Skip to content

chore: bump gopkg.in/DataDog/dd-trace-go.v1 from 1.37.1 to 1.38.0 #1128

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 25, 2022

Bumps gopkg.in/DataDog/dd-trace-go.v1 from 1.37.1 to 1.38.0.

Release notes

Sourced from gopkg.in/DataDog/dd-trace-go.v1's releases.

v1.38.0

This release comes with new Application Security Monitoring capabilities including sensitive data obfuscation for security events, a new set of metrics to monitor the WAF execution and security rules processing, as well as the latest version of the security rules which includes NoSQL-injection monitoring. On a side note, AppSec has been renamed to ASM (Application Security Monitoring) and will be referred to as such in the future.

On the Tracer side, the service.name tag was removed from the spans for kubernetes and the resource.name tag is now set using the context's route for gofiber/fiber.

The Profiler introduces a new CPUProfileRate option to allow users to use a specific CPU profiling rate.

Features

Tracer

  • contrib/k8s.io/client-go/kubernetes: remove the tracer service tag (#1211) (thanks @​meowfaceman)
  • contrib/gofiber/fiber.v2: resource name should use route instead of path (#1215) (thanks @​AsgerNoer)

Application Security Monitoring

  • internal/appsec: security events obfuscation (#1237)
  • internal/appsec/waf: add WAF and security rules monitoring metrics (#1225)
  • internal/appsec: update security rules to v1.3.1 including NoSQL-injection monitoring (#1244)

Profiler

  • profiler: add CPUProfileRate option (#1243)

Fixes

Tracer

  • contrib/go-chi: remove the chi.v4 package in favor of chi.v5 (#1233)
  • contrib/net/http: fix status reporting for empty replies (#1140)
  • contrib/gin-gonic/gin: fix incomplete examples (#1212) (thanks @​ajones)

Profiler

  • ddtrace/tracer: update profile endpoint label when SetTag updates resource name for a span (#1203)

Full Changelog: DataDog/dd-trace-go@v1.37.1...v1.38.0

Commits
  • 243d731 internal/appsec/waf: metrics fixes (#1247)
  • e2c7741 internal/appsec/waf: fix the lifetime of waf values (#1245)
  • e222755 appsec/config: default obfuscator config update (#1246)
  • 636e53f Setup Code Scanning on dd-trace-go (#1138)
  • 16ce00c internal/log: fix flaky test (#1193)
  • ebe36de internal/telemetry: fix flaky client test (#1209)
  • 09021bd ddtrace/tracer, internal/traceprof/traceproftest: update profile endpoint lab...
  • b81e6aa contrib/net/http: fix status reporting for empty replies (#1140)
  • 3e453c4 profiler: add CPUProfileRate option (#1243)
  • c83f6f0 internal/appsec: security rules v1.3.1 (#1244)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [gopkg.in/DataDog/dd-trace-go.v1](https://github.com/DataDog/dd-trace-go) from 1.37.1 to 1.38.0.
- [Release notes](https://github.com/DataDog/dd-trace-go/releases)
- [Commits](DataDog/dd-trace-go@v1.37.1...v1.38.0)

---
updated-dependencies:
- dependency-name: gopkg.in/DataDog/dd-trace-go.v1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@kylecarbs kylecarbs merged commit 5575e3c into main Apr 25, 2022
@kylecarbs kylecarbs deleted the dependabot/go_modules/gopkg.in/DataDog/dd-trace-go.v1-1.38.0 branch April 25, 2022 11:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant