datadog 2.17.0 → 2.18.0

data/lib/datadog/tracing/tracer.rb

@@ -273,7 +273,7 @@ module Datadog
       # Sample a span, tagging the trace as appropriate.
       def sample_trace(trace_op)
         begin
-          @sampler.sample!(trace_op)
+          @sampler.sample!(trace_op) if trace_op.sampling_priority.nil?
         rescue StandardError => e
           SAMPLE_TRACE_LOG_ONLY_ONCE.run do
             logger.warn { "Failed to sample trace: #{e.class.name} #{e} at #{Array(e.backtrace).first}" }
@@ -378,7 +378,12 @@ module Datadog
           event_span_op.service ||= @default_service
         end
 
+        events.trace_propagated.subscribe do |event_trace_op|
+          sample_trace(event_trace_op)
+        end
+
         events.span_finished.subscribe do |event_span, event_trace_op|
+          sample_trace(trace_op) if event_trace_op.sampling_priority.nil?
           sample_span(event_trace_op, event_span)
           flush_trace(event_trace_op)
         end
@@ -516,7 +521,6 @@ module Datadog
 
       # Flush finished spans from the trace buffer, send them to writer.
       def flush_trace(trace_op)
-        sample_trace(trace_op) unless trace_op.sampling_priority
         begin
           trace = @trace_flush.consume!(trace_op)
           write(trace) if trace && !trace.empty?

data/lib/datadog/version.rb

@@ -3,7 +3,7 @@
 module Datadog
   module VERSION
     MAJOR = 2
-    MINOR = 17
+    MINOR = 18
     PATCH = 0
     PRE = nil
     BUILD = nil

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: datadog
 version: !ruby/object:Gem::Version
-  version: 2.17.0
+  version: 2.18.0
 platform: ruby
 authors:
 - Datadog, Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-06-02 00:00:00.000000000 Z
+date: 2025-07-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: msgpack
@@ -50,14 +50,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.22.0.0.2
+        version: 1.24.1.0.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.22.0.0.2
+        version: 1.24.1.0.0
 - !ruby/object:Gem::Dependency
   name: libdatadog
   requirement: !ruby/object:Gem::Requirement
@@ -170,14 +170,14 @@ files:
 - lib/datadog/appsec/anonymizer.rb
 - lib/datadog/appsec/api_security.rb
 - lib/datadog/appsec/api_security/lru_cache.rb
+- lib/datadog/appsec/api_security/route_extractor.rb
+- lib/datadog/appsec/api_security/sampler.rb
 - lib/datadog/appsec/assets.rb
 - lib/datadog/appsec/assets/blocked.html
 - lib/datadog/appsec/assets/blocked.json
 - lib/datadog/appsec/assets/blocked.text
 - lib/datadog/appsec/assets/waf_rules/README.md
-- lib/datadog/appsec/assets/waf_rules/processors.json
 - lib/datadog/appsec/assets/waf_rules/recommended.json
-- lib/datadog/appsec/assets/waf_rules/scanners.json
 - lib/datadog/appsec/assets/waf_rules/strict.json
 - lib/datadog/appsec/autoload.rb
 - lib/datadog/appsec/component.rb
@@ -251,14 +251,13 @@ files:
 - lib/datadog/appsec/metrics/telemetry.rb
 - lib/datadog/appsec/monitor.rb
 - lib/datadog/appsec/monitor/gateway/watcher.rb
-- lib/datadog/appsec/processor.rb
 - lib/datadog/appsec/processor/rule_loader.rb
-- lib/datadog/appsec/processor/rule_merger.rb
 - lib/datadog/appsec/rate_limiter.rb
 - lib/datadog/appsec/remote.rb
 - lib/datadog/appsec/response.rb
 - lib/datadog/appsec/sample_rate.rb
 - lib/datadog/appsec/security_engine.rb
+- lib/datadog/appsec/security_engine/engine.rb
 - lib/datadog/appsec/security_engine/result.rb
 - lib/datadog/appsec/security_engine/runner.rb
 - lib/datadog/appsec/security_event.rb
@@ -274,6 +273,7 @@ files:
 - lib/datadog/core/buffer/thread_safe.rb
 - lib/datadog/core/chunker.rb
 - lib/datadog/core/configuration.rb
+- lib/datadog/core/configuration/agent_settings.rb
 - lib/datadog/core/configuration/agent_settings_resolver.rb
 - lib/datadog/core/configuration/agentless_settings_resolver.rb
 - lib/datadog/core/configuration/base.rb
@@ -321,6 +321,7 @@ files:
 - lib/datadog/core/metrics/options.rb
 - lib/datadog/core/pin.rb
 - lib/datadog/core/process_discovery.rb
+- lib/datadog/core/process_discovery/tracer_memfd.rb
 - lib/datadog/core/rate_limiter.rb
 - lib/datadog/core/remote.rb
 - lib/datadog/core/remote/client.rb
@@ -348,6 +349,7 @@ files:
 - lib/datadog/core/runtime/ext.rb
 - lib/datadog/core/runtime/metrics.rb
 - lib/datadog/core/semaphore.rb
+- lib/datadog/core/tag_builder.rb
 - lib/datadog/core/telemetry/component.rb
 - lib/datadog/core/telemetry/emitter.rb
 - lib/datadog/core/telemetry/event.rb
@@ -991,8 +993,8 @@ licenses:
 - Apache-2.0
 metadata:
   allowed_push_host: https://rubygems.org
-  changelog_uri: https://github.com/DataDog/dd-trace-rb/blob/v2.17.0/CHANGELOG.md
-  source_code_uri: https://github.com/DataDog/dd-trace-rb/tree/v2.17.0
+  changelog_uri: https://github.com/DataDog/dd-trace-rb/blob/v2.18.0/CHANGELOG.md
+  source_code_uri: https://github.com/DataDog/dd-trace-rb/tree/v2.18.0
 post_install_message:
 rdoc_options: []
 require_paths:

data/lib/datadog/appsec/assets/waf_rules/processors.json

@@ -1,321 +0,0 @@
-[
-  {
-    "id": "http-endpoint-fingerprint",
-    "generator": "http_endpoint_fingerprint",
-    "conditions": [
-      {
-        "operator": "exists",
-        "parameters": {
-          "inputs": [
-            {
-              "address": "waf.context.event"
-            },
-            {
-              "address": "server.business_logic.users.login.failure"
-            },
-            {
-              "address": "server.business_logic.users.login.success"
-            }
-          ]
-        }
-      }
-    ],
-    "parameters": {
-      "mappings": [
-        {
-          "method": [
-            {
-              "address": "server.request.method"
-            }
-          ],
-          "uri_raw": [
-            {
-              "address": "server.request.uri.raw"
-            }
-          ],
-          "body": [
-            {
-              "address": "server.request.body"
-            }
-          ],
-          "query": [
-            {
-              "address": "server.request.query"
-            }
-          ],
-          "output": "_dd.appsec.fp.http.endpoint"
-        }
-      ]
-    },
-    "evaluate": false,
-    "output": true
-  },
-  {
-    "id": "extract-content",
-    "generator": "extract_schema",
-    "conditions": [
-      {
-        "operator": "equals",
-        "parameters": {
-          "inputs": [
-            {
-              "address": "waf.context.processor",
-              "key_path": [
-                "extract-schema"
-              ]
-            }
-          ],
-          "type": "boolean",
-          "value": true
-        }
-      }
-    ],
-    "parameters": {
-      "mappings": [
-        {
-          "inputs": [
-            {
-              "address": "server.request.body"
-            }
-          ],
-          "output": "_dd.appsec.s.req.body"
-        },
-        {
-          "inputs": [
-            {
-              "address": "server.request.cookies"
-            }
-          ],
-          "output": "_dd.appsec.s.req.cookies"
-        },
-        {
-          "inputs": [
-            {
-              "address": "server.request.query"
-            }
-          ],
-          "output": "_dd.appsec.s.req.query"
-        },
-        {
-          "inputs": [
-            {
-              "address": "server.request.path_params"
-            }
-          ],
-          "output": "_dd.appsec.s.req.params"
-        },
-        {
-          "inputs": [
-            {
-              "address": "server.response.body"
-            }
-          ],
-          "output": "_dd.appsec.s.res.body"
-        },
-        {
-          "inputs": [
-            {
-              "address": "graphql.server.all_resolvers"
-            }
-          ],
-          "output": "_dd.appsec.s.graphql.all_resolvers"
-        },
-        {
-          "inputs": [
-            {
-              "address": "graphql.server.resolver"
-            }
-          ],
-          "output": "_dd.appsec.s.graphql.resolver"
-        }
-      ],
-      "scanners": [
-        {
-          "tags": {
-            "category": "payment"
-          }
-        },
-        {
-          "tags": {
-            "category": "pii"
-          }
-        }
-      ]
-    },
-    "evaluate": false,
-    "output": true
-  },
-  {
-    "id": "extract-headers",
-    "generator": "extract_schema",
-    "conditions": [
-      {
-        "operator": "equals",
-        "parameters": {
-          "inputs": [
-            {
-              "address": "waf.context.processor",
-              "key_path": [
-                "extract-schema"
-              ]
-            }
-          ],
-          "type": "boolean",
-          "value": true
-        }
-      }
-    ],
-    "parameters": {
-      "mappings": [
-        {
-          "inputs": [
-            {
-              "address": "server.request.headers.no_cookies"
-            }
-          ],
-          "output": "_dd.appsec.s.req.headers"
-        },
-        {
-          "inputs": [
-            {
-              "address": "server.response.headers.no_cookies"
-            }
-          ],
-          "output": "_dd.appsec.s.res.headers"
-        }
-      ],
-      "scanners": [
-        {
-          "tags": {
-            "category": "credentials"
-          }
-        },
-        {
-          "tags": {
-            "category": "pii"
-          }
-        }
-      ]
-    },
-    "evaluate": false,
-    "output": true
-  },
-  {
-    "id": "http-header-fingerprint",
-    "generator": "http_header_fingerprint",
-    "conditions": [
-      {
-        "operator": "exists",
-        "parameters": {
-          "inputs": [
-            {
-              "address": "waf.context.event"
-            },
-            {
-              "address": "server.business_logic.users.login.failure"
-            },
-            {
-              "address": "server.business_logic.users.login.success"
-            }
-          ]
-        }
-      }
-    ],
-    "parameters": {
-      "mappings": [
-        {
-          "headers": [
-            {
-              "address": "server.request.headers.no_cookies"
-            }
-          ],
-          "output": "_dd.appsec.fp.http.header"
-        }
-      ]
-    },
-    "evaluate": false,
-    "output": true
-  },
-  {
-    "id": "http-network-fingerprint",
-    "generator": "http_network_fingerprint",
-    "conditions": [
-      {
-        "operator": "exists",
-        "parameters": {
-          "inputs": [
-            {
-              "address": "waf.context.event"
-            },
-            {
-              "address": "server.business_logic.users.login.failure"
-            },
-            {
-              "address": "server.business_logic.users.login.success"
-            }
-          ]
-        }
-      }
-    ],
-    "parameters": {
-      "mappings": [
-        {
-          "headers": [
-            {
-              "address": "server.request.headers.no_cookies"
-            }
-          ],
-          "output": "_dd.appsec.fp.http.network"
-        }
-      ]
-    },
-    "evaluate": false,
-    "output": true
-  },
-  {
-    "id": "session-fingerprint",
-    "generator": "session_fingerprint",
-    "conditions": [
-      {
-        "operator": "exists",
-        "parameters": {
-          "inputs": [
-            {
-              "address": "waf.context.event"
-            },
-            {
-              "address": "server.business_logic.users.login.failure"
-            },
-            {
-              "address": "server.business_logic.users.login.success"
-            }
-          ]
-        }
-      }
-    ],
-    "parameters": {
-      "mappings": [
-        {
-          "cookies": [
-            {
-              "address": "server.request.cookies"
-            }
-          ],
-          "session_id": [
-            {
-              "address": "usr.session_id"
-            }
-          ],
-          "user_id": [
-            {
-              "address": "usr.id"
-            }
-          ],
-          "output": "_dd.appsec.fp.session"
-        }
-      ]
-    },
-    "evaluate": false,
-    "output": true
-  }
-]