1.40.0

Components

Application Security Management (IAST)

• ✨ Send IAST vulnerability secure marks to backend (#7645 - @jandro996)
• 🧹 Remove dependency with thread locals in jersey IAST instrumentation (#7619 - @manuel-alvarez-alvarez)
• 🐛 Fix jackson json parser propagation for field names (#7606 - @Mariovido)
• Add XSS support for Velocity (#7546 - @Mariovido)
• Add XSS support for Freemarker prior 2.3.24-incubating (#7497 #7532 - @Mariovido)

Application Security Management (WAF)

• 🐛 Fixed closing WAF context (#7681 - @ValentinZakharov)
• ✨ Reduce log level for "WAF object had not been closed" (#7657 - @smola)
• 🐛 Update libsqreen library to 11.0.1 fixing fingerprint generation (#7655 - @manuel-alvarez-alvarez)
• 🐛 Fix NullPointerException in RASP metrics (#7654 - @smola)
• ✨ Add support for user tracking in spring security (#7633 - @manuel-alvarez-alvarez)
• ⚡ Short circuit for WAF/RASP calls (#7630 - @ValentinZakharov)
• ✨ Add support for session fingerprints to the WAF (#7591 - @manuel-alvarez-alvarez)
• 🐛 Fix Exploit Prevention capability announcement on remote config (#7586 - @smola)
• 🧹 Extract EventTracker logic to the appsec module (#7554 - @manuel-alvarez-alvarez)
• Add LFI exploit prevention support (#7487 - @jandro996)

Continuous Integration Visibility

• Use remote service to get CI provider info when configured to do so (#7689 - @nikita-tkachenko-datadog)
• ✨ Add CPU count tag to Test Visibility events (#7659 - @nikita-tkachenko-datadog)
• 🐛 Fix tracing skipped suites in MUnit 1.0.1 (#7605 - @nikita-tkachenko-datadog)
• Add pull_request extra tags for GitHub Actions (#7604 - @nikita-tkachenko-datadog)
• Set test session name on test/suite/module/session events (#7603 - @nikita-tkachenko-datadog)
• ITR code coverage support (#7367 - @nikita-tkachenko-datadog)

Dynamic Instrumentation

• Update Code Origin span tags (#7685 - @shatzi)
• Fix duplicated locals with arguments (#7683 - @jpbempel)
• 🐛 Fix number typing used in maps (#7676 - @jpbempel)
• 🐛 Fix evaluation errors sampling (#7656 - @jpbempel)
• Fix message for snapshots with evaluation errors (#7653 - @jpbempel)
• ✨ Add File and Path as string primitive (#7652 - @jpbempel)
• Refactor DI startup to make Exception Replay can be started up alone (#7648 - @jpbempel)
• Add Exception Replay config parameters (#7647 - @jpbempel)
• Add support of spring boot nested jar for SymDB (#7635 - @jpbempel)
• Fix local var hoisting (#7624 - @jpbempel)
• Implement the DebuggerProbe (#7588 - @evanchooly)
• ✨ Add support for Optional(Int|Double|Long) (#7581 - @jpbempel)
• Add exception_hash tag for span (#7574 - @jpbempel)
• ✨ Add watches support through probe tags (#7573 - @jpbempel)
• 🐛 Fix span decoration probe EMITTING status (#7569 - @jpbempel)
• 🐛 Add git commit sha and repostiory url in snapshot (#7566 - @jpbempel)
• ✨ Send telemetry log when Probe status queue is full (#7557 - @jpbempel)
• ✨ Add collection of local var for method probe (#7548 - @jpbempel)
• Add smoke test for Exception Replay (#7504 - @jpbempel)

GraalVM native-image

• 🐛 Enable profiling startForceFirst silently for native image builds (#7555 - @MattAlp)

Profiling

• Bump profiler to 1.15.0 (#7682 - @MattAlp)
• 🐛 delay closing profiling state when scope reference count > 1 (#7639 - @richardstartin)
• Add JFR queuetime threshold to recording settings (#7609 - @richardstartin)
• 🐛 Enable profiling startForceFirst silently for native image builds (#7555 - @MattAlp)
• ✨ Improves info around smap parsing success/failure (#7461 - @MattAlp)

Telemetry

• Improved stack trace reporting via telemetry (#7632 - @ValentinZakharov)
• ✨ Enable telemetry logs by default (#7631 - @smola)

Tracer core

• ✨ Mute internal process start (#7572 - @PerfectSlayer)

Tracer internal logging

• Improved stack trace reporting via telemetry (#7632 - @ValentinZakharov)

Instrumentations

Akka instrumentation

• ✨ Add akka-http client 10.6+ support (#7680 - @amarziali)

Apache Spark instrumentation

• ✨ Add spark.stage details attribute at the end of the stage (#7608 - @paul-laffon-dd)

AWS Lambda instrumentation

• ✨ Parse 128 bit trace Id retuned by lambda extension (#7620 - @agocs)

Eclipse Vert.x instrumentation

• 🐛 Vertx: wrap internal routes to let the context propagate for blocking handlers (#7563 - @amarziali)

GraphQL instrumentation

• 🐛 prevent errors when dealing with MinimalStage in graphql (#7560 - @vandonr)

gRPC instrumentation

• make it possible to disable gRPC message spans (#7642 - @richardstartin)

JDBC instrumentation

• ✨ Add support for Intersystems IRIS jdbc driver (#7607 - @amarziali)

OpenTelemetry instrumentation

• ✨ Support addEvent Otel API (#7408 - @mtoffl01)

Reactor instrumentation

• Test Reactor Core latest versions (#7595 - @amarziali)

Redis instrumentation

• 🐛 Make redisson tracing the full request (#7571 - @amarziali)

Spring instrumentation

• 🐛 Spring scheduling: ensure spans have no parent (#7583 - @amarziali)

All other instrumentations

• ✨ Improve context propagation for rxjava1 observables (#7686 - @amarziali)
• ✨ Google PubSub: implement switchable legacy tracing mode (#7564 - @amarziali)
• 🐛 Tibco BW 5: fix child process parentship (#7414 - @amarziali)