Fix weak randomness in oracle.ucp.util.OpaqueString #8609
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
| Hi! 👋 Thanks for your pull request! 🎉 To help us review it, please make sure to:
If you need help, please check our contributing guidelines. |
jandro996 added type: enhancement 
smola approved these changes Mar 24, 2025
manuel-alvarez-alvarez approved these changes Mar 24, 2025
BenchmarksStartupParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 65 metrics, 6 unstable metrics. Startup time reports for insecure-bankgantt title insecure-bank - global startup overhead: candidate=1.48.0-SNAPSHOT~7db2f9d6a5, baseline=1.48.0-SNAPSHOT~771fa819aa dateFormat X axisFormat %s section tracing Agent [baseline] (1.05 s) : 0, 1049861 Total [baseline] (8.64 s) : 0, 8639670 Agent [candidate] (1.052 s) : 0, 1051708 Total [candidate] (8.677 s) : 0, 8676843 section iast Agent [baseline] (1.175 s) : 0, 1174680 Total [baseline] (9.245 s) : 0, 9244951 Agent [candidate] (1.184 s) : 0, 1183736 Total [candidate] (9.293 s) : 0, 9292632 section iast_HARDCODED_SECRET_DISABLED Agent [baseline] (1.175 s) : 0, 1174526 Total [baseline] (9.176 s) : 0, 9176018 Agent [candidate] (1.189 s) : 0, 1188539 Total [candidate] (9.281 s) : 0, 9280826 section iast_TELEMETRY_OFF Agent [baseline] (1.174 s) : 0, 1174114 Total [baseline] (9.24 s) : 0, 9239990 Agent [candidate] (1.173 s) : 0, 1173175 Total [candidate] (9.233 s) : 0, 9233362
gantt title insecure-bank - break down per module: candidate=1.48.0-SNAPSHOT~7db2f9d6a5, baseline=1.48.0-SNAPSHOT~771fa819aa dateFormat X axisFormat %s section tracing BytebuddyAgent [baseline] (719.491 ms) : 0, 719491 BytebuddyAgent [candidate] (719.368 ms) : 0, 719368 GlobalTracer [baseline] (239.397 ms) : 0, 239397 GlobalTracer [candidate] (240.504 ms) : 0, 240504 AppSec [baseline] (54.347 ms) : 0, 54347 AppSec [candidate] (55.052 ms) : 0, 55052 Debugger [baseline] (4.378 ms) : 0, 4378 Debugger [candidate] (4.406 ms) : 0, 4406 Remote Config [baseline] (706.249 µs) : 0, 706 Remote Config [candidate] (700.909 µs) : 0, 701 Telemetry [baseline] (15.5 ms) : 0, 15500 Telemetry [candidate] (15.67 ms) : 0, 15670 section iast BytebuddyAgent [baseline] (836.949 ms) : 0, 836949 BytebuddyAgent [candidate] (844.358 ms) : 0, 844358 GlobalTracer [baseline] (229.481 ms) : 0, 229481 GlobalTracer [candidate] (230.486 ms) : 0, 230486 IAST [baseline] (22.841 ms) : 0, 22841 IAST [candidate] (22.816 ms) : 0, 22816 AppSec [baseline] (55.996 ms) : 0, 55996 AppSec [candidate] (56.384 ms) : 0, 56384 Debugger [baseline] (4.124 ms) : 0, 4124 Debugger [candidate] (4.213 ms) : 0, 4213 Remote Config [baseline] (618.456 µs) : 0, 618 Remote Config [candidate] (615.878 µs) : 0, 616 Telemetry [baseline] (8.695 ms) : 0, 8695 Telemetry [candidate] (8.782 ms) : 0, 8782 section iast_HARDCODED_SECRET_DISABLED BytebuddyAgent [baseline] (836.423 ms) : 0, 836423 BytebuddyAgent [candidate] (846.768 ms) : 0, 846768 GlobalTracer [baseline] (229.909 ms) : 0, 229909 GlobalTracer [candidate] (232.429 ms) : 0, 232429 IAST [baseline] (22.892 ms) : 0, 22892 IAST [candidate] (23.155 ms) : 0, 23155 AppSec [baseline] (55.877 ms) : 0, 55877 AppSec [candidate] (56.475 ms) : 0, 56475 Debugger [baseline] (4.164 ms) : 0, 4164 Debugger [candidate] (4.176 ms) : 0, 4176 Remote Config [baseline] (595.098 µs) : 0, 595 Remote Config [candidate] (604.295 µs) : 0, 604 Telemetry [baseline] (8.724 ms) : 0, 8724 Telemetry [candidate] (8.861 ms) : 0, 8861 section iast_TELEMETRY_OFF BytebuddyAgent [baseline] (835.562 ms) : 