0.1 | 82.56 kB | 817.39 kB | | dc-polyfill | 0.1.10 | 26.73 kB | 26.73 kB |

🤖 This report was automatically generated by heaviest-objects-in-the-universe

@codecov
Copy link
Copy Markdown

codecov bot commented Apr 8, 2026

Codecov Report

❌ Patch coverage is 34.85714% with 114 lines in your changes missing coverage. Please review.
✅ Project coverage is 71.60%. Comparing base (6b35e7d) to head (c9162d4).
⚠️ Report is 851 commits behind head on v5.x.

Files with missing lines Patch % Lines
...atadog-instrumentations/src/helpers/ai-messages.js 1.66% 59 Missing ⚠️
packages/datadog-instrumentations/src/ai.js 37.50% 30 Missing ⚠️
packages/dd-trace/src/aiguard/index.js 60.71% 11 Missing ⚠️
...ckages/datadog-instrumentations/src/mocha/utils.js 0.00% 5 Missing ⚠️
packages/dd-trace/src/ci-visibility/lage.js 75.00% 3 Missing ⚠️
packages/dd-trace/src/llmobs/index.js 50.00% 3 Missing ⚠️
packages/dd-trace/src/startup-log.js 0.00% 3 Missing ⚠️
Additional details and impacted files
@@             Coverage Diff             @@
##             v5.x    #7948       +/-   ##
===========================================
- Coverage   83.19%   71.60%   -11.60%     
===========================================
  Files         476      768      +292     
  Lines       20153    36066    +15913     
===========================================
+ Hits        16766    25824     +9058     
- Misses       3387    10242     +6855     
Flag Coverage Δ
aiguard-macos 39.36% <50.00%> (?)
aiguard-ubuntu 39.48% <50.00%> (?)
aiguard-windows 39.18% <50.00%> (?)
apm-capabilities-tracing-macos 49.56% <69.64%> (?)
apm-integrations-child-process 38.66% <50.00%> (?)
apm-integrations-couchbase-18 37.47% <50.00%> (?)
apm-integrations-couchbase-eol 37.84% <50.00%> (?)
apm-integrations-oracledb 37.82% <50.00%> (?)
appsec-express 55.34% <50.00%> (?)
appsec-fastify 51.68% <50.00%> (?)
appsec-graphql 51.84% <50.00%> (?)
appsec-kafka 44.42% <50.00%> (?)
appsec-ldapjs 44.07% <50.00%> (?)
appsec-lodash 43.67% <50.00%> (?)
appsec-macos 58.02% <30.30%> (?)
appsec-mongodb-core 48.85% <50.00%> (?)
appsec-mongoose 49.51% <50.00%> (?)
appsec-mysql 51.02% <50.00%> (?)
appsec-node-serialize 43.25% <50.00%> (?)
appsec-passport 47.71% <50.00%> (?)
appsec-postgres 50.64% <50.00%> (?)
appsec-sourcing 42.50% <50.00%> (?)
appsec-stripe 44.69% <50.00%> (?)
appsec-template 43.41% <50.00%> (?)
instrumentations-instrumentation-bluebird 32.30% <50.00%> (?)
instrumentations-instrumentation-body-parser 40.59% <50.00%> (?)
instrumentations-instrumentation-child_process 38.02% <50.00%> (?)
instrumentations-instrumentation-cookie-parser 34.33% <50.00%> (?)
instrumentations-instrumentation-express 34.65% <50.00%> (?)
instrumentations-instrumentation-express-mongo-sanitize 34.46% <50.00%> (?)
instrumentations-instrumentation-express-session 40.22% <50.00%> (?)
instrumentations-instrumentation-fs 31.98% <50.00%> (?)
instrumentations-instrumentation-generic-pool 29.38% <19.04%> (?)
instrumentations-instrumentation-http 39.94% <50.00%> (?)
instrumentations-instrumentation-knex 32.36% <50.00%> (?)
instrumentations-instrumentation-mongoose 33.48% <50.00%> (?)
instrumentations-instrumentation-multer 40.34% <50.00%> (?)
instrumentations-instrumentation-mysql2 38.36% <50.00%> (?)
instrumentations-instrumentation-passport 44.12% <50.00%> (?)
