Skip to content

Bump ddtrace to 4.12.2 (CVE-2026-50271 W3C baggage header DoS) #24864

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Kyle-Neale wants to merge 4 commits into
base: master
Choose a base branch
from
Open

Bump ddtrace to 4.12.2 (CVE-2026-50271 W3C baggage header DoS) #24864

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
84139fc
Bump ddtrace to 4.12.2 (CVE-2026-50271 W3C baggage header DoS)
Kyle-Neale Aug 14, 2026
92ce68c
Add changelog entry for ddtrace 4.12.2 bump
Kyle-Neale Aug 14, 2026
f5a27dc
Remove ddtrace from dep-update exclude list
Kyle-Neale Aug 14, 2026
831009e
Update dependency resolution
Aug 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 0 additions & 1 deletion .ddev/config.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -217,7 +217,6 @@ exclude = [
'pymongo', # Upgrade from 4.8.0 to 4.10.1 causes "AttributeError: module 'pymongo' has no attribute 'mongo_client'"
'pymysql', # Pinned to below 1.2.0 as requested by DBM while they work on supporting 1.2+
'foundationdb', # 7+ has a breaking changes
'ddtrace', # 4.5.1 does not support MacOS 11, which is used by the Agent
'kubernetes', # Excluded on size: 36 bundles the aio client and aiohttp, +24M on disk.
# Unpin once https://github.com/kubernetes-client/python/issues/2677 is resolved.
'redis', # 8.1.0 adds 788K on disk, over the Agent per-PR gate. Bumped in stages
Expand Down
2 changes: 1 addition & 1 deletion .deps/builder_inputs.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
# Hash inputs are defined in .builders/inputs_hash.py (SHARED_INPUTS,
# RESOLUTION_INPUTS).
[resolution]
hash = "d47b88f78a3eee1159b0801a7aa76344e6bde91749c8e18738002b2a6fdc697a"
hash = "55bae3c941abc7f2c89330a13aef3e65783c7b2bf083fe6eeae618cd9df738e8"

