Skip to content

👷 Update dependency dd-trace to v6#171

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dd-trace-6.x
Open

👷 Update dependency dd-trace to v6#171
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dd-trace-6.x

Conversation

@renovate

@renovate renovate Bot commented Jul 11, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
dd-trace 5.109.06.0.0 age confidence

Release Notes

DataDog/dd-trace-js (dd-trace)

v6.0.0: 6.0.0

Compare Source

Breaking Changes
  • AppSec: Drop deprecated securityControls type #​8315
  • General: Drop support for Node.js 18 and 20 in v6 #​9104
  • General: Drop deprecated whitelist/blacklist plugin types from v6 surface #​8321
  • General: Gate addLink(spanContext, attributes) legacy overload off in v6 #​8319
  • graphql: Decouple resolver depth from path collapsing #​8774
  • LLM Observability: Change span resource names to be consistent between openai v3 and v4 #​5638
  • loader-hook: Add include configuration for import-in-the-middle #​6455
  • v6.0.0-pre #​3919
  • Test Optimization: Change default test session name #​5409
  • Test Optimization: Default Nx and Lage names #​8268
  • Test Optimization: Raise Cypress minimum version to 10.2.0 #​5397
  • Test Optimization: Raise Cypress minimum version to 12.0.0 #​8247
  • Test Optimization: Raise Jest minimum version to 28.0.0 #​8246
  • Test Optimization: Raise Mocha minimum version to 8.0.0 #​8245
  • Test Optimization: Raise Playwright minimum version to 1.38.0 #​5596
Features
  • AppSec: In App WAF support for lambda #​7783
  • General: SVLS-9168 add aws.durable.operation_attempt tag to durable operation spans #​8595
  • OpenTelemetry: OTLP trace metrics support #​8206
  • release: Add breaking changes to release proposal #​9196
  • Test Optimization: Add vitest no-worker init mode #​9173
Fixes
  • AppSec: Scope the mongodb nosql-analysis marker per query #​9076
  • aws-durable-execution-sdk-js: Treat FAILED checkpoints as replays #​9160
  • datastreams: Flush on write when flushInterval is 0 #​9120
  • General: Wrap lazily defined fs.opendir on Node 20 #​9094
  • Test Optimization: Handle missing beforeEach task result #​9129
  • Test Optimization: Report typecheck tests #​9176
  • Test Optimization: Route thread workers through main process #​9169
Performance
  • General: Load the GCP pubsub push plugin lazily #​9178
  • loader: Match instrumented modules with a shouldInclude predicate #​9026
Documentation
  • agents: Clarify internal import ordering rule #​9172
  • v6: Updated documentation for v6 #​9159
Internal (CI, Testing, Benchmarking)
  • child_process: Fix Bluebird flake that cascades to every later spec #​9078
  • child_process: Load the mock agent once per suite #​9113
  • coverage: Merge per-integration coverage in All Green before upload #​9086
  • Dependencies: Bump bullmq #​9164
  • Dependencies: Bump openai #​9122
  • Dependencies: Bump the vendor-minor-and-patch-dependencies group across 1 directory with 2 updates #​9163
  • Dynamic Instrumentation: Cover breakpoint error paths #​8996
  • engines: Widen engines.node to >=18 in CI to keep Node 18/20 jobs running #​9145
  • General: Derive supported config paths from canonical names #​9112
  • General: Drop dead profile assert helper and fix telemetry typo #​7686
  • General: Introduce namespace field and start pruning internalPropertyName #​8943
  • General: Key plugin version folders by single-digit major #​9052
  • General: Widen GC pause p95 bound to deflake #​9121
  • graphql: Migrate shimmer to orchestrion instrumentation #​7757
  • kafkajs: Drop retries:0 from header-disable producer tests #​9106
  • kafkajs: Stop pinning the produce offset in the sendBatch test #​9074
  • LLM Observability: Bump tested langchain versions with new cassette #​9135
  • LLM Observability: Use DD_LLMOBS_ENABLED in tagger sampling fixtures #​9107
  • oracledb: Bound connect and query timeouts in the ESM integration fixture #​9105
  • Add runtime family tag on appsec lambda span #​9153
  • feat(test optimization) Add Test Optimization HTTP cache reader #​8860
  • release: Add v6 into release workflows #​9103
  • release: Fix branch-diff Infinity crash on scientific notation SHAs #​9101
  • release: Fix publish by dropping dist-tag add #​9100
  • scripts: Disable V8 Maglev for Windows test children #​9131
  • Test Optimization: Handle 5xx retry in getKnownTests error test #​9110
  • Test Optimization: Prepare test metadata in main #​9171
  • Test Optimization: Split main and worker instrumentation #​9170
Contributors

@​BridgeAR @​juan-fernandez @​khanayan123 @​Mariovido @​pabloerhard @​rochdev @​sabrenner

v5.113.0

Compare Source

v5.112.0: 5.112.0

Compare Source

Features
  • claude-agent-sdk: Add support for @anthropic-ai/claude-agent-sdk #​9202
  • graphql: Support collapse, depth, variables, and error extensions via env #​9111
  • LLM Observability: Support vercel ai sdk v7 #​8949
  • mongodb: Open a parent span for Collection#bulkWrite #​9109
  • Test Optimization: Tag failure screenshot upload result #​9232
  • Test Optimization: Upload failure screenshots to the v2 media endpoint #​8981
Fixes
  • AppSec: Support apollo v5 blocking #​9007
  • aws-durable-execution-sdk-js: SVLS-8588 set span type to serverless #​9162
  • child_process: Stabilize promisified exec spans #​9180
  • Crash Tracking: Resolve frames out-of-process on Linux #​9237
  • fastify: Bound avvio's boot re-drive and stop swallowing async hook rejections #​9118
  • graphql: Make the resolve span the active scope inside resolvers #​8208
  • OpenTelemetry: Apply global/resource tags to OTel-bridged spans #​9229
  • Profiling: Abort profile upload on socket timeout #​9217
  • Test Optimization: Changed DD_MAJOR guards to greater than or equal #​9199
  • Test Optimization: Ignore intermediate retry failures in aggregate status #​9231
  • Test Optimization: Instrument build index module loads #​9211
  • Test Optimization: Propagate no-worker request error tags #​9189
  • Test Optimization: Report tests from custom environments #​9194
  • Test Optimization: Stabilize failed test replay waits #​9193
  • Test Optimization: Support concurrent Vitest tests #​8412
  • Test Optimization: Support test.concurrent #​9209
Internal (CI, Testing, Benchmarking)
  • AI Guard: Rework aiguard integrations #​9185
  • AppSec: Remove dead code and fix stale comments in nosql mongodb analyzer #​9168
  • coverage: Collect integration coverage with native V8 instead of istanbul #​9091
  • Dependencies: Bump import-in-the-middle to 3.3.1 #​9235
  • Dependencies: Bump npm #​9205
  • General: Reject non-string version ranges in withVersions #​9187
  • plugin-env: Read apm-integrations.yml after workflow rename #​9224
  • Test Optimization: Stabilize Playwright retry tagging flake #​9216

v5.111.0: 5.111.0

Compare Source

Features
  • AppSec: In App WAF support for lambda #​7783
  • General: SVLS-9168 add aws.durable.operation_attempt tag to durable operation spans #​8595
  • OpenTelemetry: OTLP trace metrics support #​8206
  • release: Add breaking changes to release proposal #​9196
  • Test Optimization: Add vitest no-worker init mode #​9173
Fixes
  • AppSec: Scope the mongodb nosql-analysis marker per query #​9076
  • aws-durable-execution-sdk-js: Treat FAILED checkpoints as replays #​9160
  • datastreams: Flush on write when flushInterval is 0 #​9120
  • General: Wrap lazily defined fs.opendir on Node 20 #​9094
  • Test Optimization: Handle missing beforeEach task result #​9129
  • Test Optimization: Report typecheck tests #​9176
  • Test Optimization: Route thread workers through main process #​9169
Performance
  • General: Load the GCP pubsub push plugin lazily #​9178
  • loader: Match instrumented modules with a shouldInclude predicate #​9026
Documentation
  • agents: Clarify internal import ordering rule #​9172
  • v6: Updated documentation for v6 #​9159
Internal (CI, Testing, Benchmarking)
  • child_process: Fix Bluebird flake that cascades to every later spec #​9078
  • child_process: Load the mock agent once per suite #​9113
  • coverage: Merge per-integration coverage in All Green before upload #​9086
  • Dependencies: Bump bullmq #​9164
  • Dependencies: Bump openai #​9122
  • Dependencies: Bump the vendor-minor-and-patch-dependencies group across 1 directory with 2 updates #​9163
  • Dynamic Instrumentation: Cover breakpoint error paths #​8996
  • engines: Widen engines.node to >=18 in CI to keep Node 18/20 jobs running #​9145
  • General: Derive supported config paths from canonical names #​9112
  • General: Drop dead profile assert helper and fix telemetry typo #​7686
  • General: Introduce namespace field and start pruning internalPropertyName #​8943
  • General: Key plugin version folders by single-digit major #​9052
  • General: Widen GC pause p95 bound to deflake #​9121
  • graphql: Migrate shimmer to orchestrion instrumentation #​7757
  • kafkajs: Drop retries:0 from header-disable producer tests #​9106
  • kafkajs: Stop pinning the produce offset in the sendBatch test #​9074
  • LLM Observability: Bump tested langchain versions with new cassette #​9135
  • LLM Observability: Use DD_LLMOBS_ENABLED in tagger sampling fixtures #​9107
  • oracledb: Bound connect and query timeouts in the ESM integration fixture #​9105
  • Add runtime family tag on appsec lambda span #​9153
  • feat(test optimization) Add Test Optimization HTTP cache reader #​8860
  • release: Add v6 into release workflows #​9103
  • release: Fix branch-diff Infinity crash on scientific notation SHAs #​9101
  • release: Fix publish by dropping dist-tag add #​9100
  • scripts: Disable V8 Maglev for Windows test children #​9131
  • Test Optimization: Handle 5xx retry in getKnownTests error test #​9110
  • Test Optimization: Prepare test metadata in main #​9171
  • Test Optimization: Split main and worker instrumentation #​9170

v5.110.0: 5.110.0

Compare Source

Features
  • AI Guard: Support aiguard standalone mode #​8993
  • AppSec: Add missing APISec metrics + APISec reorg #​8588
  • aws-sdk: Allow a function service for per-resource span naming #​8922
  • aws-sdk: Link batch SQS receives to every producer #​9058
  • General: Opt-in OpenTelemetry HTTP semantic conventions (DD_TRACE_OTEL_SEMANTICS_ENABLED) #​8933
  • General: Warn when Next.js is loaded before dd-trace #​8901
  • LLM Observability: Sampling decisions, rates, and propagation #​9030
  • OpenTelemetry: Enable improved OTel trace compatibility via opt-in configuration #​8894
Fixes
  • AI Guard: Resolve endpoint host correctly for regional Datadog sites #​9040
  • AppSec: Handle malformed url when parsing query #​9005
  • AppSec: Skip mongodb >=7 NoSQL tests on Node.js < 20 #​8975
  • aws-sdk: Allow EventBridge context injection up to 1mb #​9038
  • benchmarks: Surface variant errors and narrow non-benchmark change gate #​9031
  • ci: Apply Vitest ATR retries to project configs #​8985
  • ci: Deduplicate git and ci test metadata #​8974
  • datastreams: Preserve extracted schema field descriptions #​7838
  • Dependencies: Bump import-in-the-middle to 3.1.0 #​8972
  • Dynamic Instrumentation: Keep breakpoint id in sync after update #​8968
  • express: Restore loopback middleware phase ordering #​9062
  • Feature Flags: Bundle the optional peer so the plugin sees it #​8999
  • General: [OTLP] detect http/https protocol from parsedUrl.protocol #​9028
  • General: Expose resource, tags and maxPerSecond on SamplingRule #​9057
  • General: Guard middleware error publishing against re-entrant recursion #​8789
  • General: Stop exposing deprecated alias entries as Config properties #​9061
  • General: Surface late-load framework warning regardless of startupLogs #​9068
  • General: Test non_webpack_require in optional-peer guard #​9051
  • General: Use UNIX-epoch nanoseconds for OTLP metric timestamps #​8978
  • graphql: Restore graphql-yoga execute spans on CommonJS #​9060
  • LLM Observability: Emit a single llm span for langchain + anthropic #​8938
  • mariadb: Stop tcp.connect spans leaking from 3.4.1 pools #​9064
  • Profiling: Fallback from allocation to heap profiling before v26 #​8946
  • router: Expose middleware option in TypeScript Integration types #​8582
  • sampling: Materialize the priority decision when reading the W3C sampled flag #​8926
  • span-stats, exporters: Derive socketPath from the agent URL #​9042
  • web: Let late routes supersede endpoint fallback #​8998
Performance
  • Dynamic Instrumentation: Sample probes in breakpoint conditions #​8967
  • loader: Use synchronous iitm hooks when available #​8942
Documentation
  • agents: Codify failure-handling and flaky-test discipline
  • General: Reserve feat/fix for production code in commit convention #​9018
Internal (CI, Testing, Benchmarking)
  • AppSec: Disable remote config in the fastify RASP blocking suite #​9054
  • codeowners: Clean up stale and ambiguous rules #​8994
  • dependabot: Broaden auto-merge coverage and rebalance update groups #​8939
  • Dependencies: Bump @​apm-js-collab/code-transformer from 0.14.0 to 0.15.0 in /vendor in the vendor-minor-and-patch-dependencies group across 1 directory #​9046
  • Dependencies: Bump @​aws/durable-execution-sdk-js #​9037
  • Dependencies: Bump stripe #​9082
  • Dependencies: Bump the vendor-minor-and-patch-dependencies group across 1 directory with 2 updates #​9011
  • Dependencies: Bump undici from 6.24.0 to 6.27.0 #​8997
  • Dependencies: Bump vercel ai sdk dependency in tests #​9041
  • Dynamic Instrumentation: Drop unused snapshot probe index #​8969
  • General: Add editorconfig validation to linting #​7594
  • General: Bump google-gax dep in tests #​9050
  • General: Derive installed and tested plugin versions from one resolver #​9019
  • General: Fix independent plugin and config spec reliability #​9020
  • General: Parse and resolve defaults in getValueFromEnvSources #​8925
  • General: Prepare infrastructure for dropping Node.js 18/20 in v6 #​9033
  • General: Regenerate supported integration version metadata #​9072
  • guardrails: Remove redundant runtime-check unit test #​9098
  • harness: Make withVersions fail loudly on an unmatched module #​9069
  • bump pprof nodejs to v5.15.1 #​9087
  • pr-title: Make reverts always semver-patch #​8709
  • prisma: Cleaned up prisma tests #​8947
  • prisma: Skip lib checks for generated client builds #​8995
  • Profiling: Derive config from tracer env names directly #​8890
  • Profiling: Make profiling exporter fields private #​9043
  • redis: Prepare redis tests for redis v6 #​9027
  • release: Consolidate publish jobs into a matrix-driven single job #​9071
  • release: Improve release changelog readability and dependency scope #​9044
  • release: Support promoting pre-release to stable on v6.x #​9066
  • setup: Arm a 120s watchdog to turn exit-hangs into fast failures #​9056
  • sirun: Report operations per second #​9039
  • startup: Add ESM variant that exercises the iitm loader #​8956
  • Test Optimization: Stabilize selenium browser profiles #​9059