instrumentations-instrumentation-passport-http 43.79% <50.00%> (?)
instrumentations-instrumentation-passport-local 44.33% <50.00%> (?)
instrumentations-instrumentation-pg 37.79% <50.00%> (?)
instrumentations-instrumentation-promise 32.23% <50.00%> (?)
instrumentations-instrumentation-promise-js 32.23% <50.00%> (?)
instrumentations-instrumentation-q 32.28% <50.00%> (?)
instrumentations-instrumentation-url 32.20% <50.00%> (?)
instrumentations-instrumentation-when 32.25% <50.00%> (?)
llmobs-ai 41.33% <22.22%> (?)
llmobs-anthropic 40.80% <50.00%> (?)
llmobs-bedrock 39.29% <50.00%> (?)
llmobs-google-genai 39.96% <50.00%> (?)
llmobs-langchain 39.31% <50.00%> (?)
llmobs-vertex-ai 40.10% <50.00%> (?)
platform-core 31.47% <ø> (?)
platform-esbuild 34.42% <ø> (?)
platform-instrumentations-misc 34.11% <ø> (?)
platform-shimmer 37.56% <ø> (?)
platform-unit-guardrails 24.21% <ø> (?)
platform-webpack 19.88% <7.09%> (?)
plugins-azure-event-hubs 25.90% <ø> (?)
plugins-azure-service-bus 25.26% <ø> (?)
plugins-bullmq 43.53% <50.00%> (?)
plugins-cassandra 37.97% <50.00%> (?)
plugins-cookie 26.96% <ø> (?)
plugins-cookie-parser 26.75% <ø> (?)
plugins-crypto 26.73% <ø> (?)
plugins-dd-trace-api 38.39% <50.00%> (?)
plugins-express-mongo-sanitize 26.89% <ø> (?)
plugins-express-session 26.70% <ø> (?)
plugins-fastify 42.34% <50.00%> (?)
plugins-fetch 38.44% <50.00%> (?)
plugins-fs 38.67% <50.00%> (?)
plugins-generic-pool 25.94% <ø> (?)
plugins-grpc 40.96% <50.00%> (?)
plugins-handlebars 26.94% <ø> (?)
plugins-hapi 40.22% <50.00%> (?)
plugins-hono 40.56% <50.00%> (?)
plugins-ioredis 38.52% <50.00%> (?)
plugins-knex 26.57% <ø> (?)
plugins-langgraph 37.94% <50.00%> (?)
plugins-ldapjs 24.43% <ø> (?)
plugins-light-my-request 26.30% <ø> (?)
plugins-limitd-client 32.58% <50.00%> (?)
plugins-lodash 26.03% <ø> (?)
plugins-mariadb 39.53% <50.00%> (?)
plugins-memcached 38.28% <50.00%> (?)
plugins-microgateway-core 39.29% <50.00%> (?)
plugins-moleculer 40.56% <50.00%> (?)
plugins-mongodb-core 39.07% <50.00%> (?)
plugins-mongoose 38.94% <50.00%> (?)
plugins-multer 26.70% <ø> (?)
plugins-mysql 39.38% <50.00%> (?)
plugins-node-serialize 27.00% <ø> (?)
plugins-opensearch 37.84% <50.00%> (?)
plugins-passport-http 26.76% <ø> (?)
plugins-postgres 35.52% <30.30%> (?)
plugins-process 26.73% <ø> (?)
plugins-pug 26.96% <ø> (?)
plugins-redis 38.95% <50.00%> (?)
plugins-router 43.31% <50.00%> (?)
plugins-sequelize 25.55% <ø> (?)
plugins-test-and-upstream-amqp10 38.57% <50.00%> (?)
plugins-test-and-upstream-amqplib 44.29% <50.00%> (?)
plugins-test-and-upstream-apollo 39.19% <50.00%> (?)
plugins-test-and-upstream-avsc 38.66% <50.00%> (?)
plugins-test-and-upstream-bunyan 33.91% <50.00%> (?)
plugins-test-and-upstream-connect 40.88% <50.00%> (?)
plugins-test-and-upstream-koa 40.47% <50.00%> (?)
plugins-test-and-upstream-protobufjs 38.89% <50.00%> (?)
plugins-test-and-upstream-rhea 44.32% <50.00%> (?)
plugins-undici 39.29% <50.00%> (?)
plugins-url 26.73% <ø> (?)
plugins-valkey 38.23% <50.00%> (?)
plugins-vm 26.73% <ø> (?)
plugins-winston 34.23% <50.00%> (?)
plugins-ws 42.03% <50.00%> (?)
profiling-macos 40.66% <50.00%> (?)
profiling-windows 42.30% <50.00%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@datadog-prod-us1-3
Copy link
Copy Markdown

