libdatadog 35.0.0.1.0 → 37.0.0.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ab0a20f1852ac415e905e178e09208b0986f3119d936a3f8f8326df8e0f778a1
-  data.tar.gz: aadd3917949f04607ba2be0ea20dff98349b5a14844b87b6dcd7508b40ec1fcf
+  metadata.gz: 1d2caf139a67b432139f30d9d681b3424eb67869848eec2ea844775a67b0b5cf
+  data.tar.gz: b7d172117d328f5dab3be10fdcae6c42dbe8029899a8229318360fa158bff45a
 SHA512:
-  metadata.gz: 538303506ea439d8a62e885f65ca62df32d62d4482bd61984c261d47652d814517a7e379038876c57e4bf0e78c5da40981b666f37f83eec2bb9cb40303b029f0
-  data.tar.gz: 7859de5265189b8b2e5faaf8c7ec6c91a6fbd2d0bc482dec4de443f5362a8458f2ae15390c7d6947d78785b12dd6c0a09d3c70c3aca9e865d8e464534dc4f92c
+  metadata.gz: 16371759dc1728b47790494fb7c9ae5ac9270f916e58eb31560c9adef9bd30f6524db35776603e97405d691361a387f0eca0af3e82cbbeabc0f4f0920d5680c1
+  data.tar.gz: a28575cef31af7fbe63b6ef832f770ef3ff8fe8afb4fc97dae1da95842ceafcb74c6e72c3740c09e12065910236576289667dfd8ffa35627019cade41bacba94

data/lib/libdatadog/version.rb

@@ -2,7 +2,7 @@
 
 module Libdatadog
   # Current libdatadog version
-  LIB_VERSION = "35.0.0"
+  LIB_VERSION = "37.0.0"
 
   GEM_MAJOR_VERSION = "1"
   GEM_MINOR_VERSION = "0"

data/tasks/build.rake

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require "etc"
+require "fileutils"
 require "pathname"
 
 module BuildFromSource
@@ -80,6 +81,31 @@ module BuildFromSource
     end
   end
 
+  module Permissions
+    # Files that must be executable (0755) in the gem; everything else 0644.
+    # Note: .so for Linux, .dylib for macOS.
+    EXECUTABLE_FILES = %w[
+      libdatadog-crashtracking-receiver
+      libdatadog_profiling.so
+      libdatadog_profiling.dylib
+    ].freeze
+
+    # Normalise file permissions of the built artifacts before packaging.
+    def self.fix(directory)
+      Dir.glob("#{directory}/**/*").each do |path|
+        next unless File.file?(path)
+
+        filename = File.basename(path)
+        current = File.stat(path).mode & 0o777
+        expected = EXECUTABLE_FILES.include?(filename) ? 0o755 : 0o644
+        next if current == expected
+
+        puts "Fixing permissions for #{filename}: #{current.to_s(8)} -> #{expected.to_s(8)}"
+        FileUtils.chmod(expected, path)
+      end
+    end
+  end
+
   module Builder
     class << self
       # Build the cargo install command for the builder crate's `release` binary.
@@ -160,7 +186,7 @@ namespace :libdatadog do
     system(env, paths.builder_bin.to_s, "--out", target_dir.to_s) || raise("Builder failed")
 
     # Fix file permissions to match expected values for packaging
-    Helpers.fix_file_permissions(target_dir.to_s)
+    BuildFromSource::Permissions.fix(target_dir)
 
     puts "Done! Artifacts in #{target_dir}"
   end

data/tasks/gem.rake

@@ -7,10 +7,6 @@ require "zlib"
 require "stringio"
 
 # Builds .gem packages from vendored libdatadog artifacts.
-#
-# Intentionally duplicates some Rakefile logic so both can coexist during
-# the migration; the Rakefile originals will be removed once the new tasks
-# are fully adopted.
 module GemPackaging
   module Platform
     # Mapping from gem platform names to the vendor platform directories

data/tasks/release.rake

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+# `rake build` (from bundler/gem_tasks) would build a binary-less gem straight
+# from the gemspec. Real gems bundle the platform-specific libdatadog artifacts
+# and are built via `rake gem:package`, so disable the default to avoid mistakes.
+Rake::Task["build"].clear
+task(:build) { raise "Build task is disabled, use gem:package instead" }
+
+# `rake release` (from bundler/gem_tasks) tags and pushes; here releasing just
+# pushes the already-built platform gems from pkg/ (the version tag lives in the
+# libdatadog-rb repo, the binaries are built and packaged by CI).
+Rake::Task["release"].clear
+task(:release) { Rake::Task["push_to_rubygems"].invoke }
+
+desc "Push all built gems in pkg/ to RubyGems.org"
+task push_to_rubygems: [
+  :"release:guard_clean"
+] do
+  [
+    "gem push pkg/libdatadog-#{Libdatadog::VERSION}.gem",
+    "gem push pkg/libdatadog-#{Libdatadog::VERSION}-x86_64-linux.gem",
+    "gem push pkg/libdatadog-#{Libdatadog::VERSION}-aarch64-linux.gem",
+    "gem push pkg/libdatadog-#{Libdatadog::VERSION}-arm64-darwin.gem"
+  ].each do |command|
+    puts "Running: #{command}"
+    abort unless system(command)
+  end
+end

data/tasks/spec.rake

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+require "rspec/core/rake_task"
+require "standard/rake" unless RUBY_VERSION < "2.6"
+
+RSpec::Core::RakeTask.new(:spec)
+
+task default: [
+  :spec,
+  (:standard unless RUBY_VERSION < "2.6")
+].compact

data/vendor/{libdatadog-35.0.0/aarch64-linux-musl → libdatadog-37.0.0/aarch64-linux}/LICENSE-3rdparty.csv

@@ -125,6 +125,7 @@ dispatch2,https://github.com/madsmtm/objc2,Zlib OR Apache-2.0 OR MIT,"Mads Marqu
 displaydoc,https://github.com/yaahc/displaydoc,MIT OR Apache-2.0,Jane Lusby <jlusby@yaah.dev>
 dyn-clone,https://github.com/dtolnay/dyn-clone,MIT OR Apache-2.0,David Tolnay <dtolnay@gmail.com>
 either,https://github.com/rayon-rs/either,MIT OR Apache-2.0,bluss
+elf,https://github.com/cole14/rust-elf,MIT OR Apache-2.0,Christopher Cole <chris.cole.09@gmail.com>
 encoding_rs,https://github.com/hsivonen/encoding_rs,(Apache-2.0 OR MIT) AND BSD-3-Clause,Henri Sivonen <hsivonen@hsivonen.fi>
 enum-as-inner,https://github.com/bluejekyll/enum-as-inner,MIT OR Apache-2.0,Benjamin Fry <benjaminfry@me.com>
 equivalent,https://github.com/cuviper/equivalent,Apache-2.0 OR MIT,The equivalent Authors
@@ -429,6 +430,7 @@ target-triple,https://github.com/dtolnay/target-triple,MIT OR Apache-2.0,David T
 tempfile,https://github.com/Stebalien/tempfile,MIT OR Apache-2.0,"Steven Allen <steven@stebalien.com>, The Rust Project Developers, Ashley Mannix <ashleymannix@live.com.au>, Jason White <me@jasonwhite.io>"
 termcolor,https://github.com/BurntSushi/termcolor,Unlicense OR MIT,Andrew Gallant <jamslam@gmail.com>
 test-case-macros,https://github.com/frondeus/test-case,MIT,"Marcin Sas-Szymanski <marcin.sas-szymanski@anixe.pl>, Wojciech Polak <frondeus@gmail.com>, Łukasz Biel <lukasz.p.biel@gmail.com>"
+thin-vec,https://github.com/mozilla/thin-vec,MIT OR Apache-2.0,Aria Beingessner <a.beingessner@gmail.com>
 thiserror,https://github.com/dtolnay/thiserror,MIT OR Apache-2.0,David Tolnay <dtolnay@gmail.com>
 thiserror-impl,https://github.com/dtolnay/thiserror,MIT OR Apache-2.0,David Tolnay <dtolnay@gmail.com>
 thread_local,https://github.com/Amanieu/thread_local-rs,MIT OR Apache-2.0,Amanieu d'Antras <amanieu@gmail.com>

data/vendor/{libdatadog-35.0.0/x86_64-linux-musl → libdatadog-37.0.0/aarch64-linux}/include/datadog/common.h

@@ -1626,6 +1626,7 @@ typedef struct ddog_ContextKey {
 typedef struct ddog_TraceExporter ddog_TraceExporter;
 typedef struct ddog_TracerSpan ddog_TracerSpan;
 typedef struct ddog_TracerTraceChunks ddog_TracerTraceChunks;
+typedef struct ddog_TraceExporterCancelToken ddog_TraceExporterCancelToken;
 
 
 /**
@@ -1669,20 +1670,13 @@ typedef enum ddog_TraceExporterErrorCode {
 typedef struct ddog_TraceExporterResponse ddog_TraceExporterResponse;
 
 /**
- * A shared runtime that manages PausableWorkers and provides fork safety hooks.
+ * Owns a tokio runtime and manages [`PausableWorker`]s on it.
  *
- * The SharedRuntime owns a tokio runtime (on native) and tracks PausableWorkers
- * spawned on it. It provides methods to safely pause workers before forking and
- * restart them after fork in both parent and child processes.
- *
- * On wasm32, no tokio runtime is created. Workers are spawned via `spawn_local`
- * on the JS event loop.
- *
- * # Mutex lock order
- * When locking both [Self::runtime] and [Self::workers], the mutex must be locked in the order of
- * the fields in the struct. When possible avoid holding both locks simultaneously.
+ * Supports the full fork protocol ([`before_fork`](Self::before_fork) /
+ * [`after_fork_parent`](Self::after_fork_parent) /
+ * [`after_fork_child`](Self::after_fork_child)) and synchronous [`shutdown`](Self::shutdown).
  */
-typedef struct ddog_SharedRuntime ddog_SharedRuntime;
+typedef struct ddog_ForkSafeRuntime ddog_ForkSafeRuntime;
 
 /**
  * The TraceExporterConfig object will hold the configuration properties for the TraceExporter.
@@ -2232,6 +2226,52 @@ typedef struct ddog_ffe_AttributePair {
   struct ddog_ffe_AttributeValue value;
 } ddog_ffe_AttributePair;
 
+/**
+ * Error codes for ForkSafeRuntime FFI operations.
+ */
+typedef enum ddog_SharedRuntimeErrorCode {
+  /**
+   * Invalid argument provided (e.g. null handle).
+   */
+  DDOG_SHARED_RUNTIME_ERROR_CODE_INVALID_ARGUMENT,
+  /**
+   * The runtime is not available or in an invalid state.
+   */
+  DDOG_SHARED_RUNTIME_ERROR_CODE_RUNTIME_UNAVAILABLE,
+  /**
+   * Failed to acquire a lock on internal state.
+   */
+  DDOG_SHARED_RUNTIME_ERROR_CODE_LOCK_FAILED,
+  /**
+   * A worker operation failed.
+   */
+  DDOG_SHARED_RUNTIME_ERROR_CODE_WORKER_ERROR,
+  /**
+   * Failed to create the tokio runtime.
+   */
+  DDOG_SHARED_RUNTIME_ERROR_CODE_RUNTIME_CREATION,
+  /**
+   * Shutdown timed out.
+   */
+  DDOG_SHARED_RUNTIME_ERROR_CODE_SHUTDOWN_TIMED_OUT,
+  /**
+   * An unexpected panic occurred inside the FFI call.
+   */
+  DDOG_SHARED_RUNTIME_ERROR_CODE_PANIC,
+} ddog_SharedRuntimeErrorCode;
+
+/**
+ * Error returned by ForkSafeRuntime FFI functions.
+ */
+typedef struct ddog_SharedRuntimeFFIError {
+  enum ddog_SharedRuntimeErrorCode code;
+  /**
+   * The error message is always defined when the error is returned by a ddog_shared_runtime
+   * ffi.
+   */
+  char *msg;
+} ddog_SharedRuntimeFFIError;
+
 typedef enum ddog_crasht_BuildIdType {
   DDOG_CRASHT_BUILD_ID_TYPE_GNU,
   DDOG_CRASHT_BUILD_ID_TYPE_GO,

data/vendor/{libdatadog-35.0.0/arm64-darwin → libdatadog-37.0.0/aarch64-linux}/include/datadog/crashtracker.h

@@ -170,6 +170,25 @@ struct ddog_VoidResult ddog_crasht_report_unhandled_exception(ddog_CharSlice err
                                                               ddog_CharSlice error_message,
                                                               struct ddog_crasht_Handle_StackTrace *runtime_stack);
 
