dd-trace 5.84.0 → 5.85.0

package/ci/cypress/polyfills.js

@@ -20,6 +20,6 @@ if (!Array.prototype.at) {
       return (index < 0 || index >= len) ? undefined : this[index]
     },
     writable: true,
-    configurable: true
+    configurable: true,
   })
 }

package/ci/init.js

@@ -14,7 +14,7 @@ const EXPORTER_MAP = {
   cucumber: 'cucumber_worker',
   mocha: 'mocha_worker',
   playwright: 'playwright_worker',
-  vitest: 'vitest_worker'
+  vitest: 'vitest_worker',
 }
 
 function isPackageManager () {
@@ -40,7 +40,7 @@ const isJestWorker = testWorkerType === 'jest'
 const baseOptions = {
   startupLogs: false,
   isCiVisibility: true,
-  flushInterval: isJestWorker ? JEST_FLUSH_INTERVAL : DEFAULT_FLUSH_INTERVAL
+  flushInterval: isJestWorker ? JEST_FLUSH_INTERVAL : DEFAULT_FLUSH_INTERVAL,
 }
 
 let shouldInit = !isFalse(getValueFromEnvSources('DD_CIVISIBILITY_ENABLED'))
@@ -54,13 +54,13 @@ if (!isTestWorker && isPackageManager()) {
 if (isTestWorker) {
   baseOptions.telemetry = { enabled: false }
   baseOptions.experimental = {
-    exporter: EXPORTER_MAP[testWorkerType]
+    exporter: EXPORTER_MAP[testWorkerType],
   }
 } else {
   if (isAgentlessEnabled) {
     if (getValueFromEnvSources('DD_API_KEY')) {
       baseOptions.experimental = {
-        exporter: 'datadog'
+        exporter: 'datadog',
       }
     } else {
       console.error(
@@ -72,7 +72,7 @@ if (isTestWorker) {
     }
   } else {
     baseOptions.experimental = {
-      exporter: 'agent_proxy'
+      exporter: 'agent_proxy',
     }
   }
 }

package/ext/exporters.js

@@ -8,5 +8,5 @@ module.exports = {
   CUCUMBER_WORKER: 'cucumber_worker',
   MOCHA_WORKER: 'mocha_worker',
   PLAYWRIGHT_WORKER: 'playwright_worker',
-  VITEST_WORKER: 'vitest_worker'
+  VITEST_WORKER: 'vitest_worker',
 }

package/ext/formats.js

@@ -5,5 +5,5 @@ module.exports = {
   HTTP_HEADERS: 'http_headers',
   BINARY: 'binary',
   LOG: 'log',
-  TEXT_MAP_DSM: 'text_map_dsm'
+  TEXT_MAP_DSM: 'text_map_dsm',
 }

package/ext/index.js

@@ -13,5 +13,5 @@ module.exports = {
   priority,
   tags,
   types,
-  exporters
+  exporters,
 }

package/ext/kinds.js

@@ -5,5 +5,5 @@ module.exports = {
   CLIENT: 'client',
   PRODUCER: 'producer',
   CONSUMER: 'consumer',
-  INTERNAL: 'internal'
+  INTERNAL: 'internal',
 }

package/ext/priority.js

@@ -4,5 +4,5 @@ module.exports = {
   USER_REJECT: -1,
   AUTO_REJECT: 0,
   AUTO_KEEP: 1,
-  USER_KEEP: 2
+  USER_KEEP: 2,
 }

package/ext/scopes.js

@@ -5,5 +5,5 @@ module.exports = {
   ASYNC_LOCAL_STORAGE: 'async_local_storage',
   ASYNC_HOOKS: 'async_hooks',
   SYNC: 'sync',
-  NOOP: 'noop'
+  NOOP: 'noop',
 }

package/ext/tags.js

@@ -29,7 +29,7 @@ const tags = {
   // Messaging
 
   // DSM Specific
-  PATHWAY_HASH: 'pathway.hash'
+  PATHWAY_HASH: 'pathway.hash',
 }
 