datadog-prod-us1-3 bot commented Apr 8, 2026

⚠️ Tests

Fix all issues with BitsAI or with Cursor

⚠️ Other Violations

🧪 1 Test failed

IAST stack traces and vulnerabilities with sourcemaps "before all" hook in "IAST stack traces and vulnerabilities with sourcemaps" from IAST stack traces and vulnerabilities with sourcemaps   View in Datadog   (Fix with Cursor)
Timeout of 60000ms exceeded. For async tests and hooks, ensure "done()" is called; if returning a Promise, ensure it resolves. (/home/runner/work/dd-trace-js/dd-trace-js/integration-tests/appsec/iast-stack-traces-with-sourcemaps.spec.js)

Error: Timeout of 60000ms exceeded. For async tests and hooks, ensure "done()" is called; if returning a Promise, ensure it resolves. (/home/runner/work/dd-trace-js/dd-trace-js/integration-tests/appsec/iast-stack-traces-with-sourcemaps.spec.js)

ℹ️ Info

No other issues found (see more)

❄️ No new flaky tests detected

🎯 Code Coverage (details)
Patch Coverage: 29.21%
Overall Coverage: 68.63%

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: c9162d4 | Docs | Datadog PR Page | Was this helpful? React with 👍/👎 or give us feedback!

@pr-commenter
Copy link
Copy Markdown

pr-commenter bot commented Apr 8, 2026

Benchmarks

Benchmark execution time: 2026-04-08 15:00:59

Comparing candidate commit c9162d4 in PR branch v5.96.0-proposal with baseline commit 7999eff in branch v5.x.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 230 metrics, 30 unstable metrics.

KSerrania and others added 5 commits April 8, 2026 13:41
…es (#7949)

* chore: use dd-sts for secrets (#7924)

* [incident-52391] Split dd-sts policies to only request an app key when needed

* Also use ./.github/actions/dd-sts-api-key in reusable actions

* Completely split the dd-sts actions

* Fix CODEOWNERS

---------

Co-authored-by: Bryan English <bryan.english@datadoghq.com>
…with 3 updates (#7939)

Bumps the gh-actions-packages group with 2 updates in the / directory: [github/codeql-action](https://github.com/github/codeql-action) and [DataDog/junit-upload-github-action](https://github.com/datadog/junit-upload-github-action).
Bumps the gh-actions-packages group with 1 update in the /.github/actions/coverage directory: [DataDog/coverage-upload-github-action](https://github.com/datadog/coverage-upload-github-action).
Bumps the gh-actions-packages group with 1 update in the /.github/actions/push_to_test_optimization directory: [DataDog/junit-upload-github-action](https://github.com/datadog/junit-upload-github-action).
Bumps the gh-actions-packages group with 2 updates in the /.github/workflows directory: [github/codeql-action](https://github.com/github/codeql-action) and [DataDog/junit-upload-github-action](https://github.com/datadog/junit-upload-github-action).


Updates `github/codeql-action` from 4.32.6 to 4.35.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@0d579ff...c10b806)

Updates `DataDog/junit-upload-github-action` from 2.2.0 to 3.0.0
- [Release notes](https://github.com/datadog/junit-upload-github-action/releases)
- [Commits](DataDog/junit-upload-github-action@293a1d0...24449d0)

Updates `DataDog/coverage-upload-github-action` from 1.0.1 to 1.0.2
- [Release notes](https://github.com/datadog/coverage-upload-github-action/releases)
- [Commits](DataDog/coverage-upload-github-action@d2cf302...f80c0e6)

Updates `DataDog/junit-upload-github-action` from 2.2.0 to 3.0.0
- [Release notes](https://github.com/datadog/junit-upload-github-action/releases)
- [Commits](DataDog/junit-upload-github-action@293a1d0...24449d0)

Updates `github/codeql-action` from 4.32.6 to 4.35.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@0d579ff...c10b806)

Updates `DataDog/junit-upload-github-action` from 2.2.0 to 3.0.0
- [Release notes](https://github.com/datadog/junit-upload-github-action/releases)
- [Commits](DataDog/junit-upload-github-action@293a1d0...24449d0)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: DataDog/junit-upload-github-action
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: DataDog/coverage-upload-github-action
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: DataDog/junit-upload-github-action
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: github/codeql-action
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: DataDog/junit-upload-github-action
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
… updates (#7934)

Bumps the test-versions group with 1 update in the /integration-tests/appsec/iast-esbuild-cjs directory: [esbuild](https://github.com/evanw/esbuild).
Bumps the test-versions group with 1 update in the /integration-tests/appsec/iast-esbuild-esm directory: [esbuild](https://github.com/evanw/esbuild).
Bumps the test-versions group with 5 updates in the /integration-tests/esbuild directory:

| Package | From | To |
| --- | --- | --- |
| [@apollo/server](https://github.com/apollographql/apollo-server/tree/HEAD/packages/server) | `5.4.0` | `5.5.0` |
| [axios](https://github.com/axios/axios) | `1.13.6` | `1.14.0` |
| [knex](https://github.com/knex/knex) | `3.1.0` | `3.2.9` |
| [koa](https://github.com/koajs/koa) | `3.1.2` | `3.2.0` |
| [openai](https://github.com/openai/openai-node) | `6.32.0` | `6.33.0` |



Updates `esbuild` from 0.27.7 to 0.28.0
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.27.7...v0.28.0)

Updates `esbuild` from 0.27.7 to 0.28.0
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.27.7...v0.28.0)

Updates `@apollo/server` from 5.4.0 to 5.5.0
- [Release notes](https://github.com/apollographql/apollo-server/releases)
- [Changelog](https://github.com/apollographql/apollo-server/blob/main/packages/server/CHANGELOG.md)
- [Commits](https://github.com/apollographql/apollo-server/commits/@apollo/server@5.5.0/packages/server)

Updates `axios` from 1.13.6 to 1.14.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.13.6...v1.14.0)

Updates `knex` from 3.1.0 to 3.2.9
- [Release notes](https://github.com/knex/knex/releases)
- [Changelog](https://github.com/knex/knex/blob/master/CHANGELOG.md)
- [Commits](knex/knex@3.1.0...3.2.9)

Updates `koa` from 3.1.2 to 3.2.0
- [Release notes](https://github.com/koajs/koa/releases)
- [Changelog](https://github.com/koajs/koa/blob/master/History.md)
- [Commits](koajs/koa@v3.1.2...v3.2.0)

Updates `openai` from 6.32.0 to 6.33.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v6.32.0...v6.33.0)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: esbuild
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: "@apollo/server"
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: axios
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: knex
  dependency-version: 3.2.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: koa
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
- dependency-name: openai
  dependency-version: 6.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-versions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ruben Bridgewater <ruben@bridgewater.de>
@dd-octo-sts dd-octo-sts bot force-pushed the v5.96.0-proposal branch from 87d6c0c to da03917 Compare April 8, 2026 13:41
sabrenner and others added 2 commits April 8, 2026 14:49
@dd-octo-sts dd-octo-sts bot force-pushed the v5.96.0-proposal branch from da03917 to c9162d4 Compare April 8, 2026 14:49
@sabrenner sabrenner marked this pull request as ready for review April 8, 2026 15:33
@sabrenner sabrenner requested review from a team as code owners April 8, 2026 15:33
@sabrenner sabrenner requested review from a team as code owners April 8, 2026 15:33
@sabrenner sabrenner requested review from BridgeAR and shreyamalpani and removed request for a team April 8, 2026 15:33
@sabrenner sabrenner merged commit a031d7d into v5.x Apr 8, 2026
881 of 883 checks passed
@sabrenner sabrenner deleted the v5.96.0-proposal branch April 8, 2026 17:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants