chore(deps): update dependency dd-trace to v6.8.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
dd-trace	6.0.0 → 6.8.0

---

Release Notes

DataDog/dd-trace-js (dd-trace)

v6.8.0: 6.8.0

Compare Source

Features

• General: Report OTLP export status #​9517
• LLM Observability: Add experiments dataset operations #​9458
• LLM Observability: Emit experiment traces #​9479
• Test Optimization: Add ci.pipeline.display_name tag for Buildkite #​9541
• Test Optimization: Add WebdriverIO optimizations #​9556
• Test Optimization: Support Vitest Browser Mode #​9535
• Test Optimization: Support WebdriverIO with Mocha #​9520

Fixes

• AppSec: Fix express ssrf flaky test #​9564
• Feature Flags: Disable the provider for unsupported sources #​9482
• General: Wait for asyncEnd on promise settlement #​9538
• General: Wrap Node builtins once across CommonJS and ESM #​9576
• google-cloud-pubsub: Fix DSM context propagation for google-cloud-pubsub #​7582
• logs: Properly split name and version for scoped names #​9508
• rhea: DSM context leak between concurrent consumers #​7581
• Test Optimization: Detect swapped directories when inode numbers exceed 2^53 #​9580
• Test Optimization: Hide WebdriverIO worker messages #​9561
• Test Optimization: Keep playwright summary counts on one line #​9587
• Test Optimization: Wait for WebDriverIO worker payloads #​9565

Internal (CI, Testing, Benchmarking)

• Dependencies: Bump @​hono/node-server #​9603
• Dependencies: Bump @​smithy/smithy-client #​9550
• Dependencies: Bump next #​9572
• Dependencies: Bump the vendor-minor-and-patch-dependencies group across 1 directory with 3 updates #​9571
• eslint: Update eslint-plugin-unicorn to 72 #​9503
• Feature Flags: Update node server provider to 2.0.2 #​9480
• General: Drop the removed agent.close options argument #​9583
• General: Pin docker/login-action to a commit SHA #​9582
• licenses: Read dependencies directly from lockfiles #​9540
• lint: Clear shellcheck and regexp findings ahead of enabling the rules #​9586
• scripts: Speed up verify-exercised-tests and close detection gaps #​9542
• Test Optimization: Gather known-tests payloads until the child exits #​9590
• Test Optimization: Gather multiproject payloads until the child exits #​9577
• Test Optimization: Make preload path assertion portable #​9581
• Test Optimization: Prevent test swallowing errors #​9567
• Test Optimization: Set the API key on the config the exporter reads #​9579
• tsconfig: Drop deprecated alwaysStrict and baseUrl options #​9557

v6.7.0: 6.7.0

Compare Source

Features

• LLM Observability: Add support for OpenAI Agents (trace-processor) #​8044
• span-stats: Encode SpanKind and GRPCStatusCode in v0.6 stats payload #​9190

Fixes

• Feature Flags: Allow custom agentless endpoints #​9481
• General: Make peer service finalization idempotent #​9364
• LLM Observability: Address OpenAI Agents review feedback #​9526
• LLM Observability: Format AI SDK rich tool results #​9399
• LLM Observability: Llm observability traces have custom trace IDs #​9460
• standalone: Stamp _dd.apm.enabled on every span #​9506
• Test Optimization: Harden validation workflow #​9431
• Test Optimization: Reject malformed settings policies #​9362
• webpack: Opt out of typescript auto resolve #​9521

Internal (CI, Testing, Benchmarking)

• aws-sdk: Disable clock skew correction in the Lambda spec #​9537
• release: Exclude release proposal branches from license auto-commit #​9522
• Test Optimization: Cover worker thread preload #​9528

v6.6.0: 6.6.0

Compare Source

Features

• Profiling: Pack column numbers for server-side unminification #​9501

Fixes

• Test Optimization: Complete test runs after subscriber loss #​9381

Internal (CI, Testing, Benchmarking)

• Dependencies: Bump pnpm #​9498

v6.5.0: 6.5.0

Compare Source

Features

• AppSec: Report DD_APPSEC_AGENTIC_ONBOARDING in config telemetry #​9486
• ci: Add code coverage report flags #​9418
• ci: Add Test Optimization validation runbook #​9323
• express: Surface repeated middleware next() as a span event #​9243
• Feature Flags: Support agentless feature flag configuration #​9397
• frontdoor-agw: Add implementation for Azure Frontdoor and App Gateway inferred spans #​9089
• graphql: Add field schema coordinates #​9346
• LLM Observability: Capture audio in messages and OpenAI chat completions #​9083
• LLM Observability: Control-plane HTTP client for experiments #​9158
• LLM Observability: Support ai sdk v7 embedMany operations #​9466
• OpenTelemetry: Correct Next.js root request span naming #​9119
• Test Optimization: Upload failure screenshots #​9433

Fixes

• Feature Flags: Support file-traced optional provider loading #​9324
• General: Apply pm2_env env vars before tracer init #​8863
• General: Preserve ESM export aliases #​9436
• graphql: Preserve hook error overrides #​9435
• LLM Observability: Fix infinite recursion when using BedrockChatLanguageModel #​9487
• loader: Defer instrumentation graph during preload #​9485
• nyc: Preserve report generation failures #​9337
• standalone: Stamp _dd.apm.enabled on every exported chunk #​9483
• Test Optimization: Clear policies after settings failure #​9347
• Test Optimization: Harden RUM correlation failures #​9408
• Test Optimization: Release removed replay probes #​9336
• Test Optimization: Restore manual test context #​9356
• Test Optimization: Support NODE_OPTIONS auto-instrumentation #​9371
• Test Optimization: Support numeric retries with ATR #​9484
• Test Optimization: Support version 13.2 #​9456

Performance

• graphql: Reuse path-string cache for collapsed fields #​9401

Documentation

• electron: Replace README with internal-use-only notice on publish #​9407
• orchestrion: Refresh AST-rewriter reference for current engine #​9133

Internal (CI, Testing, Benchmarking)

• AppSec: Deflake RASP SSRF "should not detect threat" express tests #​9417
• AppSec: Drop redundant yarn install from sourcemap test #​9448
• ci: Tolerate coverage preload in clean env tests #​9429
• couchbase, kafkajs: Wait for client readiness #​9455
• coverage: Warm source maps before process exit #​9330
• Dependencies: Bump @​anthropic-ai/claude-agent-sdk #​9474
• Dependencies: Bump brace-expansion #​9452
• Dependencies: Bump bullmq #​9471
• Dependencies: Bump import-in-the-middle to 3.3.2 #​9447
• Dependencies: Bump the vendor-minor-and-patch-dependencies group across 1 directory with 3 updates #​9470
• electron: Give HTTP trace assertions the same timeout as IPC tests #​9409
• electron: Stabilize flaky CI (install/apt retries, IPC teardown) #​9316
• General: Assert DD_APPSEC_AGENTIC_ONBOARDING in v5 appsec config #​9489
• General: Bind mock server to tracer address #​9400
• General: Isolate span sampling rules fixture #​9430
• General: Run package scripts with npm #​9405
• General: Update eslint unicorn plugin to v65 #​8838
• General: Update one-pipeline to 1.1.0 #​9438
• General: Validate CPU percentage against process usage #​9289
• init: Guard fixture source logging #​9269
• LLM Observability: Bump tested openai version with new cassettes #​9439
• workflows: Add dd-octo-sts chainguard policy files #​8438
• workflows: Replace GITHUB_TOKEN with dd-octo-sts #​8432

v6.4.0: 6.4.0

Compare Source

Features

• electron: Ship dd-trace-electron package with reduced dependencies #​8948
• General: Trace core-API HTTP/2 servers #​9138
• graphql: Trace Apollo Federation entity resolvers and skip the health-check #​9134
• Test Optimization: Add EFD retry count override #​9344
• Test Optimization: Diagnose and fix Jest suite skipping #​9339

Fixes

• aws-sdk: Record kinesis DSM checkpoint only when context ships #​9183
• graphql: Skip Apollo health checks in Mercurius #​9363
• LLM Observability: Replace Object.create(span) with delegating wrapper to preserve OTel span private-field access #​9152
• proxy: Retain feature modules across tracing reconfiguration #​9331
• Test Optimization: Isolate retry status by spec #​9340
• Test Optimization: Preserve zero EFD retry budgets #​9341
• Test Optimization: Prevent negative test durations #​9380
• Test Optimization: Resolve disabled git upload immediately #​9338
• Test Optimization: Support cucumber 13.1 results #​9370
• Test Optimization: Wait for all worker writers #​9349

Performance

• graphql: Reuse filtered variables across resolve spans #​9225

Internal (CI, Testing, Benchmarking)

• AppSec: Select mongodb version by Node.js runtime in plugin tests #​9322
• ci: Set 16 retries for dd-sts-action #​9374
• Dependencies: Bump bullmq #​9350
• Dependencies: Bump pnpm #​9365
• Dependencies: Bump protobufjs from 8.6.5 to 8.7.0 in /vendor in the vendor-minor-and-patch-dependencies group across 1 directory #​9325
• express: Exercise loopback public entry #​9291
• express: Trace middleware via layer prototype dispatch #​9067
• General: Make no-traces timeout test deterministic #​9372
• General: Prepare lint and Vitest for TypeScript 7 #​9345
• General: Preserve coverage from custom plugin jobs #​9386
• General: Reject when no matching trace arrives before the timeout #​9177
• General: Select latest unversioned dependency range #​9352
• LLM Observability: Centralize session_id injection in handleLLMObsInjection #​9353
• LLM Observability: Cover compatible SDK provider version matrix #​9332
• Test Optimization: Assert complete run payloads #​9358
• Test Optimization: Make STS API key fetch non-fatal #​9320
• undici: Force proxy tunnel in CONNECT regression test #​9271

v6.3.0: 6.3.0

Compare Source

Features

• @​modelcontextprotocol/sdk: Add tracing for MCP server requests and client operations #​8916
• General: Sample event loop delay per iteration on Node 26.5+ #​9273
• LLM Observability: Propagate session_id to following spans and across services MLOB-7756 #​9279

Fixes

• AppSec: Instrument cookie parseCookie for cookie >=1.1 #​9272
• AppSec: Log the error when the native WAF binding fails to load #​9288
• AppSec: Suppress informational responses after blocking requests #​9290
• azure: Enable Web Crypto on Node 18 #​9311
• azure-functions: Fix span links and missing telemetry for non-HTTP triggers #​9278
• General: Handle invalid programmatic option values #​9312
• graphql: Honor errorExtensions on the mercurius request span #​9284
• OpenTelemetry: Wire span processors passed to the provider constructor #​9285
• Test Optimization: Do not mark unchanged tests as impacted #​9314
• Test Optimization: Handle disabled tests in serial retries #​9313
• Test Optimization: Omit empty FTR capture containers #​9304

Internal (CI, Testing, Benchmarking)

• AppSec: Deflake api-security telemetry metrics integration tests #​9303
• General: Select version targets by Node.js runtime #​9306
• lint: Revert editorconfig checker from npm to docker #​9315
• OpenTelemetry: Deflake OTLP metrics HTTP export test with fake timers #​9287
• readme: Update eol column for v5 #​9267

v6.2.0: 6.2.0

Compare Source

Features

• graphql: Add mercurius support with a top-level graphql.request span #​9142

Fixes

• AppSec: Report request headers on Lambda spans when AppSec is enabled #​9257
• General: Avoid rewriter source map marker in source #​9212
• General: Skip loader hook registration when instrumentation bails out #​9242
• guardrails: Forward abort telemetry synchronously to avoid a hung exit #​9268
• instrumentations: Preserve asyncEnd wait with code-transformer 0.16 #​9256
• msgpack: Cap MsgpackChunk growth at the agent intake limit #​8672
• OpenTelemetry: Wrap sdk-trace TracerProvider for sdk-node 0.220+ #​9255
• ssi: Run ssi in current proposal branch #​9223
• Test Optimization: Stop propagating metadata to workers #​9261

Documentation

• Serverless: Add serverless integrations skill #​9188

Internal (CI, Testing, Benchmarking)

• benchmarks: Support BP_EXTERNAL_S3_URL override #​9155
• guardrails: Skip node 24 initialize runtime checks #​9283
• init: Skip node 22 loader guardrails #​9277
• Test Optimization: Cover msw preload regression #​9262
• Test Optimization: Stabilize atf final status assertion #​9253
• Test Optimization: Stabilize request error tag reporting #​9254

v6.1.0: 6.1.0

Compare Source

Features

• claude-agent-sdk: Add support for @anthropic-ai/claude-agent-sdk #​9202
• graphql: Support collapse, depth, variables, and error extensions via env #​9111
• LLM Observability: Support vercel ai sdk v7 #​8949
• mongodb: Open a parent span for Collection#bulkWrite #​9109
• Test Optimization: Tag failure screenshot upload result #​9232
• Test Optimization: Upload failure screenshots to the v2 media endpoint #​8981

Fixes

• AppSec: Support apollo v5 blocking #​9007
• aws-durable-execution-sdk-js: SVLS-8588 set span type to serverless #​9162
• child_process: Stabilize promisified exec spans #​9180
• Crash Tracking: Resolve frames out-of-process on Linux #​9237
• fastify: Bound avvio's boot re-drive and stop swallowing async hook rejections #​9118
• graphql: Make the resolve span the active scope inside resolvers #​8208
• OpenTelemetry: Apply global/resource tags to OTel-bridged spans #​9229
• Profiling: Abort profile upload on socket timeout #​9217
• Test Optimization: Changed DD_MAJOR guards to greater than or equal #​9199
• Test Optimization: Ignore intermediate retry failures in aggregate status #​9231
• Test Optimization: Instrument build index module loads #​9211
• Test Optimization: Propagate no-worker request error tags #​9189
• Test Optimization: Report tests from custom environments #​9194
• Test Optimization: Stabilize failed test replay waits #​9193
• Test Optimization: Support concurrent Vitest tests #​8412
• Test Optimization: Support test.concurrent #​9209

Internal (CI, Testing, Benchmarking)

• AI Guard: Rework aiguard integrations #​9185
• AppSec: Remove dead code and fix stale comments in nosql mongodb analyzer #​9168
• coverage: Collect integration coverage with native V8 instead of istanbul #​9091
• Dependencies: Bump import-in-the-middle to 3.3.1 #​9235
• Dependencies: Bump npm #​9205
• General: Reject non-string version ranges in withVersions #​9187
• plugin-env: Read apm-integrations.yml after workflow rename #​9224
• Test Optimization: Stabilize Playwright retry tagging flake #​9216

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.