 // Deprecated

package/ext/types.js

@@ -3,5 +3,5 @@
 module.exports = {
   HTTP: 'http',
   SERVERLESS: 'serverless',
-  WEB: 'web'
+  WEB: 'web',
 }

package/index.d.ts

@@ -1574,6 +1574,16 @@ declare namespace tracer {
        */
       blacklist?: string | RegExp | ((urlOrPath: string) => boolean) | (string | RegExp | ((urlOrPath: string) => boolean))[];
 
+      /**
+       * Custom filter function used to decide whether a URL/path is allowed.
+       * When provided, this takes precedence over allowlist/blocklist configuration.
+       * If not provided, allowlist/blocklist logic will be used instead.
+       *
+       * @param urlOrPath - The URL or path to filter
+       * @returns true to instrument the request, false to skip it
+       */
+      filter?: (urlOrPath: string) => boolean;
+
       /**
        * An array of headers to include in the span metadata.
        *
@@ -1626,6 +1636,21 @@ declare namespace tracer {
        * @default true
        */
       middleware?: boolean;
+
+      /**
+       * Whether (or how) to obfuscate querystring values in `http.url`.
+       *
+       * - `true`: obfuscate all values
+       * - `false`: disable obfuscation
+       * - `string`: regex string used to obfuscate matching values (empty string disables)
+       * - `RegExp`: regex used to obfuscate matching values
+       */
+      queryStringObfuscation?: boolean | string | RegExp;
+
+      /**
+       * Whether to enable resource renaming when the framework route is unavailable.
+       */
+      resourceRenamingEnabled?: boolean;
     }
 
     /** @hidden */
@@ -1691,6 +1716,20 @@ declare namespace tracer {
        * @default code => code < 500
        */
       validateStatus?: (code: number) => boolean;
+      /**
+       * Whether (or how) to obfuscate querystring values in `http.url`.
+       *
+       * - `true`: obfuscate all values
+       * - `false`: disable obfuscation
+       * - `string`: regex string used to obfuscate matching values (empty string disables)
+       * - `RegExp`: regex used to obfuscate matching values
+       */
+      queryStringObfuscation?: boolean | string | RegExp;
+
+      /**
+       * Whether to enable resource renaming when the framework route is unavailable.
+       */
+      resourceRenamingEnabled?: boolean;
     }
 
     /** @hidden */
@@ -1827,7 +1866,12 @@ declare namespace tracer {
      * This plugin automatically instruments the
      * @azure/functions module.
     */
-    interface azure_functions extends Instrumentation {}
+    interface azure_functions extends Instrumentation {
+      /**
+       * Whether to enable resource renaming when the framework route is unavailable.
+       */
+      resourceRenamingEnabled?: boolean;
+    }
 
     /**
      * This plugin automatically instruments the
@@ -2178,6 +2222,16 @@ declare namespace tracer {
        */
       blacklist?: string | RegExp | ((command: string) => boolean) | (string | RegExp | ((command: string) => boolean))[];
 
+      /**
+       * Custom filter function used to decide whether a Redis command should be instrumented.
+       * When provided, this takes precedence over allowlist/blocklist configuration.
+       * If not provided, allowlist/blocklist logic will be used instead.
+       *
+       * @param command - The Redis command name to filter
+       * @returns true to instrument the command, false to skip it
+       */
+      filter?: (command: string) => boolean;
+
       /**
        * Whether to use a different service name for each Redis instance based
        * on the configured connection name of the client.
@@ -2225,6 +2279,16 @@ declare namespace tracer {
        */
       blacklist?: string | RegExp | ((command: string) => boolean) | (string | RegExp | ((command: string) => boolean))[];
 