[images]
linux-aarch64 = "48faaad3beb1c8fc378547f2e5719d5b3b6a475903999a4bf2abb6c1a6d4089f"
Expand Down
34 changes: 17 additions & 17 deletions .deps/resolved/linux-aarch64_3.13.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,31 +1,31 @@
aerospike @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/aerospike/aerospike-7.1.1-20260813185147-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl#sha256=2cfb491225eea7e1f5fc9a141facb128ca7f1120dfdcbb7abf3db5aa96742c15
botocore @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/botocore/botocore-1.43.67-20260813114228-py3-none-any.whl#sha256=59eb6807f8a472d18bb7982dfdb1f6ec58f828fe33d357978492991bc20d392a
certifi @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/certifi/certifi-2026.7.22-20260813191757-py3-none-any.whl#sha256=6b268dd4115bc4969341ab55e0bc3449387fc625fc88a61ed6ce1cee8b9845db
botocore @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/botocore/botocore-1.43.67-20260814151038-py3-none-any.whl#sha256=59eb6807f8a472d18bb7982dfdb1f6ec58f828fe33d357978492991bc20d392a
certifi @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/certifi/certifi-2026.7.22-20260814151041-py3-none-any.whl#sha256=6b268dd4115bc4969341ab55e0bc3449387fc625fc88a61ed6ce1cee8b9845db
cm-client @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/cm-client/cm_client-45.0.4-20260326173357-py3-none-manylinux2014_aarch64.whl#sha256=0bbcf2766028850c26a917deef3704a096cc9ba0c25220d45ff424334d25dcd7
confluent-kafka @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/confluent-kafka/confluent_kafka-2.13.2-20260814092755-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl#sha256=9c5e050f1b140517da2f7cf39980088d86f9541be5a111767515a5eb3e748ddf
cryptography @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/cryptography/cryptography-50.0.0-20260814092756-cp313-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl#sha256=23bcc6fd81d1417b61a0d749c28b463e8b1d818c92a92b474464b1953739dc8f
ddtrace @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/ddtrace/ddtrace-3.19.5-20260417115249-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl#sha256=a4f8d07adccdd43908156ab2c143dbb6261ed9a3c43ba58a3bb6bd1b6ef94734
confluent-kafka @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/confluent-kafka/confluent_kafka-2.13.2-20260814150107-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl#sha256=e1c894fbb84ec95e048f1dfcd6cc4ad61bc84371a174b8e4ef52265e19d0dec9
cryptography @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/cryptography/cryptography-50.0.0-20260814150108-cp313-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl#sha256=b7f0b96ab690eb3c58eadd3a099eb3c0ca4d93364fedf4d558cf28f9655db454
ddtrace @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/ddtrace/ddtrace-4.12.2-20260814150109-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl#sha256=af631b200a9e417b0aba339a2de2e74a76461e251f2227a87fe18a168941b5bb
foundationdb @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/foundationdb/foundationdb-6.3.25-20260326173358-py3-none-manylinux2014_aarch64.whl#sha256=d34180500220db4458e57505c774de0363456d4129f0e3fe98c9e99e8eef77c2
gssapi @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/gssapi/gssapi-1.11.1-20260814092800-cp311-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl#sha256=49600bdb30b169f114991562e75842d76f35975af2e06b4888463fcddb9cbcb1
keystoneauth1 @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/keystoneauth1/keystoneauth1-5.15.0-20260813191809-py3-none-any.whl#sha256=f90edf3e973cd1d39d24b604acab10898fe31f8469fc115a39a4366bea70b1eb
keystoneauth1 @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/keystoneauth1/keystoneauth1-5.15.0-20260814151058-py3-none-any.whl#sha256=f90edf3e973cd1d39d24b604acab10898fe31f8469fc115a39a4366bea70b1eb
krb5 @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/krb5/krb5-0.9.0-20260814092808-cp311-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl#sha256=c2f87e5baa7bce6f5e0b606308f0436b69794dbe12efe67f6c1bc5fa30af6f67
openstacksdk @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/openstacksdk/openstacksdk-4.18.0-20260813114302-py3-none-any.whl#sha256=2633878f9f923588c32731ccc2a7ebc43dfd481ee2842f7afa8a9047f15c8d4c
os-service-types @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/os-service-types/os_service_types-1.9.0-20260813191813-py3-none-any.whl#sha256=af56e7fbcd0b663db5e6dca6100b415c4b71be2000eeead27dabe652d3ebc225
pbr @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/pbr/pbr-7.0.3-20260813191828-py2.py3-none-any.whl#sha256=1544652b80307f0b4c491bd66f58f969cb0656994e632365f90e8e044c223b4e
openstacksdk @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/openstacksdk/openstacksdk-4.18.0-20260814151100-py3-none-any.whl#sha256=2633878f9f923588c32731ccc2a7ebc43dfd481ee2842f7afa8a9047f15c8d4c
os-service-types @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/os-service-types/os_service_types-1.9.0-20260814151102-py3-none-any.whl#sha256=af56e7fbcd0b663db5e6dca6100b415c4b71be2000eeead27dabe652d3ebc225
pbr @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/pbr/pbr-7.0.3-20260814151134-py2.py3-none-any.whl#sha256=1544652b80307f0b4c491bd66f58f969cb0656994e632365f90e8e044c223b4e
psutil @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/psutil/psutil-6.0.0-20260326173401-cp36-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl#sha256=22e075e3cbc57b5da0d93f72f691746c5198ce88c5aea6fdb54186b3e8c46832
psycopg-c @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/psycopg-c/psycopg_c-3.3.4-20260813185232-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl#sha256=b13788760fa3197a4916c7f3dd4f36cf6c70ac3145d4787b45e96fdd6adabe88
pymongo @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/pymongo/pymongo-4.8.0-20260813185233-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl#sha256=b729aec68c591c56292ee9b48d86585e1bd1656dd403f38f4ecc1b7637ae1322
pyodbc @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/pyodbc/pyodbc-5.3.0-20260813185234-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl#sha256=e6e25b3780a9bcd83d211084fbdcef38153815eedd0f26f7f7c57e95833b6137
pysnmp-mibs @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/pysnmp-mibs/pysnmp_mibs-0.1.6-20260813191844-py2.py3-none-any.whl#sha256=0cc4610711208cdc64361464a23d1f2dce88ec5990a12b4bdce4f13b6a169810
pysnmp-mibs @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/pysnmp-mibs/pysnmp_mibs-0.1.6-20260814151207-py2.py3-none-any.whl#sha256=0cc4610711208cdc64361464a23d1f2dce88ec5990a12b4bdce4f13b6a169810
pyvmomi @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/pyvmomi/pyvmomi-8.0.3.0.1-20260326173403-py2.py3-none-manylinux2014_aarch64.whl#sha256=dd71476b7308286ed4219373ca9523e4f06bfed3f5932f60e5c67d8d5a673e1e
requests-unixsocket2 @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/requests-unixsocket2/requests_unixsocket2-1.0.1-20260813191858-py3-none-any.whl#sha256=aae3f1743ab60955ea91e9a095d54997ea56b956bab652bf194379ef4dc6fa7f
securesystemslib @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/securesystemslib/securesystemslib-0.28.0-20260813191912-py3-none-any.whl#sha256=861ab6f8c1930e0c05915f32a34f1c4ae1d76ee542ad2b424121e3e26a9fb1dd
setuptools @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/setuptools/setuptools-84.0.0-20260813191913-py3-none-any.whl#sha256=ecc1e6e6c3c24cd2c60e6528b7149b1a4911b91ef3fdd3aff80486ea2502b607
requests-unixsocket2 @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/requests-unixsocket2/requests_unixsocket2-1.0.1-20260814151239-py3-none-any.whl#sha256=aae3f1743ab60955ea91e9a095d54997ea56b956bab652bf194379ef4dc6fa7f
securesystemslib @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/securesystemslib/securesystemslib-0.28.0-20260814151310-py3-none-any.whl#sha256=861ab6f8c1930e0c05915f32a34f1c4ae1d76ee542ad2b424121e3e26a9fb1dd
setuptools @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/setuptools/setuptools-84.0.0-20260814151313-py3-none-any.whl#sha256=ecc1e6e6c3c24cd2c60e6528b7149b1a4911b91ef3fdd3aff80486ea2502b607
simplejson @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/simplejson/simplejson-4.1.1-20260608034228-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl#sha256=0069d4b66f4cd1a6e3805a2128d3f2c1a6a7f4eb37392f0b270d168a2d6f20cd
stevedore @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/stevedore/stevedore-5.9.0-20260813191915-py3-none-any.whl#sha256=5c385cdc9219b9944cbf0f9883cf4faca9ac27857f0955fe298ff1ff432df4ca
supervisor @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/supervisor/supervisor-4.3.0-20260813191929-py2.py3-none-any.whl#sha256=81d63e968a5133203a334102b8e6e72b1f5ecfc9673c1af7680f9f7e0db8d4fd
vertica-python @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/vertica-python/vertica_python-1.4.0-20260813191944-py3-none-any.whl#sha256=df8d667b7bd070532a72c25f37e7259d3673c1908ae726fdfb3087d777caa9da
websocket-client @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/websocket-client/websocket_client-1.9.0-20260813191958-py3-none-any.whl#sha256=b628876a9b1eed1d49f1a230bf4b1c21fa3cd9163594f9f9628c8a8b22f97e10
stevedore @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/stevedore/stevedore-5.9.0-20260814151317-py3-none-any.whl#sha256=5c385cdc9219b9944cbf0f9883cf4faca9ac27857f0955fe298ff1ff432df4ca
supervisor @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/supervisor/supervisor-4.3.0-20260814151349-py2.py3-none-any.whl#sha256=81d63e968a5133203a334102b8e6e72b1f5ecfc9673c1af7680f9f7e0db8d4fd
vertica-python @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/vertica-python/vertica_python-1.4.0-20260814151421-py3-none-any.whl#sha256=df8d667b7bd070532a72c25f37e7259d3673c1908ae726fdfb3087d777caa9da
websocket-client @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/built/websocket-client/websocket_client-1.9.0-20260814151958-py3-none-any.whl#sha256=b628876a9b1eed1d49f1a230bf4b1c21fa3cd9163594f9f9628c8a8b22f97e10
annotated-types @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/external/annotated-types/annotated_types-0.8.0-py3-none-any.whl#sha256=f072f4d804ea359e4eaf198b1af7a8b0943881a87f31bb764f8bf219bb9419e0
attrs @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/external/attrs/attrs-26.1.0-py3-none-any.whl#sha256=c647aa4a12dfbad9333ca4e71fe62ddc36f4e63b2d260a37a8b83d2f043ac309
aws-msk-iam-sasl-signer-python @ https://agent-int-packages.datadoghq.com/${INTEGRATIONS_WHEELS_STORAGE}/external/aws-msk-iam-sasl-signer-python/aws_msk_iam_sasl_signer_python-1.0.2-py2.py3-none-any.whl#sha256=310eb2db9ca0ff55ed06a24212739b87533e7f1cf6f34e43aabbd97a3b21290e
Expand Down
Loading
Loading