1.47.0

Components

Application Security Management (IAST)

• 🐛 Exclude com.stripe.net.HttpURLConnectionClient to solve IAST SSRF vulnerability false positives (#8483 - @jandro996)
• 🐛 Add exclusion to solve IAST weak randomness vulnerability false positives (#8462 - @jandro996)
• ✨ Fix weak randomness false positive in Kafka client (#8408 - @smola)
• ✨ Fix location for SSRF with Kong Unirest (#8407 - @smola)
• ✨ Exclude IBM Instana from IAST (#8406 - @smola)
• 🐛 Fix org.json iast instrumentation test for latest dependency (#8347 - @jandro996)
• ✨ Configuration to Disable APM Tracing (#8219 - @jandro996)
• ✨ Address cookie vulnerability cardinality issues (#8210 - @jandro996)
• ✨ Email HTML Injection detection in IAST (#8205 - @sezen-datadog)

Application Security Management (WAF)

• 🐛✨ Ensure usr.exists tag is not overridden when UsernameNotFoundException is thrown (#8376 - @manuel-alvarez-alvarez)
• 🐛✨ Ensure usr.exists tag is not overridden by auto instrumentation (#8374 - @manuel-alvarez-alvarez)
• ✨ Update appsec metrics with event_rules_version tag (#8354 - @sezen-datadog)
• ✨ Update metrics: appsec.waf.requests (#8353 - @Mariovido)
• ✨ Improve ASM support in vert.x 5.0 (#8285 - @manuel-alvarez-alvarez)
• ✨ Update metrics: appsec.waf.updates and appsec.waf.init (#8280 - @Mariovido)
• ✨ Configuration to Disable APM Tracing (#8219 - @jandro996)

Build & Tooling

• 🐛 Do not generate Muzzle references for primitive arrays in method body (#8361 - @amarziali)
• 📖 Improve dev env setup documentation for Windows (#8180 - @lucaspimentel)

Continuous Integration Visibility

• ✨ Add support for skip-EFD tagging (#8487 - @nikita-tkachenko-datadog)
• 🐛 Fix an NPE in Gradle Android instrumentation (#8484 - @nikita-tkachenko-datadog)
• ✨ Consider modified tests when applying fail-fast tests ordering (#8474 - @nikita-tkachenko-datadog)
• ✨ Implement tests reordering for TestNG (#8467 - @nikita-tkachenko-datadog)
• 🐛 Fix Gradle Launcher instrumentation to not interfere with Gradle Test Kit (#8465 - @nikita-tkachenko-datadog)
• 🧹 Use separate TestEventHandlers per framework in CI Vis instrumentations (#8451 - @daniel-mohedano)
• ✨ Remove warning log when JUnit 4 test method cannot be retrieved (#8445 - @nikita-tkachenko-datadog)
• 🐛 Fix Scalatest tracing for tests that are reported asynchronously (#8444 - @nikita-tkachenko-datadog)
• ✨ Implement attempt to fix tests (#8393 - @daniel-mohedano)
• ✨ Implement test disabling (#8377 - @daniel-mohedano)
• ✨ Update CODEOWNERS parser to not log errors on comments with leading whitespace (#8349 - @nikita-tkachenko-datadog)
• ✨ Request Test Management tests list (#8345 - @daniel-mohedano)
• ✨ Receive test management settings from CIVis settings request (#8331 - @daniel-mohedano)
• ✨ Implement quarantined tests tagging (#8326 - @nikita-tkachenko-datadog)
• ✨ Implement tests quarantining (#8320 - @nikita-tkachenko-datadog)
• ✨ Add tag to specify if the user is setting DD_SERVICE (#8318 - @daniel-mohedano)

Crash tracking

• ✨ Only fork jps when required (#8419 - @mcculls)
• 🐛 Use Java home of the crashed process to launch crash uploader (#8348 - @jbachorik)

Data Streams Monitoring

• 🐛 Fix error happening when sqs message attributes are readonly (#8473 - @vandonr)
• 🐛 Fix bug on proto schema extraction (#8403 - @vandonr)
• 🐛 Fix service name overrides in consumers (#8387 - @piochelepiotr)

Database Monitoring

• ✨ Add DBMTracePreparedStatements to tracer configuration log (#8508 - @cecile75)

Dynamic Instrumentation

• ✨ Look in another location for grpc service methods (#8468 - @evanchooly)
• 🐛 Fix Exception Replay with Lambda proxy classes (#8452 - @jpbempel)
• ✨ Add code origin support for spring-webmvc (#8416 - @evanchooly)
• ✨ Add support for scanning jar from loaded class (#8370 - @jpbempel)
• 🐛 Disable capture of entry values (#8369 - @jpbempel)
• 🐛 Fix CodeOrigin for @Trace annotation (#8344 - @jpbempel)
• 🐛 Fix equals/hashCode for CodeOrigin probe (#8319 - @jpbempel)
• ✨ Add code origin support to kafka message listeners (#8301 - @evanchooly)

Metrics

• ✨ Create metric: appsec.waf.error (#8381 - @sezen-datadog)
• ✨ Create metric: appsec.rasp.error (#8364 - @sezen-datadog)

Profiling

• ✨ Bump ddprof library to 1.22.0 (#8463 - @jbachorik)
  • IBM J9 8u361 corresponds to OpenJDK 8u362 by @jbachorik in DataDog/java-profiler#187
  • Fix compatibility with musl libc 1.2.4 by @jbachorik in DataDog/java-profiler#189
  • Modify version extraction by @jbachorik in DataDog/java-profiler#179
  • Do not write null values to jvminfo event by @jbachorik in DataDog/java-profiler#184
  • Productize VMStructs-based stack walker by @jbachorik in DataDog/java-profiler#177
  • A few minor downport issues by @jbachorik in DataDog/java-profiler#180
  • Enable ASGCT by default on fairly safe J9 JDK versions by @jbachorik in DataDog/java-profiler#181
• 🐛 Exclude OrderedThreadPoolExecutor from queue-time measurements (#8456 - @jbachorik)
• ✨ Record JVM info on JVMs without JFR (#8431 - @jbachorik)
• 🐛 Actually use CleanupTask in TempLocationManager (#8420 - @mcculls)
• ✨ Only fork jps when required (#8419 - @mcculls)
• 🐛 Adjust JFR checks for J9 (#8405 - @jbachorik)
• 🧹 Disable smap RSS parsing by default (#8342 - @MattAlp)

Telemetry

• 🐛 Add support for JBoss jar:file format to DependencyResolver (#8428 - @jandro996)
• ✨ Update metrics: appsec.waf.requests (#8353 - @Mariovido)

Trace context propagation

• ✨ Introduce tracing propagator (#8313 - @PerfectSlayer)

Tracer core

• 🐛 Fix Stable Config telemetry source names (#8460 - @BaptisteFoy)
• ✨ Probe trace endpoints with a valid payload of empty arrays (#8414 - @mcculls)
• ✨ Add 1 minute fail-safe to JUL/JMX class-loading callback (#8399 - @mcculls)
• ✨ Migrate DSM injection calls to context-first APIs (#8383 - @PerfectSlayer)
• 🧹 Move continuation capture methods from scope to tracer (#8371 - @mcculls)
• ✨ Migrate context extraction calls to context-first APIs (#8368 - @PerfectSlayer)
• 🧹 Migrate context injection calls to context-first APIs (#8358 - @PerfectSlayer)
• 💡 Support reading configurations from files (#8338 - @mtoffl01)
• 💡 Implementation of BaggagePropagator and BaggageContext (#8330 - @mhlidd)
• 🧹 Combine continuation implementations into one which supports multiple activations (#8324 - @mcculls)
• ✨ Introduce tracing propagator (#8313 - @PerfectSlayer)
• ✨ Remove old context propagation API (#8271 - @PerfectSlayer)

Instrumentations

AWS Lambda instrumentation

• 🐛 Send error message and stack to Lambda extension (#8417 - @nhulston)

AWS SDK instrumentation

• 🐛 Fix error happening when sqs message attributes are readonly (#8473 - @vandonr)
• 💡 Inject trace context into AWS Step Functions input (#7585 - @DylanLovesCoffee)

Core Java language instrumentation

• ✨ Look in another location for grpc service methods (#8468 - @evanchooly)
• ✨ Add code origin support for spring-webmvc (#8416 - @evanchooly)
• 💡 Implementation of BaggagePropagator and BaggageContext (#8330 - @mhlidd)
• ✨ Add code origin support to kafka message listeners (#8301 - @evanchooly)

gRPC instrumentation

• ✨ Look in another location for grpc service methods (#8468 - @evanchooly)

Kafka instrumentation

• ✨ Add messaging.destination.name tag to kafka integrations (#8366 - @rarguelloF)

Protocol Buffer instrumentation

• 🐛 Fix bug on proto schema extraction (#8403 - @vandonr)