dd-trace 5.52.0 → 5.54.0

package/LICENSE-3rdparty.csv

@@ -37,7 +37,7 @@ dev,@types/node,MIT,Copyright Authors
 dev,@eslint/eslintrc,MIT,Copyright OpenJS Foundation and other contributors, <www.openjsf.org>
 dev,@eslint/js,MIT,Copyright OpenJS Foundation and other contributors, <www.openjsf.org>
 dev,@msgpack/msgpack,ISC,Copyright 2019 The MessagePack Community
-dev,@stylistic/eslint-plugin-js,MIT,Copyright OpenJS Foundation and other contributors, <www.openjsf.org>
+dev,@stylistic/eslint-plugin,MIT,Copyright OpenJS Foundation and other contributors, <www.openjsf.org>
 dev,axios,MIT,Copyright 2014-present Matt Zabriskie
 dev,benchmark,MIT,Copyright 2010-2016 Mathias Bynens Robert Kieffer John-David Dalton
 dev,body-parser,MIT,Copyright 2014 Jonathan Ong 2014-2015 Douglas Christopher Wilson
@@ -67,6 +67,7 @@ dev,sinon-chai,WTFPL and BSD-2-Clause,Copyright 2004 Sam Hocevar 2012–2017 Dom
 dev,tap,ISC,Copyright 2011-2022 Isaac Z. Schlueter and Contributors
 dev,tiktoken,MIT,Copyright (c) 2022 OpenAI, Shantanu Jain
 dev,yaml,ISC,Copyright Eemeli Aro <eemeli@gmail.com>
+dev,yarn-deduplicate,Apache license 2.0,Copyright [yyyy] [name of copyright owner]
 file,aws-lambda-nodejs-runtime-interface-client,Apache 2.0,Copyright 2019 Amazon.com Inc. or its affiliates. All Rights Reserved.
 file,profile.proto,Apache license 2.0,Copyright 2016 Google Inc.
 file,is-git-url,MIT,Copyright (c) 2017 Jon Schlinkert.

package/README.md

@@ -22,6 +22,11 @@ Most of the documentation for `dd-trace` is available on these webpages:
 
 ## Version Release Lines and Maintenance
 
+> **Node.js v24 Notice**: We're currently adding compatibility for Node.js v24. To use the tracer with your application either continue to use Node.js v22 (LTS), or do both of the following as a workaround:
+> * Install v5.52.0 (or newer) of the tracer
+> * Set `--no-async-context-frame` either using a CLI argument or via `NODE_OPTIONS`
+> Once support for Node.js v24 is complete this flag will no longer be needed.
+
 | Release Line                                             | Latest Version                                                                                         | Node.js  | [SSI](https://docs.datadoghq.com/tracing/trace_collection/automatic_instrumentation/single-step-apm/?tab=linuxhostorvm) | [K8s Injection](https://docs.datadoghq.com/tracing/trace_collection/library_injection_local/?tab=kubernetes) |Status          |Initial Release | End of Life |
 | :---:                                                    | :---:                                                                                                  | :---:    | :---:  | :---:  | :---:           | :---:          | :---:       |
 | [`v1`](https://github.com/DataDog/dd-trace-js/tree/v1.x) | ![npm v1](https://img.shields.io/npm/v/dd-trace/legacy-v1?color=white&label=%20&style=flat-square)     | `>= v12` | NO | NO | **EOL** | 2021-07-13     | 2022-02-25  |

package/index.d.ts

@@ -189,6 +189,7 @@ interface Plugins {
   "http": tracer.plugins.http;
   "http2": tracer.plugins.http2;
   "ioredis": tracer.plugins.ioredis;
+  "iovalkey": tracer.plugins.iovalkey;
   "jest": tracer.plugins.jest;
   "kafkajs": tracer.plugins.kafkajs
   "knex": tracer.plugins.knex;
@@ -208,7 +209,6 @@ interface Plugins {
   "openai": tracer.plugins.openai;
   "opensearch": tracer.plugins.opensearch;
   "oracledb": tracer.plugins.oracledb;
-  "paperplane": tracer.plugins.paperplane;
   "playwright": tracer.plugins.playwright;
   "pg": tracer.plugins.pg;
   "pino": tracer.plugins.pino;
@@ -456,7 +456,7 @@ declare namespace tracer {
     rateLimit?: number,
 