0, 835562 BytebuddyAgent [candidate] (835.053 ms) : 0, 835053 GlobalTracer [baseline] (230.398 ms) : 0, 230398 GlobalTracer [candidate] (230.133 ms) : 0, 230133 IAST [baseline] (22.628 ms) : 0, 22628 IAST [candidate] (22.363 ms) : 0, 22363 AppSec [baseline] (56.162 ms) : 0, 56162 AppSec [candidate] (56.273 ms) : 0, 56273 Debugger [baseline] (4.149 ms) : 0, 4149 Debugger [candidate] (4.2 ms) : 0, 4200 Remote Config [baseline] (608.036 µs) : 0, 608 Remote Config [candidate] (609.599 µs) : 0, 610 Telemetry [baseline] (8.628 ms) : 0, 8628 Telemetry [candidate] (8.612 ms) : 0, 8612 Startup time reports for petclinicgantt title petclinic - global startup overhead: candidate=1.48.0-SNAPSHOT~7db2f9d6a5, baseline=1.48.0-SNAPSHOT~771fa819aa dateFormat X axisFormat %s section tracing Agent [baseline] (1.06 s) : 0, 1059693 Total [baseline] (10.538 s) : 0, 10538369 Agent [candidate] (1.048 s) : 0, 1047647 Total [candidate] (10.441 s) : 0, 10440752 section appsec Agent [baseline] (1.193 s) : 0, 1192607 Total [baseline] (10.78 s) : 0, 10780014 Agent [candidate] (1.193 s) : 0, 1193124 Total [candidate] (10.748 s) : 0, 10748024 section iast Agent [baseline] (1.191 s) : 0, 1191104 Total [baseline] (11.143 s) : 0, 11143009 Agent [candidate] (1.178 s) : 0, 1178369 Total [candidate] (11.037 s) : 0, 11037367 section profiling Agent [baseline] (1.27 s) : 0, 1270139 Total [baseline] (10.831 s) : 0, 10830754 Agent [candidate] (1.272 s) : 0, 1272448 Total [candidate] (10.858 s) : 0, 10857971
gantt title petclinic - break down per module: candidate=1.48.0-SNAPSHOT~7db2f9d6a5, baseline=1.48.0-SNAPSHOT~771fa819aa dateFormat X axisFormat %s section tracing BytebuddyAgent [baseline] (728.666 ms) : 0, 728666 BytebuddyAgent [candidate] (719.539 ms) : 0, 719539 GlobalTracer [baseline] (241.815 ms) : 0, 241815 GlobalTracer [candidate] (239.476 ms) : 0, 239476 AppSec [baseline] (54.58 ms) : 0, 54580 AppSec [candidate] (54.747 ms) : 0, 54747 Debugger [baseline] (4.41 ms) : 0, 4410 Debugger [candidate] (5.121 ms) : 0, 5121 Remote Config [baseline] (728.64 µs) : 0, 729 Remote Config [candidate] (704.303 µs) : 0, 704 Telemetry [baseline] (13.305 ms) : 0, 13305 Telemetry [candidate] (12.059 ms) : 0, 12059 section appsec BytebuddyAgent [baseline] (738.653 ms) : 0, 738653 BytebuddyAgent [candidate] (739.452 ms) : 0, 739452 GlobalTracer [baseline] (237.147 ms) : 0, 237147 GlobalTracer [candidate] (237.069 ms) : 0, 237069 IAST [baseline] (21.68 ms) : 0, 21680 IAST [candidate] (21.586 ms) : 0, 21586 AppSec [baseline] (176.735 ms) : 0, 176735 AppSec [candidate] (175.874 ms) : 0, 175874 Debugger [baseline] (4.313 ms) : 0, 4313 Debugger [candidate] (4.307 ms) : 0, 4307 Remote Config [baseline] (650.323 µs) : 0, 650 Remote Config [candidate] (638.039 µs) : 0, 638 Telemetry [baseline] (8.221 ms) : 0, 8221 Telemetry [candidate] (8.952 ms) : 0, 8952 section iast BytebuddyAgent [baseline] (850.849 ms) : 0, 850849 BytebuddyAgent [candidate] (839.165 ms) : 0, 839165 GlobalTracer [baseline] (231.591 ms) : 0, 231591 GlobalTracer [candidate] (230.595 ms) : 0, 230595 IAST [baseline] (22.983 ms) : 0, 22983 IAST [candidate] (22.925 ms) : 0, 22925 AppSec [baseline] (56.041 ms) : 0, 56041 AppSec [candidate] (56.145 ms) : 0, 56145 Debugger [baseline] (4.164 ms) : 0, 4164 Debugger [candidate] (4.191 ms) : 0, 4191 Remote Config [baseline] (593.553 µs) : 0, 594 Remote Config [candidate] (591.244 µs) : 0, 591 Telemetry [baseline] (8.774 ms) : 0, 8774 Telemetry [candidate] (8.743 ms) : 0, 8743 section profiling BytebuddyAgent [baseline] (709.564 ms) : 0, 709564 BytebuddyAgent [candidate] (710.206 ms) : 0, 710206 GlobalTracer [baseline] (349.701 ms) : 0, 349701 GlobalTracer [candidate] (350.769 ms) : 0, 350769 AppSec [baseline] (54.239 ms) : 0, 54239 AppSec [candidate] (53.706 ms) : 0, 53706 Debugger [baseline] (4.257 ms) : 0, 4257 Debugger [candidate] (4.309 ms) : 0, 4309 Remote Config [baseline] (692.366 µs) : 0, 692 Remote Config [candidate] (714.249 µs) : 0, 714 Telemetry [baseline] (8.911 ms) : 0, 8911 Telemetry [candidate] (9.002 ms) : 0, 9002 ProfilingAgent [baseline] (101.257 ms) : 0, 101257 ProfilingAgent [candidate] (101.98 ms) : 0, 101980 Profiling [baseline] (101.283 ms) : 0, 101283 Profiling [candidate] (102.006 ms) : 0, 102006 LoadParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 13 metrics, 17 unstable metrics. Request duration reports for insecure-bankgantt title insecure-bank - request duration [CI 0.99] : candidate=1.48.0-SNAPSHOT~7db2f9d6a5, baseline=1.48.0-SNAPSHOT~771fa819aa dateFormat X axisFormat %s section baseline no_agent (374.901 µs) : 355, 395 . : milestone, 375, iast (516.551 µs) : 494, 539 . : milestone, 517, iast_FULL (730.39 µs) : 708, 752 . : milestone, 730, iast_GLOBAL (560.269 µs) : 537, 583 . : milestone, 560, iast_HARDCODED_SECRET_DISABLED (503.267 µs) : 482, 525 . : milestone, 503, iast_INACTIVE (463.517 µs) : 442, 485 . : milestone, 464, iast_TELEMETRY_OFF (497.324 µs) : 476, 519 . : milestone, 497, tracing (460.128 µs) : 439, 481 . : milestone, 460, section candidate no_agent (380.629 µs) : 359, 403 . : milestone, 381, iast (510.592 µs) : 489, 533 . : milestone, 511, iast_FULL (721.013 µs) : 699, 743 . : milestone, 721, iast_GLOBAL (559.302 µs) : 537, 582 . : milestone, 559, iast_HARDCODED_SECRET_DISABLED (512.764 µs) : 491, 535 . : milestone, 513, iast_INACTIVE (463.905 µs) : 442, 486 . : milestone, 464, iast_TELEMETRY_OFF (498.368 µs) : 476, 521 . : milestone, 498, tracing (459.572 µs) : 439, 480 . : milestone, 460,
Request duration reports for petclinicgantt title petclinic - request duration [CI 0.99] : candidate=1.48.0-SNAPSHOT~7db2f9d6a5, baseline=1.48.0-SNAPSHOT~771fa819aa dateFormat X axisFormat %s section baseline no_agent (1.343 ms) : 1324, 1362 . : milestone, 1343, appsec (1.722 ms) : 1699, 1745 . : milestone, 1722, appsec_no_iast (1.736 ms) : 1713, 1759 . : milestone, 1736, code_origins (1.67 ms) : 1644, 1696 . : milestone, 1670, iast (1.503 ms) : 1478, 1528 . : milestone, 1503, profiling (1.545 ms) : 1519, 1570 . : milestone, 1545, tracing (1.486 ms) : 1461, 1510 . : milestone, 1486, section candidate no_agent (1.353 ms) : 1333, 1373 . : milestone, 1353, appsec (1.704 ms) : 1680, 1728 . : milestone, 1704, appsec_no_iast (1.725 ms) : 1702, 1749 . : milestone, 1725, code_origins (1.671 ms) : 1643, 1699 . : milestone, 1671, iast (1.492 ms) : 1466, 1518 . : milestone, 1492, profiling (1.515 ms) : 1492, 1538 . : milestone, 1515, tracing (1.512 ms) : 1488, 1536 . : milestone, 1512,
DacapoParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics. Execution time for biojavagantt title biojava - execution time [CI 0.99] : candidate=1.48.0-SNAPSHOT~7db2f9d6a5, baseline=1.48.0-SNAPSHOT~771fa819aa dateFormat X axisFormat %s section baseline no_agent (14.929 s) : 14929000, 14929000 . : milestone, 14929000, appsec (15.015 s) : 15015000, 15015000 . : milestone, 15015000, iast (18.395 s) : 18395000, 18395000 . : milestone, 18395000, iast_GLOBAL (18.076 s) : 18076000, 18076000 . : milestone, 18076000, profiling (15.182 s) : 15182000, 15182000 . : milestone, 15182000, tracing (15.203 s) : 15203000, 15203000 . : milestone, 15203000, section candidate no_agent (15.485 s) : 15485000, 15485000 . : milestone, 15485000, appsec (15.049 s) : 15049000, 15049000 . : milestone, 15049000, iast (18.857 s) : 18857000, 18857000 . : milestone, 18857000, iast_GLOBAL (17.853 s) : 17853000, 17853000 . : milestone, 17853000, profiling (15.185 s) : 15185000, 15185000 . : milestone, 15185000, tracing (15.046 s) : 15046000, 15046000 . : milestone, 15046000,
Execution time for tomcatgantt title tomcat - execution time [CI 0.99] : candidate=1.48.0-SNAPSHOT~7db2f9d6a5, baseline=1.48.0-SNAPSHOT~771fa819aa dateFormat X axisFormat %s section baseline no_agent (1.475 ms) : 1464, 1487 . : milestone, 1475, appsec (2.343 ms) : 2299, 2386 . : milestone, 2343, iast (2.118 ms) : 2063, 2174 . : milestone, 2118, iast_GLOBAL (2.168 ms) : 2112, 2224 . : milestone, 2168, profiling (1.994 ms) : 1949, 2039 . : milestone, 1994, tracing (1.945 ms) : 1903, 1988 . : milestone, 1945, section candidate no_agent (1.474 ms) : 1463, 1486 . : milestone, 1474, appsec (2.338 ms) : 2295, 2381 . : milestone, 2338, iast (2.127 ms) : 2072, 2182 . : milestone, 2127, iast_GLOBAL (2.164 ms) : 2108, 2219 . : milestone, 2164, profiling (1.978 ms) : 1934, 2023 . : milestone, 1978, tracing (1.945 ms) : 1903, 1987 . : milestone, 1945,
|
jandro996 added comp: asm iast svc-squareup-copybara pushed a commit to cashapp/misk that referenced this pull request Apr 11, 2025
| Package | Type | Package file | Manager | Update | Change | |---|---|---|---|---|---| | org.flywaydb.flyway | plugin | misk/gradle/libs.versions.toml | gradle | minor | `11.6.0` -> `11.7.0` | | [com.squareup.okio:okio-fakefilesystem](https://github.com/square/okio) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `3.10.2` -> `3.11.0` | | [com.squareup.okio:okio](https://github.com/square/okio) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `3.10.2` -> `3.11.0` | | [com.autonomousapps.dependency-analysis](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin) | plugin | misk/gradle/libs.versions.toml | gradle | minor | `2.15.0` -> `2.16.0` | | [com.datadoghq:dd-trace-api](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `1.47.3` -> `1.48.1` | | [com.datadoghq:dd-trace-ot](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `1.47.3` -> `1.48.1` | | [software.amazon.awssdk:sdk-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:sqs](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:dynamodb-enhanced](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:dynamodb](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:aws-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:bom](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:auth](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | --- ### Release Notes <details> <summary>square/okio (com.squareup.okio:okio-fakefilesystem)</summary> ### [`v3.11.0`](https://github.com/square/okio/blob/HEAD/CHANGELOG.md#Version-3110) *2025-04-09* - Fix: Clear the deflater's byte array reference - New: Faster implementation of `String.decodeHex()` on Kotlin/JS. - New: Declare `EXACTLY_ONCE` execution for blocks like `Closeable.use {}` and `FileSystem.read {}`. - Upgrade: \[Kotlin 2.1.20]\[kotlin\_2\_1\_20]. </details> <details> <summary>autonomousapps/dependency-analysis-android-gradle-plugin (com.autonomousapps.dependency-analysis)</summary> ### [`v2.16.0`](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin/blob/HEAD/CHANGELOG.md#Version-2160) - \[Feat]: support `com.android.test` projects. - \[Feat]: support typesafe project accessors with opt-in. ```kotlin dependencyAnalysis { useTypesafeProjectAccessors(true) // false by default } ``` </details> <details> <summary>datadog/dd-trace-java (com.datadoghq:dd-trace-api)</summary> ### [`v1.48.1`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.48.1): 1.48.1 ### Components #### Tracer internal logging - 🐛 Remove print line causing unnecessary logs ([#​8687](DataDog/dd-trace-java#8687) - [@​sarahchen6](https://github.com/sarahchen6)) ### [`v1.48.0`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.48.0): 1.48.0 ### Known Bugs > \[!NOTE] > If you are experiencing issues with spamming timeout logs, please update to the [latest version](https://github.com/DataDog/dd-trace-java/releases/latest) or set [JDK_SOCKET_ENABLED](https://github.com/DataDog/dd-trace-java/blob/33fc3c9a9b7cda3beda88b8b3e5224ae2b10764a/dd-trace-api/src/main/java/datadog/trace/api/config/GeneralConfig.java#L98) to false. ### Components #### Application Security Management (IAST) - ✨ Fix vulnerability location org.jose4j.lang.HashUtil ([#​8610](DataDog/dd-trace-java#8610) - [@​jandro996](https://github.com/jandro996)) - ✨ Fix weak randomness in oracle.ucp.util.OpaqueString ([#​8609](DataDog/dd-trace-java#8609) - [@​jandro996](https://github.com/jandro996)) - ✨ Fix weak hash false positive in oracle.security.o5logon.O5Logon ([#​8608](DataDog/dd-trace-java#8608) - [@​jandro996](https://github.com/jandro996)) - 🐛 Prevent before callsites targeting constructors in super calls ([#​8549](DataDog/dd-trace-java#8549) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### Application Security Management (WAF) - ✨ Update login events public SDK to V2 ([#​8620](DataDog/dd-trace-java#8620) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - 🐛 Send RASP LFI capability only when AppSec is statically enabled ([#​8573](DataDog/dd-trace-java#8573) - [@​jandro996](https://github.com/jandro996)) - ✨ Improve detection of missing request end events ([#​8510](DataDog/dd-trace-java#8510) - [@​smola](https://github.com/smola)) - 🧹 Remove remote configuration for API Security sampling rate ([#​8486](DataDog/dd-trace-java#8486) - [@​smola](https://github.com/smola)) - ✨ Add setUser to user monitoring SDK ([#​8482](DataDog/dd-trace-java#8482) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Add missing address for signup event ([#​8469](DataDog/dd-trace-java#8469) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Allow login events SDK to be used with appsec disabled ([#​8464](DataDog/dd-trace-java#8464) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Add support for endpoint discovery in spring mvc ([#​8352](DataDog/dd-trace-java#8352) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ New API Security sampling algorithm ([#​8178](DataDog/dd-trace-java#8178) - [@​ValentinZakharov](https://github.com/ValentinZakharov)) #### Build & Tooling - ✨ Add buffer size customizability to JDK UDS support ([#​8629](DataDog/dd-trace-java#8629) - [@​sarahchen6](https://github.com/sarahchen6)) - ✨ Add JDK built-in support for UDS on Java 16+ ([#​8314](DataDog/dd-trace-java#8314) - [@​sarahchen6](https://github.com/sarahchen6)) #### Configuration at Runtime - 🐛 Send RASP LFI capability only when AppSec is statically enabled ([#​8573](DataDog/dd-trace-java#8573) - [@​jandro996](https://github.com/jandro996)) #### Continuous Integration Visibility - 🐛 Prevent double reporting of Scalatest events when using SBT with test forking ([#​8682](DataDog/dd-trace-java#8682) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - 🐛 Shutdown CI Visibility test event handlers before tracer ([#​8677](DataDog/dd-trace-java#8677) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - 🐛 Do not apply JUnit 4 instrumentation to MUnit runners ([#​8675](DataDog/dd-trace-java#8675), [#​8683](DataDog/dd-trace-java#8683) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Remove error log when source path resolution fails on isModified check ([#​8663](DataDog/dd-trace-java#8663) - [@​daniel-mohedano](https://github.com/daniel-mohedano)) - ✨ Implement tests reordering for JUnit 4 ([#​8650](DataDog/dd-trace-java#8650) - [@​daniel-mohedano](https://github.com/daniel-mohedano)) - 🐛 Set default Attempt to Fix retries if none provided from the backend ([#​8615](DataDog/dd-trace-java#8615) - [@​daniel-mohedano](https://github.com/daniel-mohedano)) - ✨ Allow to manually set PR info ([#​8566](DataDog/dd-trace-java#8566) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - 🐛 Fix Test Optimization init when repo root cannot be determined ([#​8533](DataDog/dd-trace-java#8533) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Add capabilities tagging ([#​8499](DataDog/dd-trace-java#8499), [#​8540](DataDog/dd-trace-java#8540) - [@​daniel-mohedano](https://github.com/daniel-mohedano)) #### Crash tracking - 🐛 Remove dependency on bash from crash/oome uploder scripts ([#​8652](DataDog/dd-trace-java#8652) - [@​jbachorik](https://github.com/jbachorik)) #### Data Streams Monitoring - ✨ e2e pipeline configuration when data jobs is enabled ([#​8553](DataDog/dd-trace-java#8553) - [@​kr-igor](https://github.com/kr-igor)) #### Dynamic Instrumentation - 🐛 Fix In-Product when config is empty ([#​8679](DataDog/dd-trace-java#8679) - [@​jpbempel](https://github.com/jpbempel)) - ✨ Add support for filtering shaded third-party libs ([#​8612](DataDog/dd-trace-java#8612) - [@​jpbempel](https://github.com/jpbempel)) - ✨ Add In-Product Enablement ([#​8587](DataDog/dd-trace-java#8587) - [@​jpbempel](https://github.com/jpbempel)) - ✨⚡ Reduce footprint of SourceFile tracking ([#​8524](DataDog/dd-trace-java#8524) - [@​jpbempel](https://github.com/jpbempel)) - ✨⚡ Optimize the SourceFile tracking ([#​8520](DataDog/dd-trace-java#8520) - [@​jpbempel](https://github.com/jpbempel)) #### OpenTracing - 🧹 Remove activeScope() use in OpenTracing shim ([#​8478](DataDog/dd-trace-java#8478) - [@​mcculls](https://github.com/mcculls)) #### Profiling - ✨ Add profiler env check command to AgentCLI ([#​8671](DataDog/dd-trace-java#8671) - [@​jbachorik](https://github.com/jbachorik)) - ✨ Bump ddprof to 1.23.0 ([#​8668](DataDog/dd-trace-java#8668) - [@​jbachorik](https://github.com/jbachorik)) - Fix a crash related to ElfParser::loadSymbolTable ([#​191](DataDog/dd-trace-java#191)) by [@​yanglong1010](https://github.com/yanglong1010) in DataDog/java-profiler#192 - Unwind String.indexOf intrinsic on AArch64 by [@​MattAlp](https://github.com/MattAlp) in DataDog/java-profiler#193 - Fix Java 24 support by [@​jbachorik](https://github.com/jbachorik) in DataDog/java-profiler#194 - A set of fixes related to clang, aarch64 and musl pecularities of vmstructs stack unwinder by [@​jbachorik](https://github.com/jbachorik) in DataDog/java-profiler#199 - 🐛 Remove process information from JFR recording ([#​8661](DataDog/dd-trace-java#8661) - [@​r1viollet](https://github.com/r1viollet)) - 🐛 Make TempLocationManager USER aware ([#​8605](DataDog/dd-trace-java#8605) - [@​jbachorik](https://github.com/jbachorik)) - ✨ Extract git tags from embedded git.properties and datadog_git.properties ([#​8561](DataDog/dd-trace-java#8561) - [@​wmouchere](https://github.com/wmouchere)) #### Telemetry - 🐛 Fix appsec.rasp.error and appsec.waf.error telemetry metrics ([#​8624](DataDog/dd-trace-java#8624) - [@​jandro996](https://github.com/jandro996)) - ✨ Create metric: appsec.rasp.rule.skipped ([#​8618](DataDog/dd-trace-java#8618) - [@​jandro996](https://github.com/jandro996)) - ✨ Extract git tags from embedded git.properties and datadog_git.properties ([#​8561](DataDog/dd-trace-java#8561) - [@​wmouchere](https://github.com/wmouchere)) #### Testing - 🧹 Simplify ssi tests one-pipeline ([#​8558](DataDog/dd-trace-java#8558) - [@​robertomonteromiguel](https://github.com/robertomonteromiguel)) - ✨ Add smoke tests for java's concurrent API ([#​8438](DataDog/dd-trace-java#8438) - [@​sarahchen6](https://github.com/sarahchen6)) #### Trace context propagation - ✨ Adding Support for `TRACE_PROPAGATION_BEHAVIOR_EXTRACT` ([#​8535](DataDog/dd-trace-java#8535) - [@​mhlidd](https://github.com/mhlidd)) #### Tracer core - 🐛 Ensure shaded helpers have unique names ([#​8559](DataDog/dd-trace-java#8559) - [@​amarziali](https://github.com/amarziali)) - ✨ Support common config sources for user-provided git info ([#​8547](DataDog/dd-trace-java#8547) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Make the default config sources more robust when a security manager is installed ([#​8544](DataDog/dd-trace-java#8544) - [@​mcculls](https://github.com/mcculls)) - ✨ Support targeting services with configurations in stable configuration file ([#​8526](DataDog/dd-trace-java#8526) - [@​mtoffl01](https://github.com/mtoffl01)) - ✨ Add new parser for `DD_TAGS` and prioritizing `DD_SERVICE` ([#​8296](DataDog/dd-trace-java#8296) - [@​mhlidd](https://github.com/mhlidd)) #### Tracer internal logging - 🐛 Add missing debug log for the cloudPayloadTaggingServices config ([#​8600](DataDog/dd-trace-java#8600) - [@​ygree](https://github.com/ygree)) - ✨ Add the possibility to output the logs of the Java tracer in JSON ([#​8083](DataDog/dd-trace-java#8083) - [@​cecile75](https://github.com/cecile75)) #### Tracer public API - ✨ Introducing `DD_TRACE_EXPERIMENTAL_FEATURES_ENABLED` Config ([#​8536](DataDog/dd-trace-java#8536) - [@​mhlidd](https://github.com/mhlidd)) - ✨ Config Consistency Round 2 ([#​8489](DataDog/dd-trace-java#8489) - [@​mhlidd](https://github.com/mhlidd)) ### Instrumentations #### - 🐛 Fix NPE in getMdcCopy of LoggingEventInstrumentation ([#​8599](DataDog/dd-trace-java#8599) - [@​ygree](https://github.com/ygree)) #### Apache Spark instrumentation - ✨ Instrument Runtime.exit() to finish spark application spans ([#​8572](DataDog/dd-trace-java#8572) - [@​paul-laffon-dd](https://github.com/paul-laffon-dd)) - ✨ Configure OpenLineage if present in Spark instrumentation ([#​8541](DataDog/dd-trace-java#8541) - [@​mobuchowski](https://github.com/mobuchowski)) #### Armeria Instrumentation - ✨ Support armeria grpc 1.32.3 ([#​8606](DataDog/dd-trace-java#8606) - [@​github-actions](https://github.com/github-actions)\[bot]) #### AWS DynamoDB Instrumentation - ✨ Create DynamoDB instrumentation + add span pointers for `updateItem` and `deleteItem` ([#​8490](DataDog/dd-trace-java#8490) - [@​nhulston](https://github.com/nhulston)) #### AWS SDK instrumentation - ✨ Add DynamoDB in DEFAULT_TRACE_CLOUD_PAYLOAD_TAGGING_SERVICES ([#​8595](DataDog/dd-trace-java#8595) - [@​joeyzhao2018](https://github.com/joeyzhao2018)) #### Azure Functions instrumentation - ✨ Enable tracer computed trace metrics by default for Azure Functions ([#​8518](DataDog/dd-trace-java#8518) - [@​duncanpharvey](https://github.com/duncanpharvey)) - 💡 Add azure-functions instrumentation ([#​8432](DataDog/dd-trace-java#8432) - [@​duncanpharvey](https://github.com/duncanpharvey)) #### Core Java language instrumentation - 🐛 Fix ForkJoinPool.execute() instrumentation on Java 21+ ([#​8560](DataDog/dd-trace-java#8560) - [@​PerfectSlayer](https://github.com/PerfectSlayer)) #### Eclipse Vert.x instrumentation - ✨ Add vertx postgresql client instrumentation ([#​8471](DataDog/dd-trace-java#8471) - [@​vandonr](https://github.com/vandonr) - thanks for the contribution!) #### Kafka instrumentation - ✨ Support and test kafka-clients 4 ([#​8581](DataDog/dd-trace-java#8581) - [@​amarziali](https://github.com/amarziali)) #### Kotlin instrumentation - ✨ Avoid disconnected traces when using Kotlin flowOn ([#​8651](DataDog/dd-trace-java#8651) - [@​mcculls](https://github.com/mcculls)) #### OpenTelemetry instrumentation - 🧹 Migrate OtelContext wrapper to new internal Context API ([#​8645](DataDog/dd-trace-java#8645) - [@​mcculls](https://github.com/mcculls)) #### Spring instrumentation - 🐛 Support CompletableFuture on spring webmvc controllers ([#​8659](DataDog/dd-trace-java#8659) - [@​amarziali](https://github.com/amarziali)) - ✨ Add support for endpoint discovery in spring mvc ([#​8352](DataDog/dd-trace-java#8352) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### WebSocket Instrumentation - ✨ Instrument Jetty websocket pojo ([#​8562](DataDog/dd-trace-java#8562) - [@​amarziali](https://github.com/amarziali)) - 💡 Instrument Java Websocket API (JSR356) ([#​8440](DataDog/dd-trace-java#8440) - [@​amarziali](https://github.com/amarziali)) #### All other instrumentations - ✨ Introduce cache for peer.hostname lookup ([#​8601](DataDog/dd-trace-java#8601) - [@​mcculls](https://github.com/mcculls)) - ✨ Support pekko http 1.1 ([#​8532](DataDog/dd-trace-java#8532) - [@​amarziali](https://github.com/amarziali)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am every weekday" in timezone Australia/Melbourne, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). GitOrigin-RevId: 331314f71acaced3adc75ea5d7e855c248d593fc
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit. This suggestion is invalid because no changes were made to the code. Suggestions cannot be applied while the pull request is closed. Suggestions cannot be applied while viewing a subset of changes. Only one suggestion per line can be applied in a batch. Add this suggestion to a batch that can be applied as a single commit. Applying suggestions on deleted lines is not supported. You must change the existing code in this line in order to create a valid suggestion. Outdated suggestions cannot be applied. This suggestion has been applied or marked resolved. Suggestions cannot be applied from pending reviews. Suggestions cannot be applied on multi-line comments. Suggestions cannot be applied while the pull request is queued to merge. Suggestion cannot be applied right now. Please check back later.
What Does This Do
Exclude oracle.ucp.util.OpaqueString in IAST
Motivation
Additional Notes
Contributor Checklist
type:and (comp:orinst:) labels in addition to any usefull labelsclose,fixor any linking keywords when referencing an issue.Use
solvesinstead, and assign the PR milestone to the issueJira ticket: APPSEC-57044