search

pypi / warehouse

The Python Package Index
https://pypi.org
Apache License 2.0
3.6k stars 967 forks source link

chore(deps): bump ddtrace from 2.16.0 to 2.16.1 #17080

Closed dependabot[bot] closed 1 week ago

dependabot[bot] commented 1 week ago

Bumps ddtrace from 2.16.0 to 2.16.1.

Release notes

Sourced from ddtrace's releases.

2.16.1

Bug Fixes

  • Threats

    • The new user events policy is preventing users PII to be added by default as span tags. To allow customers using the Django auto instrumentation to still have those information, new environment variables have been added. In particular DD_DJANGO_INCLUDE_EMAIL (false by default), will tag user events with user email as before.

  • Code Security

    • Add googlecloudsdk and google auth to the Code Security deny list.

  • Crashtracking

    • Fixes an issue where the use of the crashtracking component could result in zombie processes.

  • Lib-Injection

    • This fix adds more commands to the auto-injection denylist.
    • This fix ensures we do not import the user installed ddtrace if it is present.

  • LLM Observability

    • Resolves an issue where annotating spans with non-ASCII language input/output values resulted in encoded unicode being submitted.

  • Profiling

    • Fixes an issue where cpu-time was not profiled for services using gunicorn, when DD_PROFILING_STACK_V2_ENABLED was set.
    • Fixes an issue where the profiler was allocating too much memory from ensure_binary_or_empty() function, on Python versions before 3.12, with DD_PROFILING_EXPORT_LIBDD_ENABLED or DD_PROFILING_TIMELINE_ENABLED.
    • Fixes an issue where the sample pool could deadlock after fork() by clearing it in the child process.
Changelog

Sourced from ddtrace's changelog.

Changelog

Changelogs for versions not listed here can be found at https://github.com/DataDog/dd-trace-py/releases

2.14.6

Bug Fixes

  • Profiling

    • Fixes an issue where enabling native exporter via DD_PROFILING_EXPORT_LIBDD_ENABLED, DD_PROFILING_TIMELINE_ENABLED or DD_PROFILING_STACK_V2_ENABLED turned off live heap profiling.
    • Fixes an issue where the profiler was allocating too much memory from ensure_binary_or_empty() function, on Python versions before 3.12, with DD_PROFILING_EXPORT_LIBDD_ENABLED or DD_PROFILING_TIMELINE_ENABLED.
    • When a Python thread finishes, this change frees memory used for mapping its thread id to Span. The mapping is populated and used when DD_PROFILING_ENDPOINT_COLLECTION_ENABLED and DD_PROFILING_STACK_V2_ENABLED were set to enable grouping of profiles for endpoints.
    • Resolves an issue where asyncio task names are not captured by stack v2, when DD_PROFILING_STACK_V2_ENABLED is set.

  • Tracing

    • pymongo: Adds type checking to solve an issue where NoneType instead of expected Pin object would throw an error in TracedTopology method.

2.15.2

Bug Fixes

  • Profiling:
    • Fixes an issue where enabling native exporter via DD_PROFILING_EXPORT_LIBDD_ENABLED, DD_PROFILING_TIMELINE_ENABLED or DD_PROFILING_STACK_V2_ENABLED turned off live heap profiling.
    • Fixes an issue where the profiler was allocating too much memory from ensure_binary_or_empty() function, on Python versions before 3.12, with DD_PROFILING_EXPORT_LIBDD_ENABLED or DD_PROFILING_TIMELINE_ENABLED.
    • When a Python thread finishes, this change frees memory used for mapping its thread id to Span. The mapping is populated and used when DD_PROFILING_ENDPOINT_COLLECTION_ENABLED and DD_PROFILING_STACK_V2_ENABLED were set to enable grouping of profiles for endpoints.
    • Resolves an issue where asyncio task names are not captured by stack v2, when DD_PROFILING_STACK_V2_ENABLED is set.
  • Tracing:
    • pymongo: Adds type checking to solve an issue where NoneType instead of expected Pin object would throw an error in TracedTopology method.
Commits
  • a66fdf0 fix(profiling): clear sample pool after fork [backport 2.16] (#11357)
  • 9e868cd fix: update libdatadog to v14, which fixes crashtracking [backport 2.16] (#11...
  • a001336 chore(ci): remove pinned versions of gevent from profile, opentracer tests [b...
  • daec565 fix(lib-injection): do not import user installed ddtrace [backport 2.16] (#11...
  • 07af89a fix(llmobs): ensure non-ascii characters are not encoded into raw unicode [ba...
  • 84c1fb4 fix(lib-injection): increase coverage of Python lib-injection denylist [backp...
  • 50ba4c9 fix(asm): put back email/login/name in traces for django user (#11288) [backp...
  • ecee3b9 chore(asm): improve logs in asm_request_context [backport 2.16] (#11325)
  • 0d585b0 fix(iast): add google.auth and googlecloudsdk to the IAST denylist [backport ...
  • c3899f7 fix(profiling): stack v2 tracks threads in gunicorn workers [backport 2.16] (...
  • Additional commits viewable in compare view


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 1 week ago

Superseded by #17086.