+      /**
+       * Custom filter function used to decide whether a Valkey command should be instrumented.
+       * When provided, this takes precedence over allowlist/blocklist configuration.
+       * If not provided, allowlist/blocklist logic will be used instead.
+       *
+       * @param command - The Valkey command name to filter
+       * @returns true to instrument the command, false to skip it
+       */
+      filter?: (command: string) => boolean;
+
       /**
        * Whether to use a different service name for each Redis instance based
        * on the configured connection name of the client.
@@ -2498,6 +2562,16 @@ declare namespace tracer {
        * @hidden
        */
       blacklist?: string | RegExp | ((command: string) => boolean) | (string | RegExp | ((command: string) => boolean))[];
+
+      /**
+       * Custom filter function used to decide whether a Redis command should be instrumented.
+       * When provided, this takes precedence over allowlist/blocklist configuration.
+       * If not provided, allowlist/blocklist logic will be used instead.
+       *
+       * @param command - The Redis command name to filter
+       * @returns true to instrument the command, false to skip it
+       */
+      filter?: (command: string) => boolean;
     }
 
     /**
@@ -2566,28 +2640,7 @@ declare namespace tracer {
     /**
      * This plugin implements shared web request instrumentation helpers.
      */
-    interface web extends HttpServer {
-      /**
-       * Custom filter function used to decide whether a URL/path should be instrumented.
-       * Takes precedence over allowlist/blocklist.
-       */
-      filter?: (urlOrPath: string) => boolean;
-
-      /**
-       * Whether (or how) to obfuscate querystring values in `http.url`.
-       *
-       * - `true`: obfuscate all values
-       * - `false`: disable obfuscation
-       * - `string`: regex string used to obfuscate matching values (empty string disables)
-       * - `RegExp`: regex used to obfuscate matching values
-       */
-      queryStringObfuscation?: boolean | string | RegExp;
-
-      /**
-       * Whether to enable resource renaming when the framework route is unavailable.
-       */
-      resourceRenamingEnabled?: boolean;
-    }
+    interface web extends HttpServer {}
 
     /**
      * This plugin patches the [winston](https://github.com/winstonjs/winston)

package/initialize.mjs

@@ -2,8 +2,7 @@
  * This file serves one of two purposes, depending on how it's used.
  *
  * If used with --import, it will import init.js and register the loader hook.
- * If used with --loader, it will act as the loader hook, except that it will
- * also import init.js inside the source code of the entrypoint file.
+ * If used with --loader, it will act as the loader hook.
  *
  * The result is that no matter how this file is used, so long as it's with
  * one of the two flags, the tracer will always be initialized, and the loader
@@ -12,58 +11,75 @@
 
 /* eslint n/no-unsupported-features/node-builtins: ['error', { ignores: ['module.register'] }] */
 
+import { Buffer } from 'buffer'
+import * as Module from 'module'
+import { types } from 'util'
 import { isMainThread } from 'worker_threads'
 
-import * as Module from 'node:module'
-import { fileURLToPath } from 'node:url'
+// This file must support Node.js 12.0.0 syntax
+
 import {
-  load as origLoad,
-  resolve as origResolve,
-  getSource as origGetSource,
-} from 'import-in-the-middle/hook.mjs'
+  iitmExclusions,
+  load as hookLoad,
+  resolve as hookResolve,
+} from './loader-hook.mjs'
 
 let hasInsertedInit = false
-function insertInit (result) {
-  if (!hasInsertedInit) {
-    hasInsertedInit = true
-    result.source = `
-import '${fileURLToPath(new URL('init.js', import.meta.url))}';
-${result.source}`
+const initJsUrl = new URL('init.js', import.meta.url).href
+// `--loader` only reliably influences ESM entrypoints; for CJS apps use `--import`/`--require`.
+
+/**
+ * @param {{ source?: string|Buffer|Uint8Array, format?: string }} result
+ * @param {unknown} _url_
+ * @param {{ format?: string, isMain?: boolean }} context
+ * @returns {{ source?: string|Buffer|Uint8Array, format?: string }}
+ */
+function insertInit (result, _url_, context) {
+  if (hasInsertedInit) return result
+  // If Node provides `isMain`, only inject into the entrypoint module.
+  if (context && context.isMain === false) return result
+
+  let { source } = result
+  if (typeof source !== 'string') {
+    // Fast decode: handle bytes sources without extra copies when possible.
+    if (Buffer.isBuffer(source)) {
+      source = source.toString('utf8')
+    } else if (types.isUint8Array(source)) {
+      // Create a Buffer view over the same ArrayBuffer segment (no copy).
+      source = Buffer.from(source.buffer, source.byteOffset, source.byteLength).toString('utf8')
+    } else {
+      return result
+    }
   }
+
+  const format = result.format || (context && context.format)
+  if (format !== 'module') return result
+
+  hasInsertedInit = true
+
+  result.source = `import ${JSON.stringify(initJsUrl)};\n${source}`
+
   return result
 }
 
 const [NODE_MAJOR, NODE_MINOR] = process.versions.node.split('.').map(Number)
 
 const brokenLoaders = NODE_MAJOR === 18 && NODE_MINOR === 0
-const iitmExclusions = [
-  /langsmith/,
-  /openai\/_shims/,
-  /openai\/resources\/chat\/completions\/messages/,
-  /openai\/agents-core\/dist\/shims/,
-  /@anthropic-ai\/sdk\/_shims/
-]
 
 export async function load (url, context, nextLoad) {
   const iitmExclusionsMatch = iitmExclusions.some((exclusion) => exclusion.test(url))
-  const loadHook = (brokenLoaders || iitmExclusionsMatch) ? nextLoad : origLoad
-  return insertInit(await loadHook(url, context, nextLoad))
+  const loadHook = (brokenLoaders || iitmExclusionsMatch) ? nextLoad : hookLoad
+  return insertInit(await loadHook(url, context, nextLoad), url, context)
 }
 
-export const resolve = brokenLoaders ? undefined : origResolve
-
-export async function getSource (...args) {
-  return insertInit(await origGetSource(...args))
-}
+export const resolve = brokenLoaders ? undefined : hookResolve
 
 if (isMainThread) {
   const require = Module.createRequire(import.meta.url)
   require('./init.js')
   if (Module.register) {
     Module.register('./loader-hook.mjs', import.meta.url, {
-      data: { exclude: iitmExclusions }
+      data: { exclude: iitmExclusions },
     })
   }
 }
-
-export { getFormat } from 'import-in-the-middle/hook.mjs'

package/loader-hook.mjs

@@ -1,28 +1,30 @@
-import * as iitm from 'import-in-the-middle/hook.mjs'
+import { initialize as origInitialize, load as origLoad, resolve } from 'import-in-the-middle/hook.mjs'
 import regexpEscapeModule from './vendor/dist/escape-string-regexp/index.js'
 import hooks from './packages/datadog-instrumentations/src/helpers/hooks.js'
 import configHelper from './packages/dd-trace/src/config/helper.js'
 import * as rewriterLoader from './packages/datadog-instrumentations/src/helpers/rewriter/loader.mjs'
 import { isRelativeRequire } from './packages/datadog-instrumentations/src/helpers/shared-utils.js'
 
+// This file must support Node.js 12.0.0 syntax
+
 const regexpEscape = regexpEscapeModule.default
 
 // For some reason `getEnvironmentVariable` is not otherwise available to ESM.
 const env = configHelper.getEnvironmentVariable
 
 function initialize (data = {}) {
-  data.include ??= []
-  data.exclude ??= []
+  if (data.include == null) data.include = []
+  if (data.exclude == null) data.exclude = []
 
   addInstrumentations(data)
   addSecurityControls(data)
   addExclusions(data)
 
-  return iitm.initialize(data)
+  return origInitialize(data)
 }
 
 function load (url, context, nextLoad) {
-  return rewriterLoader.load(url, context, (url, context) => iitm.load(url, context, nextLoad))
+  return rewriterLoader.load(url, context, (url, context) => origLoad(url, context, nextLoad))
 }
 
 function addInstrumentations (data) {
@@ -38,27 +40,38 @@ function addInstrumentations (data) {
 }
 
 function addSecurityControls (data) {
-  const securityControls = (env('DD_IAST_SECURITY_CONTROLS_CONFIGURATION') || '')
-    .split(';')
-    .map(sc => sc.trim().split(':')[2])
-    .filter(Boolean)
-    .map(sc => sc.trim())
+  const raw = env('DD_IAST_SECURITY_CONTROLS_CONFIGURATION')
+  if (!raw) return
+  // Parse `;`-separated entries and take the 3rd `:`-separated segment.
+  // Expected form (per entry): `<...>:<...>:<subpath>:<...>`
+  const entries = raw.split(';')
+  for (const entry of entries) {
+    if (entry) {
+      const first = entry.indexOf(':')
+      if (first === -1) continue
+      const second = entry.indexOf(':', first + 1)
+      if (second === -1) continue
+      const third = entry.indexOf(':', second + 1)
 
-  for (const subpath of securityControls) {
-    data.include.push(new RegExp(regexpEscape(subpath)))
+      const subpath = entry.slice(second + 1, third === -1 ? undefined : third).trim()
+      if (subpath) {
+        data.include.push(new RegExp(regexpEscape(subpath)))
+      }
+    }
   }
 }
 
 function addExclusions (data) {
-  data.exclude.push(
-    /middle/,
-    /langsmith/,
-    /openai\/_shims/,
-    /openai\/resources\/chat\/completions\/messages/,
-    /openai\/agents-core\/dist\/shims/,
-    /@anthropic-ai\/sdk\/_shims/
-  )
+  data.exclude.push(...iitmExclusions)
 }
 
-export { initialize, load }
-export { getFormat, resolve, getSource } from 'import-in-the-middle/hook.mjs'
+export const iitmExclusions = [
+  /middle/,
+  /langsmith/,
+  /openai\/_shims/,
+  /openai\/resources\/chat\/completions\/messages/,
+  /openai\/agents-core\/dist\/shims/,
+  /@anthropic-ai\/sdk\/_shims/,
+]
+
+export { initialize, load, resolve }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dd-trace",
-  "version": "5.84.0",
+  "version": "5.85.0",
   "description": "Datadog APM tracing client for JavaScript",
   "main": "index.js",
   "typings": "index.d.ts",
@@ -13,49 +13,49 @@
     "type:check": "tsc --noEmit -p tsconfig.dev.json",
     "type:doc:build": "cd docs && yarn && yarn build",
     "type:doc:test": "cd docs && yarn && yarn test",
-    "lint": "node scripts/check_licenses.js && eslint . --concurrency=auto --max-warnings 0",
-    "lint:fix": "node scripts/check_licenses.js && eslint . --concurrency=auto --max-warnings 0 --fix",
+    "lint": "node scripts/check_licenses.js && node scripts/check-no-coverage-artifacts.js && eslint . --concurrency=auto --max-warnings 0",
+    "lint:fix": "node scripts/check_licenses.js && node scripts/check-no-coverage-artifacts.js && eslint . --concurrency=auto --max-warnings 0 --fix",
     "lint:inspect": "npx @eslint/config-inspector@latest",
     "release:proposal": "node scripts/release/proposal",
     "services": "node ./scripts/install_plugin_modules && node packages/dd-trace/test/setup/services",
     "test": "echo '\nError: The root \"npm test\" command is intentionally disabled.\n\nInstead, run specific test suites:\n  - npm run test:trace:core\n  - npm run test:appsec\n  - etc.\n\nOr run individual test files:\n  npx mocha path/to/test.spec.js\n\nSee CONTRIBUTING.md (Testing section) for more details.\n' && exit 1",
     "test:aiguard": "mocha packages/dd-trace/test/aiguard/**/*.spec.js",
-    "test:aiguard:ci": "nyc --no-clean --include \"packages/dd-trace/src/aiguard/**/*.js\" -- npm run test:aiguard",
+    "test:aiguard:ci": "nyc -- npm run test:aiguard",
     "test:appsec": "mocha --exclude \"packages/dd-trace/test/appsec/**/*.plugin.spec.js\" \"packages/dd-trace/test/appsec/**/*.spec.js\"",
-    "test:appsec:ci": "nyc --no-clean --include \"packages/dd-trace/src/appsec/**/*.js\" --exclude \"packages/dd-trace/test/appsec/**/*.plugin.spec.js\" -- npm run test:appsec",
+    "test:appsec:ci": "nyc -- npm run test:appsec",
     "test:appsec:plugins": "mocha \"packages/dd-trace/test/appsec/**/*.@(${PLUGINS}).plugin.spec.js\"",
-    "test:appsec:plugins:ci": "yarn services && nyc --no-clean --include \"packages/dd-trace/src/appsec/**/*.js\" -- npm run test:appsec:plugins",
+    "test:appsec:plugins:ci": "yarn services && nyc -- npm run test:appsec:plugins",
     "test:debugger": "mocha packages/dd-trace/test/debugger/**/*.spec.js",
-    "test:debugger:ci": "nyc --no-clean --include \"packages/dd-trace/src/debugger/**/*.js\" -- npm run test:debugger",
+    "test:debugger:ci": "nyc -- npm run test:debugger",
     "test:eslint-rules": "node eslint-rules/*.test.mjs",
     "test:trace:core": "node scripts/mocha-parallel-files.js --expose-gc --timeout 30000 -- \"packages/dd-trace/test/*.spec.js\" \"packages/dd-trace/test/{agent,ci-visibility,config,crashtracking,datastreams,encode,exporters,msgpack,opentelemetry,opentracing,payload-tagging,plugins,remote_config,service-naming,standalone,telemetry,external-logger}/**/*.spec.js\"",
-    "test:trace:core:ci": "nyc --no-clean --include \"packages/dd-trace/src/**/*.js\" -- npm run test:trace:core",
+    "test:trace:core:ci": "nyc -- npm run test:trace:core",
     "test:trace:guardrails": "mocha packages/dd-trace/test/guardrails/**/*.spec.js",
-    "test:trace:guardrails:ci": "nyc --no-clean --include \"packages/dd-trace/src/guardrails/**/*.js\" -- npm run test:trace:guardrails",
