v1.65.0

Summary

In this release, Application Performance Monitoring (APM) improved trace and span IDs generation using math/rand/v2 for Go 1.22 and later. APM introduced support for Go 1.22 ServeMux patterns and OTel env vars and better OTel HTTP status code remapping. Also, APM fixed a race condition when using spans concurrently and how dropped traces were reported to the agent.

Application Security Management (ASM) introduces its new "Exploit Prevention" in public beta, a new type of in-app security monitoring that detects and blocks vulnerability exploits. This release includes Exploit Prevention of Server-Side Request Forgeries (SSRF) for HTTP client requests.

Data Streams Monitoring (DSM) updates sketch mapping to improve accuracy and moves to google.golang.org/protobuf.

And last, multiple dependencies have been upgraded to fixed versions for reported vulnerabilities and to reduce our dependency on github.com/golang/protobuf.

Changes

Application Performance Monitoring (APM)

• go.mod: update github.com/DataDog/sketches-go to v1.4.5 by @darccio in #2698
• contrib/database/sql: allow peer.service to be set explicitly and add into propagated context by @tabgok in #2679
• contrib/net/http: Support go1.22 ServeMux patterns by @felixge in #2716
• ddtrace/tracer: use math/rand/v2 for SpanID and TraceID by @knusbaum in #2689
• ddtrace/tracer: fix concurrent map writes when applying trace sampling rules and setting tags concurrently by @darccio in #2727
• w3c: ensure _dd.parent_id is set using x-datadog-parent-id by @mabdinur in #2696
• ddtrace/tracer: increment droppedP0Traces iff it's not going to be sent by @darccio in #2713
• ddtrace/tracer: support default origin on dynamic config to support Active Tracing telemetry spec by @darccio in #2623
• ddtrace/tracer: only finish execution trace task, restore pprof labels once by @nsrip-dd in #2708
• ddtrace/tracer: add support for OTEL env vars by @mtoffl01 in #2715
• ddtrace/tracer: report trace and span sampling rules separately by @darccio in #2718
• ddtrace/opentelemetry: adds http status code remapping for otel trace metrics by @zarirhamza in #2728

Application Security Management (ASM)

• appsec: support for SSRF Exploit Prevention by @Hellzy in #2707
• appsec/grpc: fix rpc message blocking by @Julio-Guerra in #2723

Data Streams Monitoring

• Move to google.golang.org/protobuf by @piochelepiotr in #2694
• datastreams: Update mapping by @piochelepiotr in #2703
• [DSMS-19] Fix SNS topic format issue by @juliannzhou in #2725

General

• internal: stacktrace: skip internal packages by @eliottness in #2697
• go.mod: upgrade github.com/mattn/go-sqlite3 up to v1.14.18 (#2693) by @darccio in #2714
• go.mod: upgrade github.com/go-jose/go-jose/v3 to v3.0.3 by @darccio in #2700
• go.mod: upgrade google.golang.org/protobuf to v1.33.0 by @darccio in #2699
• go.mod: upgrade richardartoul/molecule by @darccio in #2724

New Contributors

• @juliannzhou made their first contribution in #2725

Full Changelog: v1.64.0...v1.65.0