Skip to content

Add missing address for signup event - #8469

Merged
manuel-alvarez-alvarez merged 1 commit into
masterfrom
malvarez/waf-signup-address
Mar 13, 2025
Merged

Add missing address for signup event#8469
manuel-alvarez-alvarez merged 1 commit into
masterfrom
malvarez/waf-signup-address

Conversation

@manuel-alvarez-alvarez

@manuel-alvarez-alvarezmanuel-alvarez-alvarez commented Feb 28, 2025

Copy link
Copy Markdown
Member

What Does This Do

Adds the missing address server.business_logic.users.signup to the automated login events instrumentation.

Motivation

Additional Notes

Contributor Checklist

Jira ticket: [PROJ-IDENT]

@manuel-alvarez-alvarezmanuel-alvarez-alvarez added type: feature Enhancements and improvements tag: no release notes Changes to exclude from release notes comp: asm waf Application Security Management (WAF) labels Feb 28, 2025
@pr-commenter

pr-commenterBot commented Feb 28, 2025

Copy link
Copy Markdown

Benchmarks

Startup

Parameters

BaselineCandidate
baseline_or_candidatebaselinecandidate
git_branchmastermalvarez/waf-signup-address
git_commit_date17418779081741878635
git_commit_sha47c4eb3fcfcbeca6b
release_version1.48.0-SNAPSHOT~47c4eb373b1.48.0-SNAPSHOT~efcfcbeca6b
See matching parameters
BaselineCandidate
applicationinsecure-bankinsecure-bank
ci_job_date17418804891741880489
ci_job_id846682062846682062
ci_pipeline_id5871996058719960
cpu_modelIntel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHzIntel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_versionLinux runner-dgzduy7c-project-304-concurrent-1-fca9g7fv 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/LinuxLinux runner-dgzduy7c-project-304-concurrent-1-fca9g7fv 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
moduleAgentAgent
parentNoneNone
variantiastiast

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 59 metrics, 4 unstable metrics.

Startup time reports for insecure-bank
gantt
title insecure-bank - global startup overhead: candidate=1.48.0-SNAPSHOT~efcfcbeca6b, baseline=1.48.0-SNAPSHOT~47c4eb373b
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.045 s) : 0, 1044817
Total [baseline] (8.722 s) : 0, 8721818
Agent [candidate] (1.04 s) : 0, 1040475
Total [candidate] (8.675 s) : 0, 8674764
section iast
Agent [baseline] (1.177 s) : 0, 1176850
Total [baseline] (9.248 s) : 0, 9248262
Agent [candidate] (1.171 s) : 0, 1170998
Total [candidate] (9.299 s) : 0, 9299289
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.179 s) : 0, 1179128
Total [baseline] (9.203 s) : 0, 9202877
Agent [candidate] (1.181 s) : 0, 1181229
Total [candidate] (9.191 s) : 0, 9190846
section iast_TELEMETRY_OFF
Agent [baseline] (1.169 s) : 0, 1168805
Total [baseline] (9.257 s) : 0, 9257450
Agent [candidate] (1.172 s) : 0, 1171696
Total [candidate] (9.257 s) : 0, 9257343
Loading
  • baseline results
ModuleVariantDurationΔ tracing
Agenttracing1.045 s-
Agentiast1.177 s132.033 ms (12.6%)
Agentiast_HARDCODED_SECRET_DISABLED1.179 s134.311 ms (12.9%)
Agentiast_TELEMETRY_OFF1.169 s123.988 ms (11.9%)
Totaltracing8.722 s-
Totaliast9.248 s526.444 ms (6.0%)
Totaliast_HARDCODED_SECRET_DISABLED9.203 s481.06 ms (5.5%)
Totaliast_TELEMETRY_OFF9.257 s535.632 ms (6.1%)
  • candidate results
ModuleVariantDurationΔ tracing
Agenttracing1.04 s-
Agentiast1.171 s130.523 ms (12.5%)
Agentiast_HARDCODED_SECRET_DISABLED1.181 s140.754 ms (13.5%)
Agentiast_TELEMETRY_OFF1.172 s131.221 ms (12.6%)
Totaltracing8.675 s-
Totaliast9.299 s624.525 ms (7.2%)
Totaliast_HARDCODED_SECRET_DISABLED9.191 s516.081 ms (5.9%)
Totaliast_TELEMETRY_OFF9.257 s582.579 ms (6.7%)
gantt
title insecure-bank - break down per module: candidate=1.48.0-SNAPSHOT~efcfcbeca6b, baseline=1.48.0-SNAPSHOT~47c4eb373b
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (720.028 ms) : 0, 720028
BytebuddyAgent [candidate] (718.178 ms) : 0, 718178
GlobalTracer [baseline] (240.206 ms) : 0, 240206
GlobalTracer [candidate] (240.113 ms) : 0, 240113
AppSec [baseline] (54.606 ms) : 0, 54606
AppSec [candidate] (54.788 ms) : 0, 54788
Remote Config [baseline] (687.197 µs) : 0, 687
Remote Config [candidate] (697.967 µs) : 0, 698
Telemetry [baseline] (13.883 ms) : 0, 13883
Telemetry [candidate] (11.536 ms) : 0, 11536
section iast
BytebuddyAgent [baseline] (841.893 ms) : 0, 841893
BytebuddyAgent [candidate] (837.155 ms) : 0, 837155
GlobalTracer [baseline] (230.844 ms) : 0, 230844
GlobalTracer [candidate] (230.469 ms) : 0, 230469
IAST [baseline] (23.036 ms) : 0, 23036
IAST [candidate] (22.777 ms) : 0, 22777
AppSec [baseline] (56.323 ms) : 0, 56323
AppSec [candidate] (56.116 ms) : 0, 56116
Remote Config [baseline] (617.503 µs) : 0, 618
Remote Config [candidate] (605.645 µs) : 0, 606
Telemetry [baseline] (8.828 ms) : 0, 8828
Telemetry [candidate] (8.61 ms) : 0, 8610
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (843.489 ms) : 0, 843489
BytebuddyAgent [candidate] (844.369 ms) : 0, 844369
GlobalTracer [baseline] (231.757 ms) : 0, 231757
GlobalTracer [candidate] (232.119 ms) : 0, 232119
IAST [baseline] (22.931 ms) : 0, 22931
IAST [candidate] (23.161 ms) : 0, 23161
AppSec [baseline] (56.266 ms) : 0, 56266
AppSec [candidate] (56.81 ms) : 0, 56810
Remote Config [baseline] (611.298 µs) : 0, 611
Remote Config [candidate] (615.861 µs) : 0, 616
Telemetry [baseline] (8.715 ms) : 0, 8715
Telemetry [candidate] (8.811 ms) : 0, 8811
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (835.141 ms) : 0, 835141
BytebuddyAgent [candidate] (836.606 ms) : 0, 836606
GlobalTracer [baseline] (230.305 ms) : 0, 230305
GlobalTracer [candidate] (231.39 ms) : 0, 231390
IAST [baseline] (22.401 ms) : 0, 22401
IAST [candidate] (22.306 ms) : 0, 22306
AppSec [baseline] (56.413 ms) : 0, 56413
AppSec [candidate] (56.853 ms) : 0, 56853
Remote Config [baseline] (625.996 µs) : 0, 626
Remote Config [candidate] (631.836 µs) : 0, 632
Telemetry [baseline] (8.613 ms) : 0, 8613
Telemetry [candidate] (8.665 ms) : 0, 8665
Loading
Startup time reports for petclinic
gantt
title petclinic - global startup overhead: candidate=1.48.0-SNAPSHOT~efcfcbeca6b, baseline=1.48.0-SNAPSHOT~47c4eb373b
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.039 s) : 0, 1039123
Total [baseline] (10.463 s) : 0, 10463500
Agent [candidate] (1.04 s) : 0, 1040157
Total [candidate] (10.475 s) : 0, 10474629
section appsec
Agent [baseline] (1.183 s) : 0, 1182624
Total [baseline] (10.785 s) : 0, 10784816
Agent [candidate] (1.186 s) : 0, 1186247
Total [candidate] (10.799 s) : 0, 10799253
section iast
Agent [baseline] (1.172 s) : 0, 1172472
Total [baseline] (11.025 s) : 0, 11025115
Agent [candidate] (1.173 s) : 0, 1173303
Total [candidate] (11.047 s) : 0, 11047199
section profiling
Agent [baseline] (1.261 s) : 0, 1260569
Total [baseline] (10.82 s) : 0, 10820177
Agent [candidate] (1.261 s) : 0, 1261307
Total [candidate] (10.811 s) : 0, 10811316
Loading
  • baseline results
ModuleVariantDurationΔ tracing
Agenttracing1.039 s-
Agentappsec1.183 s143.502 ms (13.8%)
Agentiast1.172 s133.35 ms (12.8%)
Agentprofiling1.261 s221.446 ms (21.3%)
Totaltracing10.463 s-
Totalappsec10.785 s321.317 ms (3.1%)
Totaliast11.025 s561.615 ms (5.4%)
Totalprofiling10.82 s356.678 ms (3.4%)
  • candidate results
ModuleVariantDurationΔ tracing
Agenttracing1.04 s-
Agentappsec1.186 s146.09 ms (14.0%)
Agentiast1.173 s133.146 ms (12.8%)
Agentprofiling1.261 s221.149 ms (21.3%)
Totaltracing10.475 s-
Totalappsec10.799 s324.623 ms (3.1%)
Totaliast11.047 s572.569 ms (5.5%)
Totalprofiling10.811 s336.687 ms (3.2%)
gantt
title petclinic - break down per module: candidate=1.48.0-SNAPSHOT~efcfcbeca6b, baseline=1.48.0-SNAPSHOT~47c4eb373b
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (717.308 ms) : 0, 717308
BytebuddyAgent [candidate] (717.649 ms) : 0, 717649
GlobalTracer [baseline] (239.419 ms) : 0, 239419
GlobalTracer [candidate] (239.388 ms) : 0, 239388
AppSec [baseline] (54.447 ms) : 0, 54447
AppSec [candidate] (54.414 ms) : 0, 54414
Remote Config [baseline] (695.533 µs) : 0, 696
Remote Config [candidate] (696.57 µs) : 0, 697
Telemetry [baseline] (12.079 ms) : 0, 12079
Telemetry [candidate] (12.783 ms) : 0, 12783
section appsec
BytebuddyAgent [baseline] (735.3 ms) : 0, 735300
BytebuddyAgent [candidate] (737.94 ms) : 0, 737940
GlobalTracer [baseline] (236.53 ms) : 0, 236530
GlobalTracer [candidate] (237.196 ms) : 0, 237196
AppSec [baseline] (175.531 ms) : 0, 175531
AppSec [candidate] (175.859 ms) : 0, 175859
Remote Config [baseline] (662.074 µs) : 0, 662
Remote Config [candidate] (667.6 µs) : 0, 668
Telemetry [baseline] (8.617 ms) : 0, 8617
Telemetry [candidate] (8.647 ms) : 0, 8647
IAST [baseline] (21.525 ms) : 0, 21525
IAST [candidate] (21.418 ms) : 0, 21418
section iast
BytebuddyAgent [baseline] (837.78 ms) : 0, 837780
BytebuddyAgent [candidate] (839.837 ms) : 0, 839837
GlobalTracer [baseline] (230.615 ms) : 0, 230615
GlobalTracer [candidate] (230.342 ms) : 0, 230342
AppSec [baseline] (56.426 ms) : 0, 56426
AppSec [candidate] (55.1 ms) : 0, 55100
Remote Config [baseline] (619.689 µs) : 0, 620
Remote Config [candidate] (601.467 µs) : 0, 601
Telemetry [baseline] (8.799 ms) : 0, 8799
Telemetry [candidate] (8.649 ms) : 0, 8649
IAST [baseline] (22.989 ms) : 0, 22989
IAST [candidate] (23.451 ms) : 0, 23451
section profiling
BytebuddyAgent [baseline] (710.041 ms) : 0, 710041
BytebuddyAgent [candidate] (710.63 ms) : 0, 710630
GlobalTracer [baseline] (349.693 ms) : 0, 349693
GlobalTracer [candidate] (350.593 ms) : 0, 350593
AppSec [baseline] (54.315 ms) : 0, 54315
AppSec [candidate] (53.471 ms) : 0, 53471
Remote Config [baseline] (681.068 µs) : 0, 681
Remote Config [candidate] (670.935 µs) : 0, 671
Telemetry [baseline] (8.932 ms) : 0, 8932
Telemetry [candidate] (8.938 ms) : 0, 8938
ProfilingAgent [baseline] (96.196 ms) : 0, 96196
ProfilingAgent [candidate] (96.206 ms) : 0, 96206
Profiling [baseline] (96.222 ms) : 0, 96222
Profiling [candidate] (96.23 ms) : 0, 96230
Loading

Load

Parameters

BaselineCandidate
baseline_or_candidatebaselinecandidate
end_time2025-03-13T15:11:462025-03-13T15:19:31
git_branchmastermalvarez/waf-signup-address
git_commit_date17418779081741878638
git_commit_sha47c4eb3fcfcbeca6b
release_version1.48.0-SNAPSHOT~47c4eb373b1.48.0-SNAPSHOT~efcfcbeca6b
start_time2025-03-13T15:11:322025-03-13T15:19:17
See matching parameters
BaselineCandidate
applicationinsecure-bankinsecure-bank
ci_job_date17418795701741879570
ci_job_id846682063846682063
ci_pipeline_id5871996058719960
cpu_modelIntel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHzIntel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_versionLinux runner-gzhmqs6t-project-304-concurrent-1-d71dibk0 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/LinuxLinux runner-gzhmqs6t-project-304-concurrent-1-d71dibk0 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
variantiastiast

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 14 metrics, 16 unstable metrics.

Request duration reports for petclinic
gantt
title petclinic - request duration [CI 0.99] : candidate=1.48.0-SNAPSHOT~efcfcbeca6b, baseline=1.48.0-SNAPSHOT~47c4eb373b
dateFormat X
axisFormat %s
section baseline
no_agent (1.35 ms) : 1331, 1370
. : milestone, 1350,
appsec (1.729 ms) : 1705, 1754
. : milestone, 1729,
appsec_no_iast (1.72 ms) : 1695, 1745
. : milestone, 1720,
code_origins (1.673 ms) : 1646, 1701
. : milestone, 1673,
iast (1.524 ms) : 1499, 1548
. : milestone, 1524,
profiling (1.517 ms) : 1493, 1541
. : milestone, 1517,
tracing (1.511 ms) : 1487, 1535
. : milestone, 1511,
section candidate
no_agent (1.364 ms) : 1344, 1384
. : milestone, 1364,
appsec (1.723 ms) : 1699, 1748
. : milestone, 1723,
appsec_no_iast (1.744 ms) : 1718, 1770
. : milestone, 1744,
code_origins (1.683 ms) : 1656, 1710
. : milestone, 1683,
iast (1.527 ms) : 1503, 1551
. : milestone, 1527,
profiling (1.508 ms) : 1483, 1533
. : milestone, 1508,
tracing (1.501 ms) : 1476, 1525
. : milestone, 1501,
Loading
  • baseline results
VariantRequest duration [CI 0.99]Δ no_agent
no_agent1.35 ms [1.331 ms, 1.37 ms]-
appsec1.729 ms [1.705 ms, 1.754 ms]379.006 µs (28.1%)
appsec_no_iast1.72 ms [1.695 ms, 1.745 ms]369.702 µs (27.4%)
code_origins1.673 ms [1.646 ms, 1.701 ms]322.878 µs (23.9%)
iast1.524 ms [1.499 ms, 1.548 ms]173.469 µs (12.8%)
profiling1.517 ms [1.493 ms, 1.541 ms]166.683 µs (12.3%)
tracing1.511 ms [1.487 ms, 1.535 ms]160.867 µs (11.9%)
  • candidate results
VariantRequest duration [CI 0.99]Δ no_agent
no_agent1.364 ms [1.344 ms, 1.384 ms]-
appsec1.723 ms [1.699 ms, 1.748 ms]359.35 µs (26.3%)
appsec_no_iast1.744 ms [1.718 ms, 1.77 ms]379.951 µs (27.9%)
code_origins1.683 ms [1.656 ms, 1.71 ms]319.118 µs (23.4%)
iast1.527 ms [1.503 ms, 1.551 ms]162.751 µs (11.9%)
profiling1.508 ms [1.483 ms, 1.533 ms]143.722 µs (10.5%)
tracing1.501 ms [1.476 ms, 1.525 ms]136.694 µs (10.0%)
Request duration reports for insecure-bank
gantt
title insecure-bank - request duration [CI 0.99] : candidate=1.48.0-SNAPSHOT~efcfcbeca6b, baseline=1.48.0-SNAPSHOT~47c4eb373b
dateFormat X
axisFormat %s
section baseline
no_agent (385.576 µs) : 366, 405
. : milestone, 386,
iast (516.91 µs) : 495, 538
. : milestone, 517,
iast_FULL (736.738 µs) : 715, 759
. : milestone, 737,
iast_GLOBAL (570.281 µs) : 547, 593
. : milestone, 570,
iast_HARDCODED_SECRET_DISABLED (521.464 µs) : 500, 543
. : milestone, 521,
iast_INACTIVE (468.445 µs) : 447, 490
. : milestone, 468,
iast_TELEMETRY_OFF (501.046 µs) : 479, 523
. : milestone, 501,
tracing (469.841 µs) : 449, 491
. : milestone, 470,
section candidate
no_agent (382.365 µs) : 362, 403
. : milestone, 382,
iast (511.506 µs) : 490, 533
. : milestone, 512,
iast_FULL (735.384 µs) : 713, 757
. : milestone, 735,
iast_GLOBAL (568.425 µs) : 547, 590
. : milestone, 568,
iast_HARDCODED_SECRET_DISABLED (514.428 µs) : 493, 536
. : milestone, 514,
iast_INACTIVE (461.266 µs) : 440, 482
. : milestone, 461,
iast_TELEMETRY_OFF (506.354 µs) : 485, 528
. : milestone, 506,
tracing (462.566 µs) : 442, 484
. : milestone, 463,
Loading
  • baseline results
VariantRequest duration [CI 0.99]Δ no_agent
no_agent385.576 µs [365.776 µs, 405.377 µs]-
iast516.91 µs [495.379 µs, 538.441 µs]131.333 µs (34.1%)
iast_FULL736.738 µs [714.837 µs, 758.639 µs]351.161 µs (91.1%)
iast_GLOBAL570.281 µs [547.21 µs, 593.353 µs]184.705 µs (47.9%)
iast_HARDCODED_SECRET_DISABLED521.464 µs [499.748 µs, 543.181 µs]135.888 µs (35.2%)
iast_INACTIVE468.445 µs [446.817 µs, 490.073 µs]82.869 µs (21.5%)
iast_TELEMETRY_OFF501.046 µs [479.133 µs, 522.959 µs]115.469 µs (29.9%)
tracing469.841 µs [448.87 µs, 490.811 µs]84.264 µs (21.9%)
  • candidate results
VariantRequest duration [CI 0.99]Δ no_agent
no_agent382.365 µs [362.151 µs, 402.58 µs]-
iast511.506 µs [489.856 µs, 533.156 µs]129.141 µs (33.8%)
iast_FULL735.384 µs [713.443 µs, 757.326 µs]353.019 µs (92.3%)
iast_GLOBAL568.425 µs [546.637 µs, 590.213 µs]186.06 µs (48.7%)
iast_HARDCODED_SECRET_DISABLED514.428 µs [492.877 µs, 535.98 µs]132.063 µs (34.5%)
iast_INACTIVE461.266 µs [440.226 µs, 482.307 µs]78.901 µs (20.6%)
iast_TELEMETRY_OFF506.354 µs [484.736 µs, 527.973 µs]123.989 µs (32.4%)
tracing462.566 µs [441.612 µs, 483.52 µs]80.201 µs (21.0%)

Dacapo

Parameters

BaselineCandidate
baseline_or_candidatebaselinecandidate
git_branchmastermalvarez/waf-signup-address
git_commit_date17418779081741878619
git_commit_sha47c4eb3fcfcbeca6b
release_version1.48.0-SNAPSHOT~47c4eb373b1.48.0-SNAPSHOT~efcfcbeca6b
See matching parameters
BaselineCandidate
applicationbiojavabiojava
ci_job_date17418800201741880020
ci_job_id846682064846682064
ci_pipeline_id5871996058719960
cpu_modelIntel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHzIntel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_versionLinux runner-88rxttzv-project-304-concurrent-1-h9z6k0z3 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/LinuxLinux runner-88rxttzv-project-304-concurrent-1-h9z6k0z3 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
variantappsecappsec

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics.

Execution time for tomcat
gantt
title tomcat - execution time [CI 0.99] : candidate=1.48.0-SNAPSHOT~efcfcbeca6b, baseline=1.48.0-SNAPSHOT~47c4eb373b
dateFormat X
axisFormat %s
section baseline
no_agent (1.475 ms) : 1464, 1487
. : milestone, 1475,
appsec (2.361 ms) : 2317, 2405
. : milestone, 2361,
iast (2.137 ms) : 2081, 2193
. : milestone, 2137,
iast_GLOBAL (2.186 ms) : 2129, 2243
. : milestone, 2186,
profiling (2.008 ms) : 1962, 2054
. : milestone, 2008,
tracing (1.967 ms) : 1924, 2010
. : milestone, 1967,
section candidate
no_agent (1.478 ms) : 1467, 1490
. : milestone, 1478,
appsec (2.366 ms) : 2322, 2410
. : milestone, 2366,
iast (2.142 ms) : 2085, 2198
. : milestone, 2142,
iast_GLOBAL (2.18 ms) : 2124, 2236
. : milestone, 2180,
profiling (2.003 ms) : 1957, 2048
. : milestone, 2003,
tracing (1.96 ms) : 1917, 2003
. : milestone, 1960,
Loading
  • baseline results
VariantExecution Time [CI 0.99]Δ no_agent
no_agent1.475 ms [1.464 ms, 1.487 ms]-
appsec2.361 ms [2.317 ms, 2.405 ms]885.621 µs (60.0%)
iast2.137 ms [2.081 ms, 2.193 ms]661.998 µs (44.9%)
iast_GLOBAL2.186 ms [2.129 ms, 2.243 ms]710.347 µs (48.1%)
profiling2.008 ms [1.962 ms, 2.054 ms]532.869 µs (36.1%)
tracing1.967 ms [1.924 ms, 2.01 ms]491.597 µs (33.3%)
  • candidate results
VariantExecution Time [CI 0.99]Δ no_agent
no_agent1.478 ms [1.467 ms, 1.49 ms]-
appsec2.366 ms [2.322 ms, 2.41 ms]887.54 µs (60.0%)
iast2.142 ms [2.085 ms, 2.198 ms]663.342 µs (44.9%)
iast_GLOBAL2.18 ms [2.124 ms, 2.236 ms]701.577 µs (47.5%)
profiling2.003 ms [1.957 ms, 2.048 ms]524.023 µs (35.4%)
tracing1.96 ms [1.917 ms, 2.003 ms]481.326 µs (32.6%)
Execution time for biojava
gantt
title biojava - execution time [CI 0.99] : candidate=1.48.0-SNAPSHOT~efcfcbeca6b, baseline=1.48.0-SNAPSHOT~47c4eb373b
dateFormat X
axisFormat %s
section baseline
no_agent (14.99 s) : 14990000, 14990000
. : milestone, 14990000,
appsec (14.882 s) : 14882000, 14882000
. : milestone, 14882000,
iast (18.347 s) : 18347000, 18347000
. : milestone, 18347000,
iast_GLOBAL (17.91 s) : 17910000, 17910000
. : milestone, 17910000,
profiling (15.647 s) : 15647000, 15647000
. : milestone, 15647000,
tracing (14.945 s) : 14945000, 14945000
. : milestone, 14945000,
section candidate
no_agent (15.455 s) : 15455000, 15455000
. : milestone, 15455000,
appsec (15.084 s) : 15084000, 15084000
. : milestone, 15084000,
iast (18.899 s) : 18899000, 18899000
. : milestone, 18899000,
iast_GLOBAL (17.779 s) : 17779000, 17779000
. : milestone, 17779000,
profiling (14.877 s) : 14877000, 14877000
. : milestone, 14877000,
tracing (15.084 s) : 15084000, 15084000
. : milestone, 15084000,
Loading
  • baseline results
VariantExecution Time [CI 0.99]Δ no_agent
no_agent14.99 s [14.99 s, 14.99 s]-
appsec14.882 s [14.882 s, 14.882 s]-108.0 ms (-0.7%)
iast18.347 s [18.347 s, 18.347 s]3.357 s (22.4%)
iast_GLOBAL17.91 s [17.91 s, 17.91 s]2.92 s (19.5%)
profiling15.647 s [15.647 s, 15.647 s]657.0 ms (4.4%)
tracing14.945 s [14.945 s, 14.945 s]-45.0 ms (-0.3%)
  • candidate results
VariantExecution Time [CI 0.99]Δ no_agent
no_agent15.455 s [15.455 s, 15.455 s]-
appsec15.084 s [15.084 s, 15.084 s]-371.0 ms (-2.4%)
iast18.899 s [18.899 s, 18.899 s]3.444 s (22.3%)
iast_GLOBAL17.779 s [17.779 s, 17.779 s]2.324 s (15.0%)
profiling14.877 s [14.877 s, 14.877 s]-578.0 ms (-3.7%)
tracing15.084 s [15.084 s, 15.084 s]-371.0 ms (-2.4%)

@manuel-alvarez-alvarez
manuel-alvarez-alvarezforce-pushed the malvarez/waf-sdk-appsec-inactive branch from c4329c6 to d0b259bCompareFebruary 28, 2025 11:07
@manuel-alvarez-alvarez
manuel-alvarez-alvarezforce-pushed the malvarez/waf-signup-address branch 2 times, most recently from 068abae to 4bfddbfCompareFebruary 28, 2025 11:47
@manuel-alvarez-alvarez
manuel-alvarez-alvarez marked this pull request as ready for review February 28, 2025 11:48
@smolasmola removed the tag: no release notes Changes to exclude from release notes label Mar 3, 2025
@manuel-alvarez-alvarez
manuel-alvarez-alvarezforce-pushed the malvarez/waf-sdk-appsec-inactive branch from d0b259b to f420accCompareMarch 7, 2025 13:07

@PerfectSlayerPerfectSlayer left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looking good for platform

@manuel-alvarez-alvarez
manuel-alvarez-alvarezforce-pushed the malvarez/waf-sdk-appsec-inactive branch 5 times, most recently from f712970 to cf301ceCompareMarch 13, 2025 12:52
Base automatically changed from malvarez/waf-sdk-appsec-inactive to masterMarch 13, 2025 13:55
@manuel-alvarez-alvarez
manuel-alvarez-alvarez deleted the malvarez/waf-