+    "test:trace:guardrails:ci": "nyc -- npm run test:trace:guardrails",
     "test:esbuild": "mocha packages/datadog-esbuild/test/**/*.spec.js",
-    "test:esbuild:ci": "nyc --no-clean --include \"packages/datadog-esbuild/test/**/*.js\" -- npm run test:esbuild",
+    "test:esbuild:ci": "nyc -- npm run test:esbuild",
     "test:instrumentations": "mocha \"packages/datadog-instrumentations/test/@(${PLUGINS}).spec.js\"",
-    "test:instrumentations:ci": "yarn services && nyc --no-clean --include \"packages/datadog-instrumentations/src/@(${PLUGINS}).js\" --include \"packages/datadog-instrumentations/src/@(${PLUGINS})/**/*.js\" -- npm run test:instrumentations",
+    "test:instrumentations:ci": "yarn services && nyc -- npm run test:instrumentations",
     "test:instrumentations:misc": "mocha packages/datadog-instrumentations/test/*/**/*.spec.js",
-    "test:instrumentations:misc:ci": "nyc --no-clean --include \"packages/datadog-instrumentations/src/**/*.js\" -- npm run test:instrumentations:misc",
+    "test:instrumentations:misc:ci": "nyc -- npm run test:instrumentations:misc",
     "test:core": "node scripts/mocha-parallel-files.js --expose-gc --timeout 30000 -- packages/datadog-core/test/**/*.spec.js",
-    "test:core:ci": "nyc --no-clean --include \"packages/datadog-core/src/**/*.js\" -- npm run test:core",
+    "test:core:ci": "nyc -- npm run test:core",
     "test:code-origin": "mocha packages/datadog-code-origin/test/**/*.spec.js",
-    "test:code-origin:ci": "nyc --no-clean --include \"packages/datadog-code-origin/**/*.js\" -- npm run test:code-origin",
+    "test:code-origin:ci": "nyc -- npm run test:code-origin",
     "test:lambda": "mocha packages/dd-trace/test/lambda/**/*.spec.js",
-    "test:lambda:ci": "nyc --no-clean --include \"packages/dd-trace/src/lambda/**/*.js\" -- npm run test:lambda",
+    "test:lambda:ci": "nyc -- npm run test:lambda",
     "test:llmobs:sdk": "mocha --exclude \"packages/dd-trace/test/llmobs/plugins/**/*.spec.js\" \"packages/dd-trace/test/llmobs/**/*.spec.js\"",
-    "test:llmobs:sdk:ci": "nyc --no-clean --include \"packages/dd-trace/src/llmobs/**/*.js\" -- npm run test:llmobs:sdk",
+    "test:llmobs:sdk:ci": "nyc -- npm run test:llmobs:sdk",
     "test:llmobs:plugins": "mocha \"packages/dd-trace/test/llmobs/plugins/@(${PLUGINS})/*.spec.js\"",
-    "test:llmobs:plugins:ci": "yarn services && nyc --no-clean --include \"packages/dd-trace/src/llmobs/**/*.js\" -- npm run test:llmobs:plugins",
+    "test:llmobs:plugins:ci": "yarn services && nyc -- npm run test:llmobs:plugins",
     "test:openfeature": "mocha packages/dd-trace/test/openfeature/**/*.spec.js",
-    "test:openfeature:ci": "nyc --no-clean --include \"packages/dd-trace/src/openfeature/**/*.js\" -- npm run test:openfeature",
+    "test:openfeature:ci": "nyc -- npm run test:openfeature",
     "test:plugins": "node --expose-gc ./node_modules/mocha/bin/mocha.js \"packages/datadog-plugin-@(${PLUGINS})/test/**/${SPEC:-*}*.spec.js\"",
-    "test:plugins:ci": "yarn services && nyc --no-clean --include \"packages/datadog-plugin-@(${PLUGINS})/src/**/*.js\" -- npm run test:plugins",
-    "test:plugins:ci:flaky": "yarn services && nyc --no-clean --include \"packages/datadog-plugin-@(${PLUGINS})/src/**/*.js\" -- npm run test:plugins -- --bail --retries 2",
+    "test:plugins:ci": "yarn services && nyc -- npm run test:plugins",
+    "test:plugins:ci:flaky": "yarn services && nyc -- npm run test:plugins -- --bail --retries 2",
     "test:plugins:upstream": "node ./packages/dd-trace/test/plugins/suite.js",
     "test:profiler": "node scripts/mocha-parallel-files.js --expose-gc --timeout 30000 -- packages/dd-trace/test/profiling/**/*.spec.js",
-    "test:profiler:ci": "nyc --no-clean --include \"packages/dd-trace/src/profiling/**/*.js\" -- npm run test:profiler",
