Releases: DataDog/dd-trace-go
v1.65.1
0bf28b8
eliottness
Eliott Bouhana
Summary
This patch release provide two small fixes:
- Workaround of a bug found in go 1.20 that concerns all users of the
appsec/events.IsSecurityError()that made the function always return false. Seeing spans in the DataDog's UI containing errors with the following message can also be a symptom of this issue:request blocked by WAF - Removal of a unsolicitated warning log in the form of:
ignoring DD_TRACE_SAMPLE_RATE, error: strconv.ParseFloat: parsing "": invalid syntax
Changes
Application Performance Monitoring (APM)
- ddtrace/tracer: update sample rate configuration parsing to avoid logging a warning when empty in #2751
Application Security Management (ASM)
- appsec: fix IsSecurityError in #2746
Full Changelog: v1.65.0...v1.65.1
v1.65.0
Summary
In this release, Application Performance Monitoring (APM) improved trace and span IDs generation using math/rand/v2 for Go 1.22 and later. APM introduced support for Go 1.22 ServeMux patterns and OTel env vars and better OTel HTTP status code remapping. Also, APM fixed a race condition when using spans concurrently and how dropped traces were reported to the agent.
Application Security Management (ASM) introduces its new "Exploit Prevention" in public beta, a new type of in-app security monitoring that detects and blocks vulnerability exploits. This release includes Exploit Prevention of Server-Side Request Forgeries (SSRF) for HTTP client requests.
Data Streams Monitoring (DSM) updates sketch mapping to improve accuracy and moves to google.golang.org/protobuf.
And last, multiple dependencies have been upgraded to fixed versions for reported vulnerabilities and to reduce our dependency on github.com/golang/protobuf.
Changes
Application Performance Monitoring (APM)
- go.mod: update github.com/DataDog/sketches-go to v1.4.5 by @darccio in #2698
- contrib/database/sql: allow peer.service to be set explicitly and add into propagated context by @tabgok in #2679
- contrib/net/http: Support go1.22 ServeMux patterns by @felixge in #2716
- ddtrace/tracer: use math/rand/v2 for SpanID and TraceID by @knusbaum in #2689
- ddtrace/tracer: fix concurrent map writes when applying trace sampling rules and setting tags concurrently by @darccio in #2727
- w3c: ensure _dd.parent_id is set using x-datadog-parent-id by @mabdinur in #2696
- ddtrace/tracer: increment droppedP0Traces iff it's not going to be sent by @darccio in #2713
- ddtrace/tracer: support default origin on dynamic config to support Active Tracing telemetry spec by @darccio in #2623
- ddtrace/tracer: only finish execution trace task, restore pprof labels once by @nsrip-dd in #2708
- ddtrace/tracer: add support for OTEL env vars by @mtoffl01 in #2715
- ddtrace/tracer: report trace and span sampling rules separately by @darccio in #2718
- ddtrace/opentelemetry: adds http status code remapping for otel trace metrics by @zarirhamza in #2728
Application Security Management (ASM)
- appsec: support for SSRF Exploit Prevention by @Hellzy in #2707
- appsec/grpc: fix rpc message blocking by @Julio-Guerra in #2723
Data Streams Monitoring
- Move to google.golang.org/protobuf by @piochelepiotr in #2694
- datastreams: Update mapping by @piochelepiotr in #2703
- [DSMS-19] Fix SNS topic format issue by @juliannzhou in #2725
General
- internal: stacktrace: skip internal packages by @eliottness in #2697
- go.mod: upgrade github.com/mattn/go-sqlite3 up to v1.14.18 (#2693) by @darccio in #2714
- go.mod: upgrade github.com/go-jose/go-jose/v3 to v3.0.3 by @darccio in #2700
- go.mod: upgrade google.golang.org/protobuf to v1.33.0 by @darccio in #2699
- go.mod: upgrade richardartoul/molecule by @darccio in #2724
New Contributors
- @juliannzhou made their first contribution in #2725
Full Changelog: v1.64.0...v1.65.0
Contributors
Assets 2
v1.64.1
v1.64.0
Summary
In this release, the tracer adds support for tag-based sampling in sampling rules set via remote configuration. See https://docs.datadoghq.com/tracing/trace_collection/runtime_config/ for more on remote configuration.
Additionally, the tracer now supports matching numeric values via span sampling rules, in addition to string values.
For example, [{"error_code": "4??", "sampling_rate":"0.01"}] will now match both the integer 403 and
the string `"403". String matches are now case-insensitive.
This release brings several bug fixes to the tracer, contrib packages, and remote configuration.
Changes
Application Performance Monitoring (APM)
- ddtrace/tracer: added support for metrics tag sampling by @dianashevchenko in #2662
- ddtrace/tracer: adding support of tags in remote sampling rules. by @yuanyuanzhao3 in #2676
- ddtrace/tracer: added a WithAgentTimeout option to reduce the test suite duration with no agent by @dianashevchenko in #2661
Fixes
Application Performance Monitoring (APM)
- docs: fix dbStats example in contrib/database/sql by @mtoffl01 in #2669
- contrib/dimfeld/httptreemux.v5: fix route and name for 30X redirects by @darccio in #2685
- contrib/database/sql: Disable DBStats if statsd client initialization fails by @mtoffl01 in #2682
- fix: Don't call
c.Error(...)inside echotrace middlewares by @nakkamarra in #2609 - {ddtrace/tracer,datastreams}: set default agent TO to 10s by @ahmed-mez in #2655
- internal/remoteconfig: fixes data race when accessing capabilities by @SvenGasterstaedt in #2652
- ddtrace/tracer: fix calculation of
tracestatelength by @bouwkast in #2585 - ddtracer/trace: if tracing disabled don't call agent to get features by @bstncartwright in #2482
- ddtrace/tracer: fix sampling rule override for manual keep by @dianashevchenko in #2666
- internal: Fixing
_dd.p.dmdecision maker collision on number 10. by @yuanyuanzhao3 in #2672 - ddtrace/tracer: remove agent_psr when rule_psr is set by @dianashevchenko in #2668
New Contributors
- @nakkamarra made their first contribution in #2609
- @SvenGasterstaedt made their first contribution in #2652
- @bouwkast made their first contribution in #2585
- @bstncartwright made their first contribution in #2482
Full Changelog: v1.63.1...v1.64.0
Contributors
Assets 2
v1.63.1
Summary
Fixed _dd.p.dm decision maker collision on number 10.
Changes
Fixes
Full Changelog: v1.63.0...v1.63.1
Contributors
Assets 2
v1.63.0
ef74ecf
RomainMuller
Romain Marcadier
What's Changed
Application Performance Monitoring (APM)
Summary: database/sql integration allows to send DB stats metrics with WithDBStats, new options added to 99designs/gqlgen and segmentio/kafka.go, and google.golang.org/grpc.v12 compilation errors fixed. Also introduces support for remote sampling rules consistent with the current implementation, except sampling by tags.
- ddtrace/tracer: populate and propagate remote rules decision maker by @yuanyuanzhao3 in #2643
- ddtrace/tracer: support for remote sampling rules by @yuanyuanzhao3 in #2596
- contrib/99designs/gqlgen: add WithCustomTag option by @samsullivan in #2598
- contrib/database/sql: implementation of DB Stats feature with unique statsd client by @mtoffl01 in #2629
- contrib/database/sql: use tracer-level tags on contrib's statsd.Client by @mtoffl01 in #2635
- contrib/google.golang.org/grpc.v12: replace missing {From,New}Context with equivalent functions by @darccio in #2624
- contrib/segmentio/kafka.go.v0: add DSM support by @adrien-f in #2625
Application Security Management (ASM)
- Stricter time budget per request by @eliottness in #2613
- Collect edge waf headers by @Julio-Guerra in #2637
- Allow enabling SCA with DD_APPSEC_SCA_ENABLED by @Julio-Guerra in #2634
- contrib/chi.v5: add a response header reader option by @turettn in #2640
Profiling
General
- go.mod: rotate go 1.19 from supported versions by @eliottness in #2617
- internal: remove pre-Go 1.18 workaround for reading build info by @nsrip-dd in #2638
Fixes
Application Performance Monitoring (APM)
- internal/remoteconfig/: Fixes capability APM_TRACING_SAMPLING_RULES to use the correct reserved number 29. by @yuanyuanzhao3 in #2620
- internal/samplernames: fixes a colliding sampler name by @yuanyuanzhao3 in #2627
Application Security Management (ASM)
- Handle bad redirect action parameters by @Hellzy in #2604
- Make redirect actions blocking by @Hellzy in #2628
- Don't enable blocking-related RC features when using local security rules by @Hellzy in #2626
New Contributors
- @samsullivan made their first contribution in #2598
- @adrien-f made their first contribution in #2625
- @dmellonielet made their first contribution in #2644
- @turettn made their first contribution in #2640
Full Changelog: v1.62.0...v1.63.0
Contributors
Assets 2
v1.62.0
Summary
In this release, Application Performance Monitoring (APM) improves header tag normalization, expands support for dynamic instrumentation
Application Security Management (ASM) adds support for passlist security events on gRPC.
