Skip to content

1.19.0
Compare
Choose a tag to compare
@github-actions github-actions released this 08 Aug 21:07
· 2443 commits to master since this release
v1.19.0
b023c07
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Warning

Do not use this version for profiling, the excessive resource usage was introduced in this version and fixed in v1.19.2

Components

Application Security Management (IAST)

  • Extend apache commons StringEscapeUtils tainting support (#5638)
  • Update IAST exclusions to not filter JSPs and hdiv related classes (#5625)
  • 🐛 Fix HttpOnly cookie detection and add small refactorings (#5615)
  • Implemented trust boundary violation vulnerability detection (#5612)
  • Support escape functions used in OWASP Benchmark for Trust Boundary Violation (#5608)
  • Add support for XSS vulnerability (#5589)
  • Add String#split taint tracking (#5584)
  • Add String#toCharArray taint tracking (#5576)
  • Update IAST redaction algorithm (#5528)

Application Security Management (WAF)

  • Upgrade to libddwaf 1.12.0/libsqreen 7.1.0 (#5658)
  • 🐛 More accurately report whether the request was blocked (#5594)
  • Add Fastly and CloudFlare headers to ASM attacks (#5579)
  • Response substitution on undertow (#5536)
  • Response header substitution in jetty (#5467)
  • Automatic user events tracking (Spring Security) (#5350)

Continuous Integration Visibility

  • 🐛 Close outstanding APM spans before finishing test span (#5689)
  • Disable code coverage segments data gathering by default (#5627)
  • Report test framework data from child processes instead of parsing project dependencies (#5613)
  • Add Cucumber support to CI Visibility (#5611)
  • ⚡ Replace reflection calls with method handle invocations in test utils (#5610)
  • Send test session events when build system is not instrumented (#5603)
  • Implement Intelligent Test Runner metadata tags (#5602)
  • 🐛 Fix Maven instrumentation for parallel builds (#5598)
  • 🐛 Fix TestNG instrumentation to use immutable ITestResult.getName() instead of mutable ITestResult.getTestName() (#5595)
  • Pass skippable tests from parent to children with signal server (#5581)
  • Support test framework version extraction for legacy TestNG (#5580)
  • 🧹 Move ITR skipping logic to test events handler (#5575)
  • Tag test spans with method description (#5564)
  • 🧹 Split DDTestModuleImpl into parent process and child process implementations (#5549)
  • Implement repository index sharing between processes (#5512)
  • Update signal server and client with mechanism to send/receive signal responses (#5511)

Data Streams Monitoring

  • Add DSM Context Propagation for SQS v2 (#5637)

Dynamic Instrumentation

  • Fix sampling when log probe is evaluation at Exit (#5692)
  • Add UDS support for the debugger by using OkHttpUtils.buildHttpClient (#5621)
  • Add capture of inherited (static) fields (#5609)
  • Add capture of static fields (#5588)

Metrics

  • Enable/disable embedded JMXFetch with dynamic config (#5586)

Profiling

  • Upgrade to ddprof 0.70.0 (#5676)
  • Upgrade to ddprof 0.67.0 (#5639)
  • Upgrade to ddprof 0.65.0 (#5590)
  • Disable wallclock profiling during Socket.connect (#5587)
  • Improve profiler config ergonomics (#5583)

Remote Configuration

  • Add debug log when sending RC request (#5672)
  • Enable/disable embedded JMXFetch with dynamic config (#5586)
  • Avoid logging InterruptedIOExceptions from remote-config as parsing/processing failures (#5577)
  • Change traceDebug with dynamic config (#5482)

Telemetry

  • 🐛 Fix spans_created and spans_finished integration_name tags (#5681)
  • ⚡ Fix #5640 Telemetry startup degradation (#5678)
  • 🧹 Telemetry V2 preps (Serialization Refactoring) (#5640)
  • 🐛 Fix span metric names for created and finished spans (#5600)

Tracer core

  • Updated config parsing for integer ranges for grpc (#5683)
  • Make partial flushing settings consistent with other tracer libraries (#5682)
  • Only check CLIENT/SERVER_ERROR_STATUSES when we know we have a status to check (#5596)
  • Support HTTP client header tagging (#5585)
  • ✨ Add span links support (#5569)
  • 🐛 Add config option to disable baggage as tag injection (#5563)

Instrumentations

Apache Spark instrumentation

  • ✨ Capture more Spark parameters (#5630)
  • ✨ Add support for spark structured streaming (#5629)
  • Compute distribution of task metrics for each stage (#5542)
  • Aggregate peak execution memory using the max of all stages (#5205)

AWS SDK instrumentation

  • Avoid sending trace context twice when using JMS-over-SQS (#5626)

JDBC instrumentation

  • 🐛 Add edb as supported postgres connection type (#5623)
  • 💡 Add IBM Informix support to JDBC instrumentation (#5599)

JMS instrumentation

  • Avoid sending trace context twice when using JMS-over-SQS (#5626)

Netty instrumentation

  • ✨ Fix async propagation in some versions of undertow (#5649)

OpenTelemetry instrumentation

  • ✨ Add support for OpenTelemetry Context.makeCurrent() (#5673)
  • 🐛 Fix OpenTelemetry Context instrumentation activation (#5671)
  • 🐛 Fix possible invalid parent span using OpenTelemetry API (#5644)
  • 🐛 Fix empty string attribute value (#5574)

Spring instrumentation

  • 💡 Add Spring Web Service error capture instrumentation (#5643)
  • Instrument spring-messaging to reduce chance of disconnected traces (#5631)
  • Disabling `spring-path-filter' integration should remove all path-related filters (#5578)
  • Automatic user events tracking (Spring Security) (#5350)
Assets 6
Loading