+    "test:profiler:ci": "nyc -- npm run test:profiler",
     "test:integration": "mocha --timeout 60000 \"integration-tests/*.spec.js\"",
     "test:integration:aiguard": "mocha --timeout 60000 \"integration-tests/aiguard/*.spec.js\"",
     "test:integration:appsec": "mocha --timeout 60000 \"integration-tests/appsec/*.spec.js\"",
@@ -71,10 +71,11 @@
     "test:integration:vitest": "mocha --timeout 60000 \"integration-tests/vitest/*.spec.js\"",
     "test:integration:testopt": "mocha --timeout 120000 \"integration-tests/ci-visibility/*.spec.js\"",
     "test:integration:profiler": "mocha --timeout 180000 \"integration-tests/profiler/*.spec.js\"",
-    "test:integration:plugins": "mocha \"packages/datadog-plugin-@($(echo $PLUGINS))/test/integration-test/**/*.spec.js\"",
-    "test:unit:plugins": "mocha \"packages/datadog-instrumentations/test/@($(echo $PLUGINS)).spec.js\" \"packages/datadog-plugin-@($(echo $PLUGINS))/test/**/*.spec.js\" --exclude \"packages/datadog-plugin-@($(echo $PLUGINS))/test/integration-test/**/*.spec.js\"",
+    "test:integration:plugins": "mocha \"packages/datadog-plugin-@(${PLUGINS})/test/integration-test/**/*.spec.js\"",
+    "test:unit:plugins": "mocha \"packages/datadog-instrumentations/test/@(${PLUGINS}).spec.js\" \"packages/datadog-plugin-@(${PLUGINS})/test/**/*.spec.js\" --exclude \"packages/datadog-plugin-@(${PLUGINS})/test/integration-test/**/*.spec.js\"",
     "test:shimmer": "mocha \"packages/datadog-shimmer/test/**/*.spec.js\"",
-    "test:shimmer:ci": "nyc --no-clean --include \"packages/datadog-shimmer/src/**/*.js\" -- npm run test:shimmer",
+    "test:shimmer:ci": "nyc -- npm run test:shimmer",
+    "verify:workflow-job-names": "node scripts/verify-workflow-job-names.js",
     "verify-exercised-tests": "node scripts/verify-exercised-tests.js"
   },
   "repository": {
@@ -130,7 +131,7 @@
   ],
   "dependencies": {
     "dc-polyfill": "^0.1.10",
-    "import-in-the-middle": "2.0.3"
+    "import-in-the-middle": "^2.0.6"
   },
   "optionalDependencies": {
     "@datadog/libdatadog": "0.7.0",
@@ -138,7 +139,7 @@
     "@datadog/native-iast-taint-tracking": "4.1.0",
     "@datadog/native-metrics": "3.1.1",
     "@datadog/openfeature-node-server": "^0.3.3",
-    "@datadog/pprof": "5.13.2",
+    "@datadog/pprof": "5.13.3",
     "@datadog/wasm-js-rewriter": "5.0.1",
     "@opentelemetry/api": ">=1.0.0 <1.10.0",
     "@opentelemetry/api-logs": "<1.0.0"
@@ -150,25 +151,25 @@
     "@msgpack/msgpack": "^3.1.3",
     "@openfeature/core": "^1.8.1",
     "@openfeature/server-sdk": "~1.20.0",
-    "@stylistic/eslint-plugin": "^5.7.0",
+    "@stylistic/eslint-plugin": "^5.7.1",
     "@types/mocha": "^10.0.10",
     "@types/node": "^18.19.106",
     "@types/sinon": "^21.0.0",
-    "axios": "^1.12.2",
+    "axios": "^1.13.4",
     "benchmark": "^2.1.4",
     "body-parser": "^2.2.2",
-    "bun": "1.3.6",
+    "bun": "1.3.8",
     "eslint": "^9.39.2",
     "eslint-plugin-cypress": "^5.2.1",
     "eslint-plugin-import": "^2.32.0",
-    "eslint-plugin-jsdoc": "^62.0.0",
+    "eslint-plugin-jsdoc": "^62.5.0",
     "eslint-plugin-mocha": "^11.2.0",
     "eslint-plugin-n": "^17.23.2",
     "eslint-plugin-promise": "^7.2.1",
     "eslint-plugin-unicorn": "^62.0.0",
     "express": "^5.1.0",
     "glob": "^10.4.5",
-    "globals": "^17.0.0",
+    "globals": "^17.2.0",
     "graphql": "*",
     "jszip": "^3.10.1",
     "mocha": "^11.6.0",
@@ -179,6 +180,7 @@
     "nyc": "^17.1.0",
     "octokit": "^5.0.3",
     "opentracing": ">=0.14.7",
+    "p-limit": "^7.2.0",
     "proxyquire": "^2.1.3",
     "retry": "^0.13.1",
     "semifies": "^1.0.0",
@@ -188,6 +190,7 @@
     "typescript": "^5.9.2",
     "workerpool": "^10.0.0",
     "yaml": "^2.8.0",
+    "husky": "^9.1.7",
     "yarn-deduplicate": "^6.0.2"
   }
 }