What's Changed
Application Performance Monitoring (APM)
- [DSM] Close span on produce error in ckgo by @mborst in #2558
- contrib/database/sql: add in ddh, dddb propagation by @tabgok in #2550
- contrib/google.golang.org/grpc: fix flaky tests by removing arbitrary sleeps by @Julio-Guerra in #2584
- contrib/gofiber/fiber.v2: add possibility to exclude spans generation for specific requests by @nsakharenko in #2583
- ddtrace/tracer: added UnmarshalJSON method to sampling rules by @dianashevchenko in #2563
- tracer/remote-config: Subscribe to dynamic instrumentation configs via remote config by @grantseltzer in #2510
- ddtrace/tracer: go tracer tests lint. by @yuanyuanzhao3 in #2587
- statsdtest: Move mock statsd client for testing into its own package by @mtoffl01 in #2564
- normalizer: expand "header tag" normalization by @mtoffl01 in #2549
Application Security Management (ASM)
- appsec: fix remote security rules update by @Hellzy in #2568
- appsec: remove byte slices from WAF input by @eliottness in #2591
- appsec: DD_APPSEC_WAF_TIMEOUT default value: 4ms -> 1ms @eliottness in #2591
- contrib/google.golang.org/grpc: security rule passlist support by @Julio-Guerra in #2589
General
- Replace Go version 1.18+1.19 with 1.19+1.22.0 by @ddyurchenko in #2572
Fixes
- contrib/gorm.io/gorm.v1: do not panic on open by @bendiknesbo in #2560
New Contributors
- @mborst made their first contribution in #2558
- @bendiknesbo made their first contribution in #2560
- @tabgok made their first contribution in #2550
- @grantseltzer made their first contribution in #2510
- @yuanyuanzhao3 made their first contribution in #2587
- @nsakharenko made their first contribution in #2583
Full Changelog: v1.61.0...v1.62.0
Contributors
Assets 2
v1.61.0
Summary
In this release, Application Performance Monitoring (APM) adds support for Span Links (a highly requested feature!). This feature is currently supported within Datadog's OpenTelemetry API implementation.
The default trace context propagation order, which is used for traces in distributed workflows, will become datadog,tracecontext (previously it was tracecontext,datadog). This is not a breaking change, and customers should not experience any negative changes in behavior. If you experience any issues, please reach out to Datadog support.
Other APM features include out-of-the-box library integration support for github.com/jackc/pgx/v5 and the ability to ignore specific error types in the github.com/labstack/echo/v4 integration.
Changes
Application Performance Monitoring (APM)
- ddtrace/tracer: Switch default context propagation order by @JianyiGao in #2368
- tracing: Adds support for Span Links by @mabdinur in #2502
- ddtrace/tracer: added tracing_enabled option to remote config by @dianashevchenko in #2513
- contrib/labstack/echo.v4: add option to ignore errors by @mrkagelui in #1567
- contrib/jackc/pgx.v5: add pgx support by @renanferr in #2410
- dyngo: dynamically register listeners only if they're needed by @RomainMuller in #2394
Application Security Management (ASM)
ASM Customers upgrading to Go 1.22 should upgrade dd-trace-go or at least upgrade github.com/DataDog/go-libddwaf to version v2.3.1. Otherwise ASM Threats won't start with the following error:
appsec: threats detection cannot be enabled for the following reasons: 1 error occurred:
* unsupported Go version: go1.22.0
- appsec: support for go 1.22 by @Julio-Guerra in go-libddwaf#64
- appsec: DataDog's WAF ignore field with
ddwaf:"ignore"by @eliottness in go-libddwaf#68 - chore: go-libddwaf v2.3.1 by @eliottness (Release Notes)
Profiling
Data Streams Monitoring (DSM)
- [data streams] Track high watermark offsets by @piochelepiotr in #2511
General
- profiler: skip flaky TestExecutionTraceRandom by @nsrip-dd in #2531
- ci/appsec: refresher by @Julio-Guerra in #2537
- internal/namingschema: simplify the namingschema by @knusbaum in #2129
- interna/version: bump version.go to v1.61.0-dev by @katiehockman in #2501
- .github/workflows: fixes apm:ecosystem label for issues and PRs by @katiehockman in #2525
- opentelemetry: refactor span links code for clarity by @katiehockman in #2538
- chore: make the smoke-test workflow usable as go-libddwaf integ test by @RomainMuller in #2546
- chore: fix smoke test workflow_call situation by @RomainMuller in #2547
- chore: make git available in smoke-test docker image by @RomainMuller in #2548
- ci/system-tests: add graphql system tests by @Julio-Guerra in #2554
New Contributors
- @Juneezee made their first contribution in #2437
- @mabdinur made their first contribution in #2502
- @renanferr made their first contribution in #2410
Full Changelog: v1.60.3...v1.61.0
Contributors
Assets 2
v1.60.3
v1.60.2
Summary
Removed inet.af/netaddr dependency after domain removal.
Changes
Fixes
- go.mod: remove inet.af/netaddr dependency #2553 by @darccio @eliottness
Full Changelog: v1.60.1...v1.60.2