v4.44.0

Features

• appsec: Exploit prevention support for SSRF (#4372) (#4561)
• aws-sdk: Add batchPropagationEnabled env variable configuration for AWS messaging context injection (#4525)
• iast: Add support for Code Injection vulnerability detection (#4488)
• dsm: Implement Data Streams Monitoring (DSM) Public API (#4537)

Bug fixes

• test visibility: Update test code owners extraction logic to use test source file (#4560)
• test visibility: Fix memory leak in workerpool hook #4558, fixing #4551
• test visibility: Fix latest version of vitest #4565

v5.19.0

Improvements

• Add getSpanLimits() #4454
• [appsec] Update waf obfuscator key regex #4498
• [appsec] Update child_process redaction pattern #4509
• [iast] Make iast config available out of experimental config properties #4489

Features

• [test-visibility] Add auto test retries to playwright #4504
• [test-visibility] Add auto test retries to vitest #4513
• [test-visibility] Add auto test retries to cypress #4518
• [test-visibility] Add auto test retries to jest #4530

Bug fixes

• [test visibility] Fix suite-less tests in vitest #4512

v4.43.0

Improvements

• Add getSpanLimits() #4454
• [appsec] Update waf obfuscator key regex #4498
• [appsec] Update child_process redaction pattern #4509
• [iast] Make iast config available out of experimental config properties #4489

Features

• [test-visibility] Add auto test retries to playwright #4504
• [test-visibility] Add auto test retries to vitest #4513
• [test-visibility] Add auto test retries to cypress #4518
• [test-visibility] Add auto test retries to jest #4530

Bug fixes

• [test visibility] Fix suite-less tests in vitest #4512

v5.18.0

Improvements

• [appsec]: Update appsec rules to 1.12.0 #4398
• [appsec]: Collect request headers on user event #4385
• [iast]: Update native-iast-taint-tracking to 3.0.0 #4464
• [appsec]: Update default appsec obfuscation regex #4472
• [aws-sdk]: Improve AWS SQS Data Streams Monitoring tracing experience #4425

Features

• [test-visibility] Add support for vitest #4415
• [test-visibility] Add automatic flaky test retries to Mocha #4453
• [test-visibility] Flaky test retries for cucumber #4491
• [appsec]: Standalone ASM billing with DD_EXPERIMENTAL_APPSEC_STANDALONE_ENABLED #4291, #4416
• [aws-sdk]: Add batchPropagationEnabled configuration option to inject all messages with trace context during AWS SQS, SNS, and Kinesis batch send operations #4434
• [aws-sdk] feat: add dd_tags to datastreams monitoring stats payload #4481

Bug fixes

• [openai] fix(openai): safe require tiktoken for webpack bundlers #4433
• [test-visibility] Do not unsafely access .steps from test result in playwright #4471
• [esm] upgrade import-in-the-middle to 1.8.1, fix various ESM bugs #4414
• [child_process] default to tracer service name #4417

v4.42.0

Improvements

• [appsec]: Update appsec rules to 1.12.0 #4398
• [appsec]: Collect request headers on user event #4385
• [iast]: Update native-iast-taint-tracking to 3.0.0 #4464
• [appsec]: Update default appsec obfuscation regex #4472
• [aws-sdk]: Improve AWS SQS Data Streams Monitoring tracing experience #4425

Features

• [test-visibility] Add support for vitest #4415
• [test-visibility] Add automatic flaky test retries to Mocha #4453
• [test-visibility] Flaky test retries for cucumber #4491
• [appsec]: Standalone ASM billing with DD_EXPERIMENTAL_APPSEC_STANDALONE_ENABLED #4291, #4416
• [aws-sdk]: Add batchPropagationEnabled configuration option to inject all messages with trace context during AWS SQS, SNS, and Kinesis batch send operations #4434
• [aws-sdk] feat: add dd_tags to datastreams monitoring stats payload #4481

Bug fixes

• [openai] fix(openai): safe require tiktoken for webpack bundlers #4433
• [test-visibility] Do not unsafely access .steps from test result in playwright #4471
• [esm] upgrade import-in-the-middle to 1.8.1, fix various ESM bugs #4414
• [child_process] default to tracer service name #4417

v5.17.0

Improvements

• core: RecordException api now supports adding exceptions as span events (#4386)
• appsec: Allows AppSec to replace status code, headers, and body when an attack is detected (#3837)

Features

• core: Add support for span events (#4036 )
• core: Add automatic instrumentation support for Undici (#4293)

v5.16.0

Improvements

• graphql: fix graphql.resolve span durations (#4387)
• otel: remaps http status tag to meet ddog convention for otel(#4384)

Bug Fixes

• ci: test OCI system-tests scenarios on every commit (#4371)
• otel: pin otel api version in integration test (#4388)
• core: send original config value to telemetry (#4378)
• core: fix RC support for sampling rules patch (#4381)

v4.41.0

Improvements

• core: RecordException api now supports adding exceptions as span events (#4386)
• appsec: Allows AppSec to replace status code, headers, and body when an attack is detected (#3837)

Features

• core: Add support for span events (#4036 )
• core: Add automatic instrumentation support for Undici (#4293)

v4.40.0

Improvements

• graphql: fix graphql.resolve span durations (#4387)
• otel: remaps http status tag to meet ddog convention for otel(#4384)

Bug Fixes

• ci: test OCI system-tests scenarios on every commit (#4371)
• otel: pin otel api version in integration test (#4388)
• core: send original config value to telemetry (#4378)
• core: fix RC support for sampling rules patch (#4381)

v5.15.0

Improvements

• Remove outdated polyfills #4009
• Update native-appsec module to 8.0.1 #4347
• profiler supports activation through single-step instrumentation #4375

Features

• [ci-visibility] Support mocha parallel mode #4314

Bug fixes

• [ci-visibility] Fix EFD with jest and jsdom #4323
• [ci-visibility] Fix selenium when run outside of a supported test framework #4330