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner July 11, 2026 06:52
@datadog-datadog-prod-us1

Copy link
Copy Markdown

Pipelines

Fix all issues with BitsAI

⚠️ Warnings

🚦 4 Pipeline jobs failed

DataDog/electron-sdk | lint   View in Datadog   GitLab

DataDog/electron-sdk | e2e   View in Datadog   GitLab

DataDog/electron-sdk | integration   View in Datadog   GitLab

View all 4 failed jobs.

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: bfbf221 | Docs | Datadog PR Page | Give us feedback!

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PR Review — Score: 4.5 / 5

This is a straightforward Renovate bump of the bundled dd-trace dependency from 5.109.0 to 6.0.0. The SDK's integration surface — experimental.exporter: 'electron', the datadog:apm:electron:export diagnostics channel, and disabled electron plugin instrumentation — is unchanged and validated by passing unit tests and a full local e2e run (35/35). I would approve this PR.

Why 4.5: Clean lockfile-only diff; no SDK code changes required; dd-trace v6's Node >=22 engines requirement aligns with the existing electron >=39 peer dependency (Electron 39+ ships Node 22+); unit and e2e tests exercise the integration successfully.

Why not 5: Major-version dependency bump lacks a CHANGELOG entry following the precedent set by #136, and dd-trace v6 drops Node 18/20 support — a behavioral tightening worth documenting even though the peer dep already excludes affected Electron versions.


Findings

  • [Minor] Missing CHANGELOG entry — Record the dd-trace 6.0.0 bump under Internal, matching the pattern from #136.
Open in Web View Automation 

Sent by Cursor Automation: electron-sdk reviews

Comment thread package.json
},
"dependencies": {
"dd-trace": "5.109.0"
"dd-trace": "6.0.0"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

dd-trace v6 is a major release (engines.node: ">=22", drops Node 18/20). The existing electron >=39 peer dependency already implies Node 22+ at runtime, so no SDK code changes are needed here — confirmed by unit tests and a full local e2e run with 6.0.0.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: bfbf221c25

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread package.json
},
"dependencies": {
"dd-trace": "5.109.0"
"dd-trace": "6.0.0"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Refresh the E2E app lockfile for dd-trace 6

In CI, the e2e and integration jobs run yarn test:e2e:init / yarn test:integration:init, and both scripts execute cd e2e/app && yarn install; Yarn's install docs state that --immutable defaults to true on CI and aborts if the lockfile would change. This dependency bump leaves e2e/app/yarn.lock resolving the portal SDK dependency to dd-trace: "npm:5.109.0", so those CI installs will need to rewrite the lockfile to 6.0.0 and fail before tests run. Please update the E2E app lockfile along with the root lockfile.

Useful? React with 👍 / 👎.

Comment thread package.json
},
"dependencies": {
"dd-trace": "5.109.0"
"dd-trace": "6.0.0"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Refresh the playground lockfile for dd-trace 6

The playground CI job runs yarn dev:init, and that script executes cd playground && yarn install; the lint job also runs the same init script. Since playground/yarn.lock still resolves the portal SDK dependency to dd-trace: "npm:5.109.0", Yarn's CI-default immutable install will need to rewrite that lockfile after this bump and abort before the playground and lint checks can run. Please update the playground lockfile as part of the dependency bump.

Useful? React with 👍 / 👎.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants