Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump ddtrace from 2.17.0 to 2.17.2 #17181

Merged
merged 1 commit into from
Nov 27, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 27, 2024

Bumps ddtrace from 2.17.0 to 2.17.2.

Release notes

Sourced from ddtrace's releases.

2.17.2

Bug Fixes

  • ASM

    • Ensures that common patches for exploit prevention and SCA are only loaded if required, and only loaded once.
  • LLM Observability

    • Ensures bedrock spans are finished even when streamed responses are not fully consumed.
    • Fixes an issue where decorators were not tracing generator functions properly.
  • Tracing

    • botocore: Resolves an issue in the Bedrock integration where not consuming the full response stream would prevent spans from finishing.
    • celery: Changes celery out.host span tag to point towards broker host url instead of local celery process hostname. Fixes inferred service representation issues when using celery.
    • grpcaio: Resolves a concurrency bug where distributed tracing headers were overwritten resulting in spans being assigned to the wrong trace.

2.17.1

Bug Fixes

  • ASM
    • Resolves an issue where some root spans were not appropriately tagged for ASM standalone.
  • Code Security
    • Patches the module dir function so original pre-patch results are not changed.
  • Tracing
    • Resolves an issue where the default versions of click and jinja2 installed on 3.8 were outside of the allowed minimum versions for autoinstrumentation.
Commits
  • 09d6215 fix(celery): change out.host tags to point to celery broker [backport 2.17] (...
  • ed7029f chore(iast): check the return value of astpatch_module [backport 2.17] (#11525)
  • 5d48816 chore(tracing): fix some service naming tests that were failing silently [bac...
  • f8fc03a fix(grpc.aio): resolve distributed tracing concurrency bug [backport 2.17] (#...
  • ea648a2 fix(botocore): ensure streamed bedrock spans finish [backport 2.17] (#11508)
  • 22184b0 fix(llmobs): sync and async generators can be decorated [backport 2.17] (#11531)
  • 1c2fdc0 fix(asm): add global states to ensure patching once [backport 2.17] (#11533)
  • 3e7e692 chore(tests): turn off dogweb CI runs [backport 2.17] (#11467)
  • e09980f chore(ci): run framework tests nightly instead of on PRs [backport 2.17] (#11...
  • e0884fb ci: reduce API requests in download wheel job [backport 2.17] (#11398)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [ddtrace](https://github.com/DataDog/dd-trace-py) from 2.17.0 to 2.17.2.
- [Release notes](https://github.com/DataDog/dd-trace-py/releases)
- [Changelog](https://github.com/DataDog/dd-trace-py/blob/main/CHANGELOG.md)
- [Commits](DataDog/dd-trace-py@v2.17.0...v2.17.2)

---
updated-dependencies:
- dependency-name: ddtrace
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner November 27, 2024 09:58
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 27, 2024
@miketheman miketheman merged commit c3d4c04 into main Nov 27, 2024
20 checks passed
@miketheman miketheman deleted the dependabot/pip/ddtrace-2.17.2 branch November 27, 2024 16:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant