Update capabilities tagging to use versioning #8540

daniel-mohedano · 2025-03-12T11:39:45Z

What Does This Do

Update the implementation of capabilities tagging to set the value as the "version" of the capability, instead of "true" or "false" depending on whether the feature is enabled or not.

For now all capabilities have as version "1" except for _dd.library_capabilities.test_management.attempt_to_fix which is version "2". This indicates that in the Test Management request we are also sending the commit message.

Motivation

The test management remediation flow will use the commit message for the attempt to fix workflow, and we need to indicate whether this is supported or not.

Contributor Checklist

Format the title according the contribution guidelines
Assign the type: and (comp: or inst:) labels in addition to any usefull labels
Don't use close, fix or any linking keywords when referencing an issue.
Use solves instead, and assign the PR milestone to the issue
Update the public documentation in case of new configuration flag or behavior

Jira ticket: SDTEST-1710

pr-commenter · 2025-03-12T11:51:00Z

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	daniel.mohedano/library-capabilities-versioning
git_commit_date	1741723291	1741781833
git_commit_sha	`11015ee`	`f26a285`
release_version	1.48.0-SNAPSHOT~11015eec16	1.48.0-SNAPSHOT~f26a285423

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1741784304	1741784304
ci_job_id	844147657	844147657
ci_pipeline_id	58547279	58547279
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-99grvqzx-project-304-concurrent-0-8v180kp3 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-99grvqzx-project-304-concurrent-0-8v180kp3 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module	Agent	Agent
parent	None	None
variant	iast	iast

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 58 metrics, 5 unstable metrics.

Startup time reports for petclinic

gantt title petclinic - global startup overhead: candidate=1.48.0-SNAPSHOT~f26a285423, baseline=1.48.0-SNAPSHOT~11015eec16 dateFormat X axisFormat %s section tracing Agent [baseline] (1.04 s) : 0, 1040482 Total [baseline] (10.535 s) : 0, 10535240 Agent [candidate] (1.049 s) : 0, 1049159 Total [candidate] (10.438 s) : 0, 10437754 section appsec Agent [baseline] (1.186 s) : 0, 1185650 Total [baseline] (10.731 s) : 0, 10730503 Agent [candidate] (1.188 s) : 0, 1187977 Total [candidate] (10.713 s) : 0, 10712947 section iast Agent [baseline] (1.172 s) : 0, 1171505 Total [baseline] (10.986 s) : 0, 10986391 Agent [candidate] (1.172 s) : 0, 1171911 Total [candidate] (10.982 s) : 0, 10982130 section profiling Agent [baseline] (1.264 s) : 0, 1263747 Total [baseline] (10.919 s) : 0, 10918776 Agent [candidate] (1.257 s) : 0, 1256862 Total [candidate] (10.786 s) : 0, 10785846

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.04 s	-
Agent	appsec	1.186 s	145.168 ms (14.0%)
Agent	iast	1.172 s	131.023 ms (12.6%)
Agent	profiling	1.264 s	223.266 ms (21.5%)
Total	tracing	10.535 s	-
Total	appsec	10.731 s	195.262 ms (1.9%)
Total	iast	10.986 s	451.151 ms (4.3%)
Total	profiling	10.919 s	383.535 ms (3.6%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.049 s	-
Agent	appsec	1.188 s	138.817 ms (13.2%)
Agent	iast	1.172 s	122.751 ms (11.7%)
Agent	profiling	1.257 s	207.703 ms (19.8%)
Total	tracing	10.438 s	-
Total	appsec	10.713 s	275.193 ms (2.6%)
Total	iast	10.982 s	544.376 ms (5.2%)
Total	profiling	10.786 s	348.092 ms (3.3%)

gantt title petclinic - break down per module: candidate=1.48.0-SNAPSHOT~f26a285423, baseline=1.48.0-SNAPSHOT~11015eec16 dateFormat X axisFormat %s section tracing BytebuddyAgent [baseline] (717.556 ms) : 0, 717556 BytebuddyAgent [candidate] (724.563 ms) : 0, 724563 GlobalTracer [baseline] (240.661 ms) : 0, 240661 GlobalTracer [candidate] (240.339 ms) : 0, 240339 AppSec [baseline] (55.349 ms) : 0, 55349 AppSec [candidate] (55.08 ms) : 0, 55080 Remote Config [baseline] (698.294 µs) : 0, 698 Remote Config [candidate] (694.707 µs) : 0, 695 Telemetry [baseline] (11.402 ms) : 0, 11402 Telemetry [candidate] (13.448 ms) : 0, 13448 section appsec BytebuddyAgent [baseline] (737.253 ms) : 0, 737253 BytebuddyAgent [candidate] (740.157 ms) : 0, 740157 GlobalTracer [baseline] (237.34 ms) : 0, 237340 GlobalTracer [candidate] (237.14 ms) : 0, 237140 AppSec [baseline] (176.301 ms) : 0, 176301 AppSec [candidate] (176.098 ms) : 0, 176098 Remote Config [baseline] (667.917 µs) : 0, 668 Remote Config [candidate] (661.34 µs) : 0, 661 Telemetry [baseline] (8.338 ms) : 0, 8338 Telemetry [candidate] (8.312 ms) : 0, 8312 IAST [baseline] (21.824 ms) : 0, 21824 IAST [candidate] (21.337 ms) : 0, 21337 section iast BytebuddyAgent [baseline] (837.933 ms) : 0, 837933 BytebuddyAgent [candidate] (837.901 ms) : 0, 837901 GlobalTracer [baseline] (230.45 ms) : 0, 230450 GlobalTracer [candidate] (230.723 ms) : 0, 230723 AppSec [baseline] (56.137 ms) : 0, 56137 AppSec [candidate] (56.336 ms) : 0, 56336 Remote Config [baseline] (613.506 µs) : 0, 614 Remote Config [candidate] (620.45 µs) : 0, 620 Telemetry [baseline] (8.733 ms) : 0, 8733 Telemetry [candidate] (8.684 ms) : 0, 8684 IAST [baseline] (22.746 ms) : 0, 22746 IAST [candidate] (22.766 ms) : 0, 22766 section profiling ProfilingAgent [baseline] (97.083 ms) : 0, 97083 ProfilingAgent [candidate] (95.98 ms) : 0, 95980 BytebuddyAgent [baseline] (709.453 ms) : 0, 709453 BytebuddyAgent [candidate] (708.305 ms) : 0, 708305 GlobalTracer [baseline] (351.739 ms) : 0, 351739 GlobalTracer [candidate] (348.843 ms) : 0, 348843 AppSec [baseline] (55.457 ms) : 0, 55457 AppSec [candidate] (54.001 ms) : 0, 54001 Remote Config [baseline] (675.613 µs) : 0, 676 Remote Config [candidate] (663.6 µs) : 0, 664 Telemetry [baseline] (8.965 ms) : 0, 8965 Telemetry [candidate] (8.891 ms) : 0, 8891 Profiling [baseline] (97.108 ms) : 0, 97108 Profiling [candidate] (96.004 ms) : 0, 96004

Startup time reports for insecure-bank

gantt title insecure-bank - global startup overhead: candidate=1.48.0-SNAPSHOT~f26a285423, baseline=1.48.0-SNAPSHOT~11015eec16 dateFormat X axisFormat %s section tracing Agent [baseline] (1.048 s) : 0, 1047927 Total [baseline] (8.738 s) : 0, 8738494 Agent [candidate] (1.043 s) : 0, 1042597 Total [candidate] (8.666 s) : 0, 8665668 section iast Agent [baseline] (1.181 s) : 0, 1180548 Total [baseline] (9.242 s) : 0, 9242180 Agent [candidate] (1.169 s) : 0, 1168782 Total [candidate] (9.192 s) : 0, 9192098 section iast_HARDCODED_SECRET_DISABLED Agent [baseline] (1.171 s) : 0, 1170899 Total [baseline] (9.168 s) : 0, 9168227 Agent [candidate] (1.182 s) : 0, 1182163 Total [candidate] (9.179 s) : 0, 9178963 section iast_TELEMETRY_OFF Agent [baseline] (1.165 s) : 0, 1164879 Total [baseline] (9.219 s) : 0, 9218711 Agent [candidate] (1.182 s) : 0, 1182125 Total [candidate] (9.237 s) : 0, 9236582

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.048 s	-
Agent	iast	1.181 s	132.621 ms (12.7%)
Agent	iast_HARDCODED_SECRET_DISABLED	1.171 s	122.972 ms (11.7%)
Agent	iast_TELEMETRY_OFF	1.165 s	116.952 ms (11.2%)
Total	tracing	8.738 s	-
Total	iast	9.242 s	503.685 ms (5.8%)
Total	iast_HARDCODED_SECRET_DISABLED	9.168 s	429.733 ms (4.9%)
Total	iast_TELEMETRY_OFF	9.219 s	480.217 ms (5.5%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.043 s	-
Agent	iast	1.169 s	126.185 ms (12.1%)
Agent	iast_HARDCODED_SECRET_DISABLED	1.182 s	139.566 ms (13.4%)
Agent	iast_TELEMETRY_OFF	1.182 s	139.528 ms (13.4%)
Total	tracing	8.666 s	-
Total	iast	9.192 s	526.43 ms (6.1%)
Total	iast_HARDCODED_SECRET_DISABLED	9.179 s	513.295 ms (5.9%)
Total	iast_TELEMETRY_OFF	9.237 s	570.914 ms (6.6%)

gantt title insecure-bank - break down per module: candidate=1.48.0-SNAPSHOT~f26a285423, baseline=1.48.0-SNAPSHOT~11015eec16 dateFormat X axisFormat %s section tracing BytebuddyAgent [baseline] (722.526 ms) : 0, 722526 BytebuddyAgent [candidate] (719.876 ms) : 0, 719876 GlobalTracer [baseline] (241.194 ms) : 0, 241194 GlobalTracer [candidate] (239.857 ms) : 0, 239857 AppSec [baseline] (55.641 ms) : 0, 55641 AppSec [candidate] (55.165 ms) : 0, 55165 Remote Config [baseline] (695.248 µs) : 0, 695 Remote Config [candidate] (699.469 µs) : 0, 699 Telemetry [baseline] (12.914 ms) : 0, 12914 Telemetry [candidate] (12.16 ms) : 0, 12160 section iast BytebuddyAgent [baseline] (844.966 ms) : 0, 844966 BytebuddyAgent [candidate] (835.682 ms) : 0, 835682 GlobalTracer [baseline] (231.526 ms) : 0, 231526 GlobalTracer [candidate] (229.932 ms) : 0, 229932 IAST [baseline] (23.151 ms) : 0, 23151 IAST [candidate] (23.389 ms) : 0, 23389 AppSec [baseline] (56.637 ms) : 0, 56637 AppSec [candidate] (55.67 ms) : 0, 55670 Remote Config [baseline] (610.014 µs) : 0, 610 Remote Config [candidate] (608.981 µs) : 0, 609 Telemetry [baseline] (8.707 ms) : 0, 8707 Telemetry [candidate] (8.672 ms) : 0, 8672 section iast_HARDCODED_SECRET_DISABLED BytebuddyAgent [baseline] (836.946 ms) : 0, 836946 BytebuddyAgent [candidate] (845.321 ms) : 0, 845321 GlobalTracer [baseline] (230.721 ms) : 0, 230721 GlobalTracer [candidate] (231.923 ms) : 0, 231923 IAST [baseline] (22.695 ms) : 0, 22695 IAST [candidate] (23.315 ms) : 0, 23315 AppSec [baseline] (56.406 ms) : 0, 56406 AppSec [candidate] (57.063 ms) : 0, 57063 Remote Config [baseline] (601.687 µs) : 0, 602 Remote Config [candidate] (633.865 µs) : 0, 634 Telemetry [baseline] (8.634 ms) : 0, 8634 Telemetry [candidate] (8.862 ms) : 0, 8862 section iast_TELEMETRY_OFF BytebuddyAgent [baseline] (832.338 ms) : 0, 832338 BytebuddyAgent [candidate] (845.717 ms) : 0, 845717 GlobalTracer [baseline] (229.473 ms) : 0, 229473 GlobalTracer [candidate] (231.879 ms) : 0, 231879 IAST [baseline] (22.203 ms) : 0, 22203 IAST [candidate] (22.65 ms) : 0, 22650 AppSec [baseline] (56.846 ms) : 0, 56846 AppSec [candidate] (57.45 ms) : 0, 57450 Remote Config [baseline] (614.085 µs) : 0, 614 Remote Config [candidate] (633.725 µs) : 0, 634 Telemetry [baseline] (8.553 ms) : 0, 8553 Telemetry [candidate] (8.733 ms) : 0, 8733

Load

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
end_time	2025-03-12T12:28:46	2025-03-12T12:36:30
git_branch	master	daniel.mohedano/library-capabilities-versioning
git_commit_date	1741723291	1741781833
git_commit_sha	`11015ee`	`f26a285`
release_version	1.48.0-SNAPSHOT~11015eec16	1.48.0-SNAPSHOT~f26a285423
start_time	2025-03-12T12:28:32	2025-03-12T12:36:16

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1741783386	1741783386
ci_job_id	844147658	844147658
ci_pipeline_id	58547279	58547279
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-99grvqzx-project-304-concurrent-1-r84uoiy1 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-99grvqzx-project-304-concurrent-1-r84uoiy1 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
variant	iast	iast

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 13 metrics, 17 unstable metrics.

Request duration reports for petclinic

gantt title petclinic - request duration [CI 0.99] : candidate=1.48.0-SNAPSHOT~f26a285423, baseline=1.48.0-SNAPSHOT~11015eec16 dateFormat X axisFormat %s section baseline no_agent (1.357 ms) : 1338, 1377 . : milestone, 1357, appsec (1.724 ms) : 1700, 1748 . : milestone, 1724, appsec_no_iast (1.733 ms) : 1708, 1757 . : milestone, 1733, code_origins (1.682 ms) : 1656, 1709 . : milestone, 1682, iast (1.53 ms) : 1505, 1554 . : milestone, 1530, profiling (1.518 ms) : 1493, 1544 . : milestone, 1518, tracing (1.508 ms) : 1484, 1533 . : milestone, 1508, section candidate no_agent (1.359 ms) : 1339, 1379 . : milestone, 1359, appsec (1.727 ms) : 1703, 1751 . : milestone, 1727, appsec_no_iast (1.727 ms) : 1701, 1752 . : milestone, 1727, code_origins (1.667 ms) : 1640, 1695 . : milestone, 1667, iast (1.501 ms) : 1477, 1526 . : milestone, 1501, profiling (1.549 ms) : 1524, 1574 . : milestone, 1549, tracing (1.472 ms) : 1447, 1497 . : milestone, 1472,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.357 ms [1.338 ms, 1.377 ms]	-
appsec	1.724 ms [1.7 ms, 1.748 ms]	366.487 µs (27.0%)
appsec_no_iast	1.733 ms [1.708 ms, 1.757 ms]	375.342 µs (27.7%)
code_origins	1.682 ms [1.656 ms, 1.709 ms]	324.912 µs (23.9%)
iast	1.53 ms [1.505 ms, 1.554 ms]	172.392 µs (12.7%)
profiling	1.518 ms [1.493 ms, 1.544 ms]	161.093 µs (11.9%)
tracing	1.508 ms [1.484 ms, 1.533 ms]	150.909 µs (11.1%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.359 ms [1.339 ms, 1.379 ms]	-
appsec	1.727 ms [1.703 ms, 1.751 ms]	367.841 µs (27.1%)
appsec_no_iast	1.727 ms [1.701 ms, 1.752 ms]	367.763 µs (27.1%)
code_origins	1.667 ms [1.64 ms, 1.695 ms]	308.376 µs (22.7%)
iast	1.501 ms [1.477 ms, 1.526 ms]	142.561 µs (10.5%)
profiling	1.549 ms [1.524 ms, 1.574 ms]	190.159 µs (14.0%)
tracing	1.472 ms [1.447 ms, 1.497 ms]	113.176 µs (8.3%)

Request duration reports for insecure-bank

gantt title insecure-bank - request duration [CI 0.99] : candidate=1.48.0-SNAPSHOT~f26a285423, baseline=1.48.0-SNAPSHOT~11015eec16 dateFormat X axisFormat %s section baseline no_agent (381.04 µs) : 361, 401 . : milestone, 381, iast (501.323 µs) : 480, 523 . : milestone, 501, iast_FULL (714.415 µs) : 692, 737 . : milestone, 714, iast_GLOBAL (563.063 µs) : 540, 586 . : milestone, 563, iast_HARDCODED_SECRET_DISABLED (514.267 µs) : 492, 536 . : milestone, 514, iast_INACTIVE (459.474 µs) : 438, 481 . : milestone, 459, iast_TELEMETRY_OFF (495.075 µs) : 474, 517 . : milestone, 495, tracing (456.651 µs) : 435, 479 . : milestone, 457, section candidate no_agent (382.099 µs) : 362, 402 . : milestone, 382, iast (509.379 µs) : 488, 531 . : milestone, 509, iast_FULL (724.868 µs) : 703, 747 . : milestone, 725, iast_GLOBAL (554.566 µs) : 532, 577 . : milestone, 555, iast_HARDCODED_SECRET_DISABLED (514.153 µs) : 493, 536 . : milestone, 514, iast_INACTIVE (455.13 µs) : 434, 476 . : milestone, 455, iast_TELEMETRY_OFF (497.938 µs) : 476, 520 . : milestone, 498, tracing (457.031 µs) : 436, 479 . : milestone, 457,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	381.04 µs [361.066 µs, 401.013 µs]	-
iast	501.323 µs [479.877 µs, 522.769 µs]	120.283 µs (31.6%)
iast_FULL	714.415 µs [691.746 µs, 737.084 µs]	333.375 µs (87.5%)
iast_GLOBAL	563.063 µs [539.769 µs, 586.357 µs]	182.024 µs (47.8%)
iast_HARDCODED_SECRET_DISABLED	514.267 µs [492.231 µs, 536.303 µs]	133.227 µs (35.0%)
iast_INACTIVE	459.474 µs [438.066 µs, 480.883 µs]	78.435 µs (20.6%)
iast_TELEMETRY_OFF	495.075 µs [473.573 µs, 516.576 µs]	114.035 µs (29.9%)
tracing	456.651 µs [434.7 µs, 478.603 µs]	75.612 µs (19.8%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	382.099 µs [362.405 µs, 401.794 µs]	-
iast	509.379 µs [487.545 µs, 531.214 µs]	127.28 µs (33.3%)
iast_FULL	724.868 µs [702.932 µs, 746.805 µs]	342.769 µs (89.7%)
iast_GLOBAL	554.566 µs [531.884 µs, 577.248 µs]	172.467 µs (45.1%)
iast_HARDCODED_SECRET_DISABLED	514.153 µs [492.514 µs, 535.792 µs]	132.054 µs (34.6%)
iast_INACTIVE	455.13 µs [434.103 µs, 476.157 µs]	73.031 µs (19.1%)
iast_TELEMETRY_OFF	497.938 µs [476.168 µs, 519.708 µs]	115.839 µs (30.3%)
tracing	457.031 µs [435.519 µs, 478.543 µs]	74.932 µs (19.6%)

Dacapo

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	daniel.mohedano/library-capabilities-versioning
git_commit_date	1741723291	1741781833
git_commit_sha	`11015ee`	`f26a285`
release_version	1.48.0-SNAPSHOT~11015eec16	1.48.0-SNAPSHOT~f26a285423

See matching parameters

	Baseline	Candidate
application	biojava	biojava
ci_job_date	1741783742	1741783742
ci_job_id	844147659	844147659
ci_pipeline_id	58547279	58547279
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-titz-rmh-project-304-concurrent-2-o0nx0mxd 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-titz-rmh-project-304-concurrent-2-o0nx0mxd 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
variant	appsec	appsec

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics.

Execution time for tomcat

gantt title tomcat - execution time [CI 0.99] : candidate=1.48.0-SNAPSHOT~f26a285423, baseline=1.48.0-SNAPSHOT~11015eec16 dateFormat X axisFormat %s section baseline no_agent (1.486 ms) : 1474, 1497 . : milestone, 1486, appsec (2.378 ms) : 2332, 2423 . : milestone, 2378, iast (2.149 ms) : 2092, 2206 . : milestone, 2149, iast_GLOBAL (2.194 ms) : 2137, 2252 . : milestone, 2194, profiling (2.01 ms) : 1964, 2057 . : milestone, 2010, tracing (1.984 ms) : 1940, 2028 . : milestone, 1984, section candidate no_agent (1.476 ms) : 1464, 1487 . : milestone, 1476, appsec (2.368 ms) : 2323, 2414 . : milestone, 2368, iast (2.143 ms) : 2086, 2200 . : milestone, 2143, iast_GLOBAL (2.188 ms) : 2131, 2245 . : milestone, 2188, profiling (1.989 ms) : 1944, 2035 . : milestone, 1989, tracing (1.986 ms) : 1942, 2030 . : milestone, 1986,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.486 ms [1.474 ms, 1.497 ms]	-
appsec	2.378 ms [2.332 ms, 2.423 ms]	891.711 µs (60.0%)
iast	2.149 ms [2.092 ms, 2.206 ms]	663.23 µs (44.6%)
iast_GLOBAL	2.194 ms [2.137 ms, 2.252 ms]	708.652 µs (47.7%)
profiling	2.01 ms [1.964 ms, 2.057 ms]	524.69 µs (35.3%)
tracing	1.984 ms [1.94 ms, 2.028 ms]	498.508 µs (33.6%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.476 ms [1.464 ms, 1.487 ms]	-
appsec	2.368 ms [2.323 ms, 2.414 ms]	892.686 µs (60.5%)
iast	2.143 ms [2.086 ms, 2.2 ms]	667.435 µs (45.2%)
iast_GLOBAL	2.188 ms [2.131 ms, 2.245 ms]	712.263 µs (48.3%)
profiling	1.989 ms [1.944 ms, 2.035 ms]	513.841 µs (34.8%)
tracing	1.986 ms [1.942 ms, 2.03 ms]	510.808 µs (34.6%)

Execution time for biojava

gantt title biojava - execution time [CI 0.99] : candidate=1.48.0-SNAPSHOT~f26a285423, baseline=1.48.0-SNAPSHOT~11015eec16 dateFormat X axisFormat %s section baseline no_agent (14.711 s) : 14711000, 14711000 . : milestone, 14711000, appsec (15.157 s) : 15157000, 15157000 . : milestone, 15157000, iast (18.6 s) : 18600000, 18600000 . : milestone, 18600000, iast_GLOBAL (18.112 s) : 18112000, 18112000 . : milestone, 18112000, profiling (14.924 s) : 14924000, 14924000 . : milestone, 14924000, tracing (14.906 s) : 14906000, 14906000 . : milestone, 14906000, section candidate no_agent (15.493 s) : 15493000, 15493000 . : milestone, 15493000, appsec (15.067 s) : 15067000, 15067000 . : milestone, 15067000, iast (18.388 s) : 18388000, 18388000 . : milestone, 18388000, iast_GLOBAL (18.217 s) : 18217000, 18217000 . : milestone, 18217000, profiling (15.556 s) : 15556000, 15556000 . : milestone, 15556000, tracing (14.983 s) : 14983000, 14983000 . : milestone, 14983000,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	14.711 s [14.711 s, 14.711 s]	-
appsec	15.157 s [15.157 s, 15.157 s]	446.0 ms (3.0%)
iast	18.6 s [18.6 s, 18.6 s]	3.889 s (26.4%)
iast_GLOBAL	18.112 s [18.112 s, 18.112 s]	3.401 s (23.1%)
profiling	14.924 s [14.924 s, 14.924 s]	213.0 ms (1.4%)
tracing	14.906 s [14.906 s, 14.906 s]	195.0 ms (1.3%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.493 s [15.493 s, 15.493 s]	-
appsec	15.067 s [15.067 s, 15.067 s]	-426.0 ms (-2.7%)
iast	18.388 s [18.388 s, 18.388 s]	2.895 s (18.7%)
iast_GLOBAL	18.217 s [18.217 s, 18.217 s]	2.724 s (17.6%)
profiling	15.556 s [15.556 s, 15.556 s]	63.0 ms (0.4%)
tracing	14.983 s [14.983 s, 14.983 s]	-510.0 ms (-3.3%)

| Package | Type | Package file | Manager | Update | Change | |---|---|---|---|---|---| | org.flywaydb.flyway | plugin | misk/gradle/libs.versions.toml | gradle | minor | `11.6.0` -> `11.7.0` | | [com.squareup.okio:okio-fakefilesystem](https://github.com/square/okio) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `3.10.2` -> `3.11.0` | | [com.squareup.okio:okio](https://github.com/square/okio) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `3.10.2` -> `3.11.0` | | [com.autonomousapps.dependency-analysis](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin) | plugin | misk/gradle/libs.versions.toml | gradle | minor | `2.15.0` -> `2.16.0` | | [com.datadoghq:dd-trace-api](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `1.47.3` -> `1.48.1` | | [com.datadoghq:dd-trace-ot](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `1.47.3` -> `1.48.1` | | [software.amazon.awssdk:sdk-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:sqs](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:dynamodb-enhanced](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:dynamodb](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:aws-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:bom](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:auth](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | --- ### Release Notes <details> <summary>square/okio (com.squareup.okio:okio-fakefilesystem)</summary> ### [`v3.11.0`](https://github.com/square/okio/blob/HEAD/CHANGELOG.md#Version-3110) *2025-04-09* - Fix: Clear the deflater's byte array reference - New: Faster implementation of `String.decodeHex()` on Kotlin/JS. - New: Declare `EXACTLY_ONCE` execution for blocks like `Closeable.use {}` and `FileSystem.read {}`. - Upgrade: \[Kotlin 2.1.20]\[kotlin\_2\_1\_20]. </details> <details> <summary>autonomousapps/dependency-analysis-android-gradle-plugin (com.autonomousapps.dependency-analysis)</summary> ### [`v2.16.0`](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin/blob/HEAD/CHANGELOG.md#Version-2160) - \[Feat]: support `com.android.test` projects. - \[Feat]: support typesafe project accessors with opt-in. ```kotlin dependencyAnalysis { useTypesafeProjectAccessors(true) // false by default } ``` </details> <details> <summary>datadog/dd-trace-java (com.datadoghq:dd-trace-api)</summary> ### [`v1.48.1`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.48.1): 1.48.1 ### Components #### Tracer internal logging - 🐛 Remove print line causing unnecessary logs ([#8687](DataDog/dd-trace-java#8687) - [@sarahchen6](https://github.com/sarahchen6)) ### [`v1.48.0`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.48.0): 1.48.0 ### Known Bugs > \[!NOTE] > If you are experiencing issues with spamming timeout logs, please update to the [latest version](https://github.com/DataDog/dd-trace-java/releases/latest) or set [JDK_SOCKET_ENABLED](https://github.com/DataDog/dd-trace-java/blob/33fc3c9a9b7cda3beda88b8b3e5224ae2b10764a/dd-trace-api/src/main/java/datadog/trace/api/config/GeneralConfig.java#L98) to false. ### Components #### Application Security Management (IAST) - ✨ Fix vulnerability location org.jose4j.lang.HashUtil ([#8610](DataDog/dd-trace-java#8610) - [@jandro996](https://github.com/jandro996)) - ✨ Fix weak randomness in oracle.ucp.util.OpaqueString ([#8609](DataDog/dd-trace-java#8609) - [@jandro996](https://github.com/jandro996)) - ✨ Fix weak hash false positive in oracle.security.o5logon.O5Logon ([#8608](DataDog/dd-trace-java#8608) - [@jandro996](https://github.com/jandro996)) - 🐛 Prevent before callsites targeting constructors in super calls ([#8549](DataDog/dd-trace-java#8549) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### Application Security Management (WAF) - ✨ Update login events public SDK to V2 ([#8620](DataDog/dd-trace-java#8620) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - 🐛 Send RASP LFI capability only when AppSec is statically enabled ([#8573](DataDog/dd-trace-java#8573) - [@jandro996](https://github.com/jandro996)) - ✨ Improve detection of missing request end events ([#8510](DataDog/dd-trace-java#8510) - [@smola](https://github.com/smola)) - 🧹 Remove remote configuration for API Security sampling rate ([#8486](DataDog/dd-trace-java#8486) - [@smola](https://github.com/smola)) - ✨ Add setUser to user monitoring SDK ([#8482](DataDog/dd-trace-java#8482) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Add missing address for signup event ([#8469](DataDog/dd-trace-java#8469) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Allow login events SDK to be used with appsec disabled ([#8464](DataDog/dd-trace-java#8464) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Add support for endpoint discovery in spring mvc ([#8352](DataDog/dd-trace-java#8352) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ New API Security sampling algorithm ([#8178](DataDog/dd-trace-java#8178) - [@ValentinZakharov](https://github.com/ValentinZakharov)) #### Build & Tooling - ✨ Add buffer size customizability to JDK UDS support ([#8629](DataDog/dd-trace-java#8629) - [@sarahchen6](https://github.com/sarahchen6)) - ✨ Add JDK built-in support for UDS on Java 16+ ([#8314](DataDog/dd-trace-java#8314) - [@sarahchen6](https://github.com/sarahchen6)) #### Configuration at Runtime - 🐛 Send RASP LFI capability only when AppSec is statically enabled ([#8573](DataDog/dd-trace-java#8573) - [@jandro996](https://github.com/jandro996)) #### Continuous Integration Visibility - 🐛 Prevent double reporting of Scalatest events when using SBT with test forking ([#8682](DataDog/dd-trace-java#8682) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - 🐛 Shutdown CI Visibility test event handlers before tracer ([#8677](DataDog/dd-trace-java#8677) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - 🐛 Do not apply JUnit 4 instrumentation to MUnit runners ([#8675](DataDog/dd-trace-java#8675), [#8683](DataDog/dd-trace-java#8683) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Remove error log when source path resolution fails on isModified check ([#8663](DataDog/dd-trace-java#8663) - [@daniel-mohedano](https://github.com/daniel-mohedano)) - ✨ Implement tests reordering for JUnit 4 ([#8650](DataDog/dd-trace-java#8650) - [@daniel-mohedano](https://github.com/daniel-mohedano)) - 🐛 Set default Attempt to Fix retries if none provided from the backend ([#8615](DataDog/dd-trace-java#8615) - [@daniel-mohedano](https://github.com/daniel-mohedano)) - ✨ Allow to manually set PR info ([#8566](DataDog/dd-trace-java#8566) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - 🐛 Fix Test Optimization init when repo root cannot be determined ([#8533](DataDog/dd-trace-java#8533) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Add capabilities tagging ([#8499](DataDog/dd-trace-java#8499), [#8540](DataDog/dd-trace-java#8540) - [@daniel-mohedano](https://github.com/daniel-mohedano)) #### Crash tracking - 🐛 Remove dependency on bash from crash/oome uploder scripts ([#8652](DataDog/dd-trace-java#8652) - [@jbachorik](https://github.com/jbachorik)) #### Data Streams Monitoring - ✨ e2e pipeline configuration when data jobs is enabled ([#8553](DataDog/dd-trace-java#8553) - [@kr-igor](https://github.com/kr-igor)) #### Dynamic Instrumentation - 🐛 Fix In-Product when config is empty ([#8679](DataDog/dd-trace-java#8679) - [@jpbempel](https://github.com/jpbempel)) - ✨ Add support for filtering shaded third-party libs ([#8612](DataDog/dd-trace-java#8612) - [@jpbempel](https://github.com/jpbempel)) - ✨ Add In-Product Enablement ([#8587](DataDog/dd-trace-java#8587) - [@jpbempel](https://github.com/jpbempel)) - ✨⚡ Reduce footprint of SourceFile tracking ([#8524](DataDog/dd-trace-java#8524) - [@jpbempel](https://github.com/jpbempel)) - ✨⚡ Optimize the SourceFile tracking ([#8520](DataDog/dd-trace-java#8520) - [@jpbempel](https://github.com/jpbempel)) #### OpenTracing - 🧹 Remove activeScope() use in OpenTracing shim ([#8478](DataDog/dd-trace-java#8478) - [@mcculls](https://github.com/mcculls)) #### Profiling - ✨ Add profiler env check command to AgentCLI ([#8671](DataDog/dd-trace-java#8671) - [@jbachorik](https://github.com/jbachorik)) - ✨ Bump ddprof to 1.23.0 ([#8668](DataDog/dd-trace-java#8668) - [@jbachorik](https://github.com/jbachorik)) - Fix a crash related to ElfParser::loadSymbolTable ([#191](DataDog/dd-trace-java#191)) by [@yanglong1010](https://github.com/yanglong1010) in DataDog/java-profiler#192 - Unwind String.indexOf intrinsic on AArch64 by [@MattAlp](https://github.com/MattAlp) in DataDog/java-profiler#193 - Fix Java 24 support by [@jbachorik](https://github.com/jbachorik) in DataDog/java-profiler#194 - A set of fixes related to clang, aarch64 and musl pecularities of vmstructs stack unwinder by [@jbachorik](https://github.com/jbachorik) in DataDog/java-profiler#199 - 🐛 Remove process information from JFR recording ([#8661](DataDog/dd-trace-java#8661) - [@r1viollet](https://github.com/r1viollet)) - 🐛 Make TempLocationManager USER aware ([#8605](DataDog/dd-trace-java#8605) - [@jbachorik](https://github.com/jbachorik)) - ✨ Extract git tags from embedded git.properties and datadog_git.properties ([#8561](DataDog/dd-trace-java#8561) - [@wmouchere](https://github.com/wmouchere)) #### Telemetry - 🐛 Fix appsec.rasp.error and appsec.waf.error telemetry metrics ([#8624](DataDog/dd-trace-java#8624) - [@jandro996](https://github.com/jandro996)) - ✨ Create metric: appsec.rasp.rule.skipped ([#8618](DataDog/dd-trace-java#8618) - [@jandro996](https://github.com/jandro996)) - ✨ Extract git tags from embedded git.properties and datadog_git.properties ([#8561](DataDog/dd-trace-java#8561) - [@wmouchere](https://github.com/wmouchere)) #### Testing - 🧹 Simplify ssi tests one-pipeline ([#8558](DataDog/dd-trace-java#8558) - [@robertomonteromiguel](https://github.com/robertomonteromiguel)) - ✨ Add smoke tests for java's concurrent API ([#8438](DataDog/dd-trace-java#8438) - [@sarahchen6](https://github.com/sarahchen6)) #### Trace context propagation - ✨ Adding Support for `TRACE_PROPAGATION_BEHAVIOR_EXTRACT` ([#8535](DataDog/dd-trace-java#8535) - [@mhlidd](https://github.com/mhlidd)) #### Tracer core - 🐛 Ensure shaded helpers have unique names ([#8559](DataDog/dd-trace-java#8559) - [@amarziali](https://github.com/amarziali)) - ✨ Support common config sources for user-provided git info ([#8547](DataDog/dd-trace-java#8547) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Make the default config sources more robust when a security manager is installed ([#8544](DataDog/dd-trace-java#8544) - [@mcculls](https://github.com/mcculls)) - ✨ Support targeting services with configurations in stable configuration file ([#8526](DataDog/dd-trace-java#8526) - [@mtoffl01](https://github.com/mtoffl01)) - ✨ Add new parser for `DD_TAGS` and prioritizing `DD_SERVICE` ([#8296](DataDog/dd-trace-java#8296) - [@mhlidd](https://github.com/mhlidd)) #### Tracer internal logging - 🐛 Add missing debug log for the cloudPayloadTaggingServices config ([#8600](DataDog/dd-trace-java#8600) - [@ygree](https://github.com/ygree)) - ✨ Add the possibility to output the logs of the Java tracer in JSON ([#8083](DataDog/dd-trace-java#8083) - [@cecile75](https://github.com/cecile75)) #### Tracer public API - ✨ Introducing `DD_TRACE_EXPERIMENTAL_FEATURES_ENABLED` Config ([#8536](DataDog/dd-trace-java#8536) - [@mhlidd](https://github.com/mhlidd)) - ✨ Config Consistency Round 2 ([#8489](DataDog/dd-trace-java#8489) - [@mhlidd](https://github.com/mhlidd)) ### Instrumentations #### - 🐛 Fix NPE in getMdcCopy of LoggingEventInstrumentation ([#8599](DataDog/dd-trace-java#8599) - [@ygree](https://github.com/ygree)) #### Apache Spark instrumentation - ✨ Instrument Runtime.exit() to finish spark application spans ([#8572](DataDog/dd-trace-java#8572) - [@paul-laffon-dd](https://github.com/paul-laffon-dd)) - ✨ Configure OpenLineage if present in Spark instrumentation ([#8541](DataDog/dd-trace-java#8541) - [@mobuchowski](https://github.com/mobuchowski)) #### Armeria Instrumentation - ✨ Support armeria grpc 1.32.3 ([#8606](DataDog/dd-trace-java#8606) - [@github-actions](https://github.com/github-actions)\[bot]) #### AWS DynamoDB Instrumentation - ✨ Create DynamoDB instrumentation + add span pointers for `updateItem` and `deleteItem` ([#8490](DataDog/dd-trace-java#8490) - [@nhulston](https://github.com/nhulston)) #### AWS SDK instrumentation - ✨ Add DynamoDB in DEFAULT_TRACE_CLOUD_PAYLOAD_TAGGING_SERVICES ([#8595](DataDog/dd-trace-java#8595) - [@joeyzhao2018](https://github.com/joeyzhao2018)) #### Azure Functions instrumentation - ✨ Enable tracer computed trace metrics by default for Azure Functions ([#8518](DataDog/dd-trace-java#8518) - [@duncanpharvey](https://github.com/duncanpharvey)) - 💡 Add azure-functions instrumentation ([#8432](DataDog/dd-trace-java#8432) - [@duncanpharvey](https://github.com/duncanpharvey)) #### Core Java language instrumentation - 🐛 Fix ForkJoinPool.execute() instrumentation on Java 21+ ([#8560](DataDog/dd-trace-java#8560) - [@PerfectSlayer](https://github.com/PerfectSlayer)) #### Eclipse Vert.x instrumentation - ✨ Add vertx postgresql client instrumentation ([#8471](DataDog/dd-trace-java#8471) - [@vandonr](https://github.com/vandonr) - thanks for the contribution!) #### Kafka instrumentation - ✨ Support and test kafka-clients 4 ([#8581](DataDog/dd-trace-java#8581) - [@amarziali](https://github.com/amarziali)) #### Kotlin instrumentation - ✨ Avoid disconnected traces when using Kotlin flowOn ([#8651](DataDog/dd-trace-java#8651) - [@mcculls](https://github.com/mcculls)) #### OpenTelemetry instrumentation - 🧹 Migrate OtelContext wrapper to new internal Context API ([#8645](DataDog/dd-trace-java#8645) - [@mcculls](https://github.com/mcculls)) #### Spring instrumentation - 🐛 Support CompletableFuture on spring webmvc controllers ([#8659](DataDog/dd-trace-java#8659) - [@amarziali](https://github.com/amarziali)) - ✨ Add support for endpoint discovery in spring mvc ([#8352](DataDog/dd-trace-java#8352) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### WebSocket Instrumentation - ✨ Instrument Jetty websocket pojo ([#8562](DataDog/dd-trace-java#8562) - [@amarziali](https://github.com/amarziali)) - 💡 Instrument Java Websocket API (JSR356) ([#8440](DataDog/dd-trace-java#8440) - [@amarziali](https://github.com/amarziali)) #### All other instrumentations - ✨ Introduce cache for peer.hostname lookup ([#8601](DataDog/dd-trace-java#8601) - [@mcculls](https://github.com/mcculls)) - ✨ Support pekko http 1.1 ([#8532](DataDog/dd-trace-java#8532) - [@amarziali](https://github.com/amarziali)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am every weekday" in timezone Australia/Melbourne, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). GitOrigin-RevId: 331314f71acaced3adc75ea5d7e855c248d593fc

daniel-mohedano added 4 commits March 12, 2025 11:50

capabilities versioning and commit message on test management request

eeb7951

smoke tests fixture update

35028a5

fix tests

7de420c

fix spotless

1e4cb8f

daniel-mohedano added type: enhancement Enhancements and improvements comp: ci visibility Continuous Integration Visibility labels Mar 12, 2025

daniel-mohedano requested a review from nikita-tkachenko-datadog March 12, 2025 11:39

daniel-mohedano requested a review from a team as a code owner March 12, 2025 11:39

nikita-tkachenko-datadog approved these changes Mar 12, 2025

View reviewed changes

creates test management dto for request instead of tracer environment

f26a285

daniel-mohedano merged commit 2d31713 into master Mar 12, 2025
220 checks passed

daniel-mohedano deleted the daniel.mohedano/library-capabilities-versioning branch March 12, 2025 14:40

github-actions bot added this to the 1.48.0 milestone Mar 12, 2025

mtoffl01 pushed a commit that referenced this pull request Mar 24, 2025

Update capabilities tagging to use versioning (#8540)

f1da84c

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update capabilities tagging to use versioning #8540

Update capabilities tagging to use versioning #8540

Uh oh!

daniel-mohedano commented Mar 12, 2025 •

edited

Loading

pr-commenter bot commented Mar 12, 2025 •

edited

Loading

Uh oh!

Labels

2 participants

Update capabilities tagging to use versioning #8540

Update capabilities tagging to use versioning #8540

Uh oh!

Conversation

daniel-mohedano commented Mar 12, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What Does This Do

Motivation

Contributor Checklist

pr-commenter bot commented Mar 12, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Benchmarks

Startup

Parameters

Summary

Load

Parameters

Summary

Dacapo

Parameters

Summary

Uh oh!

Labels

2 participants

daniel-mohedano commented Mar 12, 2025 •

edited

Loading

pr-commenter bot commented Mar 12, 2025 •

edited

Loading