     /**
-     * Sampling rules to apply to priority samplin. Each rule is a JSON,
+     * Sampling rules to apply to priority sampling. Each rule is a JSON,
      * consisting of `service` and `name`, which are regexes to match against
      * a trace's `service` and `name`, and a corresponding `sampleRate`. If not
      * specified, will defer to global sampling rate for all spans.
@@ -713,7 +713,12 @@ declare namespace tracer {
         /** Whether to enable RASP.
          * @default false
          */
-        enabled?: boolean
+        enabled?: boolean,
+
+        /** Whether to enable request body collection on RASP event
+         * @default false
+         */
+        bodyCollection?: boolean
       },
       /**
        * Configuration for stack trace reporting
@@ -733,6 +738,25 @@ declare namespace tracer {
          * @default 32
          */
         maxDepth?: number,
+      },
+      /**
+       * Configuration for extended headers collection tied to security events
+       */
+      extendedHeadersCollection?: {
+        /** Whether to enable extended headers collection
+         * @default false
+         */
+        enabled: boolean,
+
+        /** Whether to redact collected headers
+         * @default true
+         */
+        redaction: boolean,
+
+        /** Specifies the maximum number of headers collected.
+         * @default 50
+         */
+        maxHeaders: number,
       }
     }
 
@@ -800,7 +824,7 @@ declare namespace tracer {
     }
 
     /**
-     * Configuration enabling LLM Observability. Enablement is superceded by the DD_LLMOBS_ENABLED environment variable.
+     * Configuration enabling LLM Observability. Enablement is superseded by the DD_LLMOBS_ENABLED environment variable.
      */
     llmobs?: llmobs.LLMObsEnableOptions
   }
@@ -855,7 +879,7 @@ declare namespace tracer {
      * @param value The amount to increment the stat by.
      * @param tags Tags to pass along, such as `{ foo: 'bar' }`. Values are combined with config.tags.
      */
-    increment(stat: string, value?: number, tags?: Record<string, string|number>): void
+    increment(stat: string, value?: number, tags?: Record<string, string|number> | string[]): void
 
     /**
      * Decrements a metric by the specified value, optionally specifying tags.
@@ -863,7 +887,7 @@ declare namespace tracer {
      * @param value The amount to decrement the stat by.
      * @param tags Tags to pass along, such as `{ foo: 'bar' }`. Values are combined with config.tags.
      */
-    decrement(stat: string, value?: number, tags?: Record<string, string|number>): void
+    decrement(stat: string, value?: number, tags?: Record<string, string|number> | string[]): void
 
     /**
      * Sets a distribution value, optionally specifying tags.
@@ -871,7 +895,7 @@ declare namespace tracer {
      * @param value The amount to increment the stat by.
      * @param tags Tags to pass along, such as `{ foo: 'bar' }`. Values are combined with config.tags.
      */
-    distribution(stat: string, value?: number, tags?: Record<string, string|number>): void
+    distribution(stat: string, value?: number, tags?: Record<string, string|number> | string[]): void
 
     /**
      * Sets a gauge value, optionally specifying tags.
@@ -879,7 +903,7 @@ declare namespace tracer {
      * @param value The amount to increment the stat by.
      * @param tags Tags to pass along, such as `{ foo: 'bar' }`. Values are combined with config.tags.
      */
-    gauge(stat: string, value?: number, tags?: Record<string, string|number>): void
+    gauge(stat: string, value?: number, tags?: Record<string, string|number> | string[]): void
 
     /**
      * Sets a histogram value, optionally specifying tags.
@@ -887,7 +911,7 @@ declare namespace tracer {
      * @param value The amount to increment the stat by.
      * @param tags Tags to pass along, such as `{ foo: 'bar' }`. Values are combined with config.tags.
      */
-    histogram(stat: string, value?: number, tags?: Record<string, string|number>): void
+    histogram(stat: string, value?: number, tags?: Record<string, string|number> | string[]): void
 
     /**
      * Forces any unsent metrics to be sent
@@ -1361,7 +1385,7 @@ declare namespace tracer {
      * [child_process](https://nodejs.org/api/child_process.html) module.
      */
     interface child_process extends Instrumentation {}
-  
+
     /**
      * This plugin automatically instruments the
      * [confluentinc-kafka-javascript](https://github.com/confluentinc/confluent-kafka-js) module.
@@ -1497,7 +1521,7 @@ declare namespace tracer {
 
       /**
        * Whether to include the source of the operation within the query as a tag
-       * on every span. This may contain sensitive information and sould only be
+       * on every span. This may contain sensitive information and should only be
        * enabled if sensitive data is always sent as variables and not in the
        * query text.
        *
@@ -1666,6 +1690,53 @@ declare namespace tracer {
       splitByInstance?: boolean;
     }
 
+    /**
+     * This plugin automatically instruments the
+     * [iovalkey](https://github.com/valkey-io/iovalkey) module.
+     */
+    interface iovalkey extends Instrumentation {
+      /**
+       * List of commands that should be instrumented. Commands must be in
+       * lowercase for example 'xread'.
+       *
+       * @default /^.*$/
+       */
+      allowlist?: string | RegExp | ((command: string) => boolean) | (string | RegExp | ((command: string) => boolean))[];
+
+      /**
+       * Deprecated in favor of `allowlist`.
+       *
+       * @deprecated
+       * @hidden
+       */
+      whitelist?: string | RegExp | ((command: string) => boolean) | (string | RegExp | ((command: string) => boolean))[];
+
+      /**
+       * List of commands that should not be instrumented. Takes precedence over
+       * allowlist if a command matches an entry in both. Commands must be in
+       * lowercase for example 'xread'.
+       *
+       * @default []
+       */
+      blocklist?: string | RegExp | ((command: string) => boolean) | (string | RegExp | ((command: string) => boolean))[];
+
+      /**
+       * Deprecated in favor of `blocklist`.
+       *
+       * @deprecated
+       * @hidden
+       */
+      blacklist?: string | RegExp | ((command: string) => boolean) | (string | RegExp | ((command: string) => boolean))[];
+
+      /**
+       * Whether to use a different service name for each Redis instance based
+       * on the configured connection name of the client.
+       *
+       * @default false
+       */
+      splitByInstance?: boolean;
+    }
+
     /**
      * This plugin automatically instruments the
      * [jest](https://github.com/jestjs/jest) module.
@@ -1828,12 +1899,6 @@ declare namespace tracer {
       service?: string | ((params: any) => string);
     }
 
-    /**
-     * This plugin automatically instruments the
-     * [paperplane](https://github.com/articulate/paperplane) module.
-     */
-    interface paperplane extends HttpServer {}
-
     /**
     * This plugin automatically instruments the
     * [playwright](https://github.com/microsoft/playwright) module.
@@ -2437,7 +2502,7 @@ declare namespace tracer {
       annotate (span: tracer.Span | undefined, options: llmobs.AnnotationOptions): void
 
       /**
-       * Submits a custom evalutation metric for a given span ID and trace ID.
+       * Submits a custom evaluation metric for a given span ID and trace ID.
        * @param spanContext The span context of the span to submit the evaluation metric for.
        * @param options An object containing the label, metric type, value, and tags of the evaluation metric.
        */
@@ -2451,7 +2516,7 @@ declare namespace tracer {
 
     interface EvaluationOptions {
       /**
-       * The name of the evalutation metric
+       * The name of the evaluation metric
        */
       label: string,
 
@@ -2575,7 +2640,7 @@ declare namespace tracer {
       metadata?: { [key: string]: any },
 
       /**
-       * Object of JSON seraliazable key-value metrics (number) pairs, such as `{input,output,total}Tokens`
+       * Object of JSON serializable key-value metrics (number) pairs, such as `{input,output,total}Tokens`
        */
       metrics?: { [key: string]: number },
 
@@ -2613,7 +2678,7 @@ declare namespace tracer {
 
       /**
        * The name of the ML application that the agent is orchestrating.
-       * If not provided, the default value will be set to mlApp provided during initalization, or `DD_LLMOBS_ML_APP`.
+       * If not provided, the default value will be set to mlApp provided during initialization, or `DD_LLMOBS_ML_APP`.
        */
       mlApp?: string,
 
@@ -2653,7 +2718,7 @@ declare namespace tracer {
       mlApp?: string,
 
       /**
-       * Set to `true` to disbale sending data that requires a Datadog Agent.
+       * Set to `true` to disable sending data that requires a Datadog Agent.
        */
       agentlessEnabled?: boolean,
     }

package/initialize.mjs

@@ -17,7 +17,6 @@ import { fileURLToPath } from 'node:url'
 import {
   load as origLoad,
   resolve as origResolve,
-  getFormat as origGetFormat,
   getSource as origGetSource
 } from 'import-in-the-middle/hook.mjs'
 
@@ -26,7 +25,7 @@ function insertInit (result) {
   if (!hasInsertedInit) {
     hasInsertedInit = true
     result.source = `
-import '${fileURLToPath(new URL('./init.js', import.meta.url))}';
+import '${fileURLToPath(new URL('init.js', import.meta.url))}';
 ${result.source}`
   }
   return result
@@ -45,8 +44,6 @@ export async function load (url, context, nextLoad) {
 
 export const resolve = brokenLoaders ? undefined : origResolve
 
-export const getFormat = origGetFormat
-
 export async function getSource (...args) {
   return insertInit(await origGetSource(...args))
 }
@@ -60,3 +57,5 @@ if (isMainThread) {
     })
   }
 }
+
+export { getFormat } from 'import-in-the-middle/hook.mjs'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dd-trace",
-  "version": "5.52.0",
+  "version": "5.54.0",
   "description": "Datadog APM tracing client for JavaScript",
   "main": "index.js",
   "typings": "index.d.ts",
@@ -9,6 +9,7 @@
     "preinstall": "node scripts/preinstall.js",
     "bench": "node benchmark/index.js",
     "bench:e2e:ci-visibility": "node benchmark/e2e-ci/benchmark-run.js",
+    "dependencies:dedupe": "yarn-deduplicate yarn.lock",
     "type:doc": "cd docs && yarn && yarn build",
     "type:test": "cd docs && yarn && yarn test",
     "lint": "node scripts/check_licenses.js && eslint . --max-warnings 0 && yarn audit",
@@ -83,75 +84,76 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@datadog/libdatadog": "^0.5.1",
+    "@datadog/libdatadog": "^0.6.0",
     "@datadog/native-appsec": "8.5.2",
     "@datadog/native-iast-taint-tracking": "4.0.0",
     "@datadog/native-metrics": "^3.1.1",
     "@datadog/pprof": "5.8.0",
-    "@datadog/sketches-js": "^2.1.0",
+    "@datadog/sketches-js": "^2.1.1",
     "@datadog/wasm-js-rewriter": "4.0.1",
     "@isaacs/ttlcache": "^1.4.1",
     "@opentelemetry/api": ">=1.0.0 <1.9.0",
     "@opentelemetry/core": "^1.14.0",
     "crypto-randomuuid": "^1.0.0",
-    "dc-polyfill": "0.1.8",
+    "dc-polyfill": "0.1.9",
     "ignore": "^5.2.4",
-    "import-in-the-middle": "1.13.1",
-    "istanbul-lib-coverage": "3.2.0",
+    "import-in-the-middle": "1.14.0",
+    "istanbul-lib-coverage": "3.2.2",
     "jest-docblock": "^29.7.0",
     "koalas": "^1.0.2",
     "limiter": "1.1.5",
     "lodash.sortby": "^4.7.0",
-    "lru-cache": "^7.14.0",
-    "module-details-from-path": "^1.0.3",
+    "lru-cache": "^7.18.3",
+    "module-details-from-path": "^1.0.4",
     "mutexify": "^1.4.0",
     "opentracing": ">=0.12.1",
     "path-to-regexp": "^0.1.12",
     "pprof-format": "^2.1.0",
-    "protobufjs": "^7.2.5",
+    "protobufjs": "^7.5.3",
     "retry": "^0.13.1",
-    "rfdc": "^1.3.1",
+    "rfdc": "^1.4.1",
     "semifies": "^1.0.0",
-    "shell-quote": "^1.8.1",
+    "shell-quote": "^1.8.2",
     "source-map": "^0.7.4",
     "tlhunter-sorted-set": "^0.1.0",
     "ttl-set": "^1.0.0"
   },
   "devDependencies": {
-    "@babel/helpers": "^7.26.10",
-    "@eslint/eslintrc": "^3.2.0",
-    "@eslint/js": "^9.19.0",
-    "@msgpack/msgpack": "^3.0.0-beta3",
-    "@stylistic/eslint-plugin-js": "^3.0.1",
-    "@types/node": "^16.0.0",
-    "axios": "^1.8.2",
+    "@babel/helpers": "^7.27.3",
+    "@eslint/eslintrc": "^3.3.1",
+    "@eslint/js": "^9.27.0",
+    "@msgpack/msgpack": "^3.1.2",
+    "@stylistic/eslint-plugin": "^4.4.0",
+    "@types/node": "^18.19.106",
+    "axios": "^1.9.0",
     "benchmark": "^2.1.4",
-    "body-parser": "^1.20.3",
-    "chai": "^4.3.7",
-    "eslint": "^9.19.0",
+    "body-parser": "^2.2.0",
+    "chai": "^4.5.0",
+    "eslint": "^9.27.0",
     "eslint-config-standard": "^17.1.0",
     "eslint-plugin-import": "^2.31.0",
     "eslint-plugin-mocha": "^10.5.0",
-    "eslint-plugin-n": "^17.15.1",
+    "eslint-plugin-n": "^17.18.0",
     "eslint-plugin-promise": "^7.2.1",
     "eslint-plugin-unicorn": "^57.0.0",
     "express": "^4.21.2",
     "get-port": "^5.1.1",
-    "glob": "^7.1.6",
-    "globals": "^15.10.0",
+    "glob": "^7.2.3",
+    "globals": "^15.15.0",
     "graphql": "0.13.2",
-    "jszip": "^3.5.0",
-    "mocha": "^10",
-    "multer": "^1.4.5-lts.1",
-    "nock": "^11.3.3",
+    "jszip": "^3.10.1",
+    "mocha": "^10.8.2",
+    "multer": "^2.0.0",
+    "nock": "^11.9.1",
     "nyc": "^15.1.0",
     "proxyquire": "^1.8.0",
-    "rimraf": "^3.0.0",
-    "semver": "^7.5.4",
-    "sinon": "^16.1.3",
+    "rimraf": "^3.0.2",
+    "semver": "^7.7.2",
+    "sinon": "^18.0.1",
     "sinon-chai": "^3.7.0",
-    "tap": "^16.3.7",
-    "tiktoken": "^1.0.15",
-    "yaml": "^2.5.0"
+    "tap": "^16.3.10",
+    "tiktoken": "^1.0.21",
+    "yaml": "^2.8.0",
+    "yarn-deduplicate": "^6.0.2"
   }
 }

package/packages/datadog-core/src/utils/src/get.js

@@ -1,6 +1,6 @@
 'use strict'
 
-module.exports = (object, path) => {
+module.exports = function get (object, path) {
   const pathArr = path.split('.')
   let val = object
   for (const p of pathArr) {

package/packages/datadog-core/src/utils/src/has.js

@@ -1,6 +1,6 @@
 'use strict'
 
-module.exports = (object, path) => {
+module.exports = function has (object, path) {
   const pathArr = path.split('.')
   let property = object
   for (const n of pathArr) {

package/packages/datadog-core/src/utils/src/kebabcase.js

@@ -1,16 +1,14 @@
 'use strict'
 
-module.exports = str => {
+module.exports = function kebabcase (str) {
   if (typeof str !== 'string') {
     throw new TypeError('Expected a string')
   }
 
   return str
     .trim()
-    .replace(/([a-z])([A-Z])/g, '$1-$2')
-    .replace(/\s+/g, '-')
-    .replace(/^-+|-+$/g, '')
-    .replace(/_/g, '-')
-    .replace(/-{2,}/g, '-')
+    .replace(/([a-z])([A-Z])/g, '$1-$2') // Convert camelCase to kebab-case
+    .replace(/[\s_]+/g, '-') // Replace spaces and underscores with a single dash
+    .replace(/^-+|-+$/g, '') // Trim leading and trailing dashes
     .toLowerCase()
 }

package/packages/datadog-core/src/utils/src/parse-tags.js

@@ -11,7 +11,7 @@ const digitRegex = /^\d+$/
  * @param {Object} tags - Key/value pairs of tags
  * @returns Object - Parsed tags
  */
-module.exports = tags => {
+module.exports = function parseTags (tags) {
   const parsedTags = {}
   for (const [tag, value] of Object.entries(tags)) {
     const keys = tag.split('.')

package/packages/datadog-core/src/utils/src/pick.js

@@ -1,9 +1,9 @@
 'use strict'
 
-module.exports = (object, props) => {
+module.exports = function pick (object, props) {
   const result = {}
   props.forEach(prop => {
-    if (prop in object) {
+    if (Object.hasOwn(object, prop)) {
       result[prop] = object[prop]
     }
   })

package/packages/datadog-core/src/utils/src/set.js

@@ -1,6 +1,6 @@
 'use strict'
 
-module.exports = (object, path, value) => {
+module.exports = function set (object, path, value) {
   const pathArr = path.split('.')
   let property = object
   let i

package/packages/datadog-core/src/utils/src/uniq.js

@@ -1,5 +1,5 @@
 'use strict'
 
-module.exports = function (arr) {
+module.exports = function uniq (arr) {
   return [...new Set(arr)]
 }

package/packages/datadog-instrumentations/src/amqp10.js

@@ -2,8 +2,7 @@
 
 const {
   channel,
-  addHook,
-  AsyncResource
+  addHook
 } = require('./helpers/instrument')
 const shimmer = require('../../datadog-shimmer')
 
@@ -15,9 +14,9 @@ addHook({ name: 'amqp10', file: 'lib/sender_link.js', versions: ['>=3'] }, Sende
     if (!startCh.hasSubscribers) {
       return send.apply(this, arguments)
     }
-    const asyncResource = new AsyncResource('bound-anonymous-fn')
-    return asyncResource.runInAsyncScope(() => {
-      startCh.publish({ link: this })
+    const ctx = { link: this }
+
+    return startCh.runStores(ctx, () => {
       try {
         const promise = send.apply(this, arguments)
 
@@ -26,12 +25,13 @@ addHook({ name: 'amqp10', file: 'lib/sender_link.js', versions: ['>=3'] }, Sende
           return promise
         }
 
-        promise.then(asyncResource.bind(() => finish(finishCh, errorCh)),
-          asyncResource.bind(e => finish(finishCh, errorCh, e)))
-
+        promise.then(
+          () => finish(finishCh, errorCh, null, ctx),
+          e => finish(finishCh, errorCh, e, ctx)
+        )
         return promise
       } catch (err) {
-        finish(finishCh, errorCh, err)
+        finish(finishCh, errorCh, err, ctx)
         throw err
       }
     })
@@ -47,25 +47,27 @@ addHook({ name: 'amqp10', file: 'lib/receiver_link.js', versions: ['>=3'] }, Rec
     if (!transferFrame || transferFrame.aborted || transferFrame.more) {
       return messageReceived.apply(this, arguments)
     }
-    const asyncResource = new AsyncResource('bound-anonymous-fn')
-    return asyncResource.runInAsyncScope(() => {
-      startCh.publish({ link: this })
+    const ctx = { link: this }
+
+    return startCh.runStores(ctx, () => {
       try {
         return messageReceived.apply(this, arguments)
       } catch (err) {
-        errorCh.publish(err)
+        ctx.error = err
+        errorCh.publish(ctx)
         throw err
       } finally {
-        finishCh.publish()
+        finishCh.publish(ctx)
       }
     })
   })
   return ReceiverLink
 })
 
-function finish (finishCh, errorCh, error) {
+function finish (finishCh, errorCh, error, ctx) {
   if (error) {
-    errorCh.publish(error)
+    ctx.error = error
+    errorCh.publish(ctx)
   }
-  finishCh.publish()
+  finishCh.publish(ctx)
 }