+/**
+ * Register the expected PID of the socket-based crash receiver
+ *
+ * When `collect_all_threads` is enabled and the receiver is reached via a Unix
+ * socket, the crash handler will only grant ptrace permission if the socket
+ * peer's PID matches this registered value.
+ *
+ * Call this after establishing a trusted connection to the sidecar
+ *
+ * # Safety
+ *   This function is safe to call from any thread at any time.
+ */
+void ddog_crasht_set_expected_receiver_pid(int32_t pid);
+
+/**
+ * Returns the currently registered expected receiver PID, or 0 if unset.
+ */
+int32_t ddog_crasht_get_expected_receiver_pid(void);
+
 /**
  * Removes all existing additional tags
  * Expected to be used after a fork, to reset the additional tags on the child

data/vendor/{libdatadog-35.0.0/aarch64-linux-musl → libdatadog-37.0.0/aarch64-linux}/include/datadog/data-pipeline.h

@@ -156,7 +156,7 @@ struct ddog_TraceExporterError *ddog_trace_exporter_config_set_connection_timeou
  * [`ddog_shared_runtime_free`].
  */
 struct ddog_TraceExporterError *ddog_trace_exporter_config_set_shared_runtime(struct ddog_TraceExporterConfig *config,
-                                                                              struct ddog_SharedRuntime *handle);
+                                                                              struct ddog_ForkSafeRuntime *handle);
 
 /**
  * Enables OTLP HTTP/JSON export and sets the endpoint URL.
@@ -168,13 +168,47 @@ struct ddog_TraceExporterError *ddog_trace_exporter_config_set_shared_runtime(st
 struct ddog_TraceExporterError *ddog_trace_exporter_config_set_otlp_endpoint(struct ddog_TraceExporterConfig *config,
                                                                              ddog_CharSlice url);
 
+/**
+ * Sets the OTLP export protocol. Accepts the OTel-standard values `http/json` (default) or
+ * `http/protobuf`; `grpc` is rejected as not yet supported. The host language resolves the value
+ * (e.g. from `OTEL_EXPORTER_OTLP_TRACES_PROTOCOL`).
+ *
+ * Has no effect unless an OTLP endpoint is also configured via
+ * `ddog_trace_exporter_config_set_otlp_endpoint`; without one, traces are sent to the
+ * Datadog agent and this protocol selection is ignored.
+ *
+ * Returns `None` on success, `ErrorCode::InvalidArgument` for a null config or an unaccepted
+ * value, and `ErrorCode::InvalidInput` for a non-UTF-8 string.
+ */
+struct ddog_TraceExporterError *ddog_trace_exporter_config_set_otlp_protocol(struct ddog_TraceExporterConfig *config,
+                                                                             ddog_CharSlice protocol);
+
+/**
+ * Configure the exporter to write traces as newline-delimited JSON to stdout (the Datadog
+ * Forwarder "log exporter" path) instead of sending them to a Datadog agent. Used in serverless
+ * environments (e.g. AWS Lambda) when no agent is reachable.
+ *
+ * `max_line_size` overrides the per-line byte cap; pass `0` to use the default (256 KiB, the AWS
+ * CloudWatch Logs limit). When enabled, agent-specific behavior (agent-info polling, client-side
+ * stats, V1 negotiation) is bypassed.
+ *
+ * In this mode each span's `meta` is serialized to process stdout (and thus captured by CloudWatch
+ * Logs in Lambda); `meta_struct` is excluded because it holds raw msgpack the log intake cannot
+ * interpret.
+ *
+ * Writes are synchronous/blocking on stdout, so this mode targets single-threaded / current-thread
+ * serverless runtimes (e.g. AWS Lambda) where a blocking write won't stall a shared async reactor.
+ */
+struct ddog_TraceExporterError *ddog_trace_exporter_config_set_output_to_log(struct ddog_TraceExporterConfig *config,
+                                                                             uintptr_t max_line_size);
+
 /**
  * Create a new TraceExporter instance.
  *
- * When an OTLP endpoint is configured via `TraceExporterConfig`, the exporter sends traces in
- * OTLP HTTP/JSON to that endpoint instead of the Datadog agent. The same payload (e.g.
- * MessagePack) is passed to `ddog_trace_exporter_send`; the library decodes and converts to
- * OTLP when OTLP is enabled.
+ * When an OTLP endpoint is configured via `TraceExporterConfig`, the exporter sends traces to
+ * that endpoint in OTLP over HTTP — JSON or protobuf per the configured protocol — instead of
+ * to the Datadog agent. The same payload (e.g. MessagePack) is passed to
+ * `ddog_trace_exporter_send`; the library decodes and converts it to OTLP when OTLP is enabled.
  *
  * # Arguments
  *
@@ -320,6 +354,38 @@ struct ddog_TraceExporterError *ddog_tracer_trace_chunks_begin_chunk(ddog_Tracer
 struct ddog_TraceExporterError *ddog_tracer_trace_chunks_push_span(ddog_TracerTraceChunks *handle,
                                                                    ddog_TracerSpan *span);
 
+/**
+ * Create a new cancellation token.
+ *
+ * The returned token must be freed with
+ * [`ddog_trace_exporter_cancel_token_drop`].
+ */
+ddog_TraceExporterCancelToken *ddog_trace_exporter_cancel_token_new(void);
+
+/**
+ * Cancel a cancellation token.
+ *
+ * All clones of the same token observe the cancellation. If a
+ * [`ddog_trace_exporter_send_trace_chunks`] call is using this token at the
+ * time of cancellation, that send stops waiting for the agent at its next
+ * await point and returns an error; the trace chunks it was sending may be
+ * lost.
+ *
+ * Cancellation only affects a send that is in progress. If no send is using
+ * the token, cancelling it has no immediate effect: a send started afterwards
+ * with an already-cancelled token returns an error without contacting the
+ * agent, and a token cancelled after its send has already finished does
+ * nothing.
+ */
+void ddog_trace_exporter_cancel_token_cancel(const ddog_TraceExporterCancelToken *token);
+
+/**
+ * Free a cancellation token.
+ *
+ * After this call the token is invalid and must not be reused.
+ */
+void ddog_trace_exporter_cancel_token_drop(ddog_TraceExporterCancelToken *token);
+
 /**
  * Send trace chunks through a [`TraceExporter`], consuming the chunks.
  *
@@ -327,20 +393,30 @@ struct ddog_TraceExporterError *ddog_tracer_trace_chunks_push_span(ddog_TracerTr
  * serializes in the configured output format, and sends to the agent
  * with retry logic.
  *
+ * When `cancel` is non-null, cancelling that token (via
+ * [`ddog_trace_exporter_cancel_token_cancel`]) while the send is in progress
+ * aborts the in-flight request and returns an error with code
+ * [`ExporterErrorCode::IoError`]. Cancellation is cooperative: it only takes
+ * effect while a request is actually in flight. A token that is already
+ * cancelled when the send starts makes this function return that error
+ * immediately, and cancelling after the send has finished has no effect.
+ * Cancelling an in-flight send may cause the trace chunks being sent to be
+ * lost.
+ *
  * On success, if `response_out` is non-null, a heap-allocated
  * [`ExporterResponse`] is written there.  The caller owns it and must
  * free it with `ddog_trace_exporter_response_free`.
  *
  * # Safety
  *
- * * `exporter` must be a valid `TraceExporter` pointer.
  * * `chunks` is consumed and must not be used after this call.
  * * If `response_out` is non-null it must point to valid writable memory for a
  *   `Box<ExporterResponse>`.
  */
 struct ddog_TraceExporterError *ddog_trace_exporter_send_trace_chunks(const ddog_TraceExporter *exporter,
                                                                       ddog_TracerTraceChunks *chunks,
-                                                                      struct ddog_TraceExporterResponse **response_out);
+                                                                      struct ddog_TraceExporterResponse **response_out,
+                                                                      const ddog_TraceExporterCancelToken *cancel);
 
 #ifdef __cplusplus
 }  // extern "C"

data/vendor/{libdatadog-35.0.0/aarch64-linux-musl → libdatadog-37.0.0/aarch64-linux}/include/datadog/profiling.h

@@ -488,6 +488,24 @@ struct ddog_prof_Profile_Result ddog_prof_Profile_add_endpoint_count(struct ddog
                                                                      ddog_CharSlice endpoint,
                                                                      int64_t value);
 
+/**
+ * Set whether "local root span id" labels should be omitted when serializing.
+ *
+ * This is an experimental setting and defaults to false.
+ *
+ * # Arguments
+ * * `profile` - a reference to the profile being configured.
+ * * `omit` - true to omit the label from serialized pprof samples.
+ *
+ * # Safety
+ * The `profile` ptr must point to a valid Profile object created by this
+ * module.
+ * This call is _NOT_ thread-safe.
+ */
+DDOG_CHECK_RETURN
+struct ddog_prof_Profile_Result ddog_prof_Profile_set_omit_local_root_span_id_when_serializing(struct ddog_prof_Profile *profile,
+                                                                                               bool omit);
+
 /**
  * Add a poisson-based upscaling rule which will be use to adjust values and make them
  * closer to reality.

data/vendor/libdatadog-37.0.0/aarch64-linux/include/datadog/shared-runtime.h

@@ -0,0 +1,91 @@
+// Copyright 2025-Present Datadog, Inc. https://www.datadoghq.com/
+// SPDX-License-Identifier: Apache-2.0
+
+
+#ifndef DDOG_SHARED_RUNTIME_H
+#define DDOG_SHARED_RUNTIME_H
+
+#include <stdarg.h>
+#include <stdbool.h>
+#include <stdint.h>
+#include <stdlib.h>
+
+#ifdef __cplusplus
+extern "C" {
+#endif // __cplusplus
+
+/**
+ * Frees a `SharedRuntimeFFIError`. After this call the pointer is invalid.
+ */
+void ddog_shared_runtime_error_free(struct ddog_SharedRuntimeFFIError *error);
+
+/**
+ * Create a new `ForkSafeRuntime`.
+ *
+ * On success writes a raw handle into `*out_handle` and returns `None`.
+ * On failure leaves `*out_handle` unchanged and returns an error.
+ *
+ * The caller owns the handle and must eventually pass it to
+ * [`ddog_shared_runtime_free`] (or another consumer that takes ownership).
+ */
+struct ddog_SharedRuntimeFFIError *ddog_shared_runtime_new(const struct ddog_ForkSafeRuntime **out_handle);
+
+/**
+ * Free a handle, decrementing the `Arc` strong count.
+ *
+ * The underlying runtime may not be dropped if other components are still using it.
+ * Use [`ddog_shared_runtime_shutdown`] to cleanly stop workers.
+ */
+void ddog_shared_runtime_free(const struct ddog_ForkSafeRuntime *handle);
+
+/**
+ * Must be called in the parent process before `fork()`.
+ *
+ * Pauses all workers so that no background threads are running during the
+ * fork, preventing deadlocks in the child process.
+ *
+ * Returns an error if `handle` is null.
+ * The handle must have been initialized with `ddog_shared_runtime_new`.
+ */
+struct ddog_SharedRuntimeFFIError *ddog_shared_runtime_before_fork(const struct ddog_ForkSafeRuntime *handle);
+
+/**
+ * Must be called in the parent process after `fork()`.
+ *
+ * Restarts all workers that were paused by [`ddog_shared_runtime_before_fork`].
+ *
+ * Returns `None` on success, or an error if workers could not be restarted.
+ * The handle must have been initialized with `ddog_shared_runtime_new`.
+ */
+struct ddog_SharedRuntimeFFIError *ddog_shared_runtime_after_fork_parent(const struct ddog_ForkSafeRuntime *handle);
+
+/**
+ * Must be called in the child process after `fork()`.
+ *
+ * Creates a fresh tokio runtime and restarts all workers. The original
+ * runtime cannot be safely reused after a fork.
+ *
+ * Returns `None` on success, or an error if the runtime could not be
+ * reinitialized.
+ * The handle must have been initialized with `ddog_shared_runtime_new`.
+ */
+struct ddog_SharedRuntimeFFIError *ddog_shared_runtime_after_fork_child(const struct ddog_ForkSafeRuntime *handle);
+
+/**
+ * Shut down the `ForkSafeRuntime`, stopping all workers.
+ *
+ * `timeout_ms` is the maximum time to wait for workers to stop, in
+ * milliseconds.  Pass `0` for no timeout.
+ *
+ * Returns `None` on success, or `SharedRuntimeErrorCode::ShutdownTimedOut`
+ * if the timeout was reached.
+ * The handle must have been initialized with `ddog_shared_runtime_new`.
+ */
+struct ddog_SharedRuntimeFFIError *ddog_shared_runtime_shutdown(const struct ddog_ForkSafeRuntime *handle,
+                                                                uint64_t timeout_ms);
+
+#ifdef __cplusplus
+}  // extern "C"
+#endif  // __cplusplus
+
+#endif  /* DDOG_SHARED_RUNTIME_H */

data/vendor/{libdatadog-35.0.0 → libdatadog-37.0.0}/aarch64-linux/lib/pkgconfig/datadog_profiling_with_rpath.pc

@@ -8,7 +8,7 @@ includedir=${prefix}/include
 
 Name: datadog_profiling
 Description: Contains common code used to implement Datadog's Continuous Profilers. (Dynamic linking variant, sets rpath)
-Version: 35.0.0
+Version: 37.0.0
 Requires:
 Libs: -L${libdir} -ldatadog_profiling -Wl,-rpath,${libdir}
 Libs.private:

data/vendor/{libdatadog-35.0.0/aarch64-linux → libdatadog-37.0.0/aarch64-linux-musl}/LICENSE-3rdparty.csv

@@ -125,6 +125,7 @@ dispatch2,https://github.com/madsmtm/objc2,Zlib OR Apache-2.0 OR MIT,"Mads Marqu
 displaydoc,https://github.com/yaahc/displaydoc,MIT OR Apache-2.0,Jane Lusby <jlusby@yaah.dev>
 dyn-clone,https://github.com/dtolnay/dyn-clone,MIT OR Apache-2.0,David Tolnay <dtolnay@gmail.com>
 either,https://github.com/rayon-rs/either,MIT OR Apache-2.0,bluss
+elf,https://github.com/cole14/rust-elf,MIT OR Apache-2.0,Christopher Cole <chris.cole.09@gmail.com>
 encoding_rs,https://github.com/hsivonen/encoding_rs,(Apache-2.0 OR MIT) AND BSD-3-Clause,Henri Sivonen <hsivonen@hsivonen.fi>
 enum-as-inner,https://github.com/bluejekyll/enum-as-inner,MIT OR Apache-2.0,Benjamin Fry <benjaminfry@me.com>
 equivalent,https://github.com/cuviper/equivalent,Apache-2.0 OR MIT,The equivalent Authors
@@ -429,6 +430,7 @@ target-triple,https://github.com/dtolnay/target-triple,MIT OR Apache-2.0,David T
 tempfile,https://github.com/Stebalien/tempfile,MIT OR Apache-2.0,"Steven Allen <steven@stebalien.com>, The Rust Project Developers, Ashley Mannix <ashleymannix@live.com.au>, Jason White <me@jasonwhite.io>"
 termcolor,https://github.com/BurntSushi/termcolor,Unlicense OR MIT,Andrew Gallant <jamslam@gmail.com>
 test-case-macros,https://github.com/frondeus/test-case,MIT,"Marcin Sas-Szymanski <marcin.sas-szymanski@anixe.pl>, Wojciech Polak <frondeus@gmail.com>, Łukasz Biel <lukasz.p.biel@gmail.com>"
+thin-vec,https://github.com/mozilla/thin-vec,MIT OR Apache-2.0,Aria Beingessner <a.beingessner@gmail.com>
 thiserror,https://github.com/dtolnay/thiserror,MIT OR Apache-2.0,David Tolnay <dtolnay@gmail.com>
 thiserror-impl,https://github.com/dtolnay/thiserror,MIT OR Apache-2.0,David Tolnay <dtolnay@gmail.com>
 thread_local,https://github.com/Amanieu/thread_local-rs,MIT OR Apache-2.0,Amanieu d'Antras <amanieu@gmail.com>

data/vendor/{libdatadog-35.0.0/arm64-darwin → libdatadog-37.0.0/aarch64-linux-musl}/include/datadog/common.h

@@ -1626,6 +1626,7 @@ typedef struct ddog_ContextKey {
 typedef struct ddog_TraceExporter ddog_TraceExporter;
 typedef struct ddog_TracerSpan ddog_TracerSpan;
 typedef struct ddog_TracerTraceChunks ddog_TracerTraceChunks;
+typedef struct ddog_TraceExporterCancelToken ddog_TraceExporterCancelToken;
 
 
 /**
@@ -1669,20 +1670,13 @@ typedef enum ddog_TraceExporterErrorCode {
 typedef struct ddog_TraceExporterResponse ddog_TraceExporterResponse;
 
 /**
- * A shared runtime that manages PausableWorkers and provides fork safety hooks.
+ * Owns a tokio runtime and manages [`PausableWorker`]s on it.
  *
- * The SharedRuntime owns a tokio runtime (on native) and tracks PausableWorkers
- * spawned on it. It provides methods to safely pause workers before forking and
- * restart them after fork in both parent and child processes.
- *
- * On wasm32, no tokio runtime is created. Workers are spawned via `spawn_local`
- * on the JS event loop.
- *
- * # Mutex lock order
- * When locking both [Self::runtime] and [Self::workers], the mutex must be locked in the order of
- * the fields in the struct. When possible avoid holding both locks simultaneously.
+ * Supports the full fork protocol ([`before_fork`](Self::before_fork) /
+ * [`after_fork_parent`](Self::after_fork_parent) /
+ * [`after_fork_child`](Self::after_fork_child)) and synchronous [`shutdown`](Self::shutdown).
  */
-typedef struct ddog_SharedRuntime ddog_SharedRuntime;
+typedef struct ddog_ForkSafeRuntime ddog_ForkSafeRuntime;
 
 /**
  * The TraceExporterConfig object will hold the configuration properties for the TraceExporter.
@@ -2232,6 +2226,52 @@ typedef struct ddog_ffe_AttributePair {
   struct ddog_ffe_AttributeValue value;
 } ddog_ffe_AttributePair;
 
+/**
+ * Error codes for ForkSafeRuntime FFI operations.
+ */
+typedef enum ddog_SharedRuntimeErrorCode {
+  /**
+   * Invalid argument provided (e.g. null handle).
+   */
+  DDOG_SHARED_RUNTIME_ERROR_CODE_INVALID_ARGUMENT,
+  /**
+   * The runtime is not available or in an invalid state.
+   */
+  DDOG_SHARED_RUNTIME_ERROR_CODE_RUNTIME_UNAVAILABLE,
+  /**
+   * Failed to acquire a lock on internal state.
+   */
+  DDOG_SHARED_RUNTIME_ERROR_CODE_LOCK_FAILED,
+  /**
+   * A worker operation failed.
+   */
+  DDOG_SHARED_RUNTIME_ERROR_CODE_WORKER_ERROR,
+  /**
+   * Failed to create the tokio runtime.
+   */
+  DDOG_SHARED_RUNTIME_ERROR_CODE_RUNTIME_CREATION,
+  /**
+   * Shutdown timed out.
+   */
+  DDOG_SHARED_RUNTIME_ERROR_CODE_SHUTDOWN_TIMED_OUT,
+  /**
+   * An unexpected panic occurred inside the FFI call.
+   */
+  DDOG_SHARED_RUNTIME_ERROR_CODE_PANIC,
+} ddog_SharedRuntimeErrorCode;
+
+/**
+ * Error returned by ForkSafeRuntime FFI functions.
+ */
+typedef struct ddog_SharedRuntimeFFIError {
+  enum ddog_SharedRuntimeErrorCode code;
+  /**
+   * The error message is always defined when the error is returned by a ddog_shared_runtime
+   * ffi.
+   */
+  char *msg;
+} ddog_SharedRuntimeFFIError;
+
 typedef enum ddog_crasht_BuildIdType {
   DDOG_CRASHT_BUILD_ID_TYPE_GNU,
   DDOG_CRASHT_BUILD_ID_TYPE_GO,

data/vendor/{libdatadog-35.0.0/aarch64-linux → libdatadog-37.0.0/aarch64-linux-musl}/include/datadog/crashtracker.h

@@ -170,6 +170,25 @@ struct ddog_VoidResult ddog_crasht_report_unhandled_exception(ddog_CharSlice err
                                                               ddog_CharSlice error_message,
                                                               struct ddog_crasht_Handle_StackTrace *runtime_stack);
 
+/**
+ * Register the expected PID of the socket-based crash receiver
+ *
+ * When `collect_all_threads` is enabled and the receiver is reached via a Unix
+ * socket, the crash handler will only grant ptrace permission if the socket
+ * peer's PID matches this registered value.
+ *
+ * Call this after establishing a trusted connection to the sidecar
+ *
+ * # Safety
+ *   This function is safe to call from any thread at any time.
+ */
+void ddog_crasht_set_expected_receiver_pid(int32_t pid);
+
+/**
+ * Returns the currently registered expected receiver PID, or 0 if unset.
+ */
+int32_t ddog_crasht_get_expected_receiver_pid(void);
+
 /**
  * Removes all existing additional tags
  * Expected to be used after a fork, to reset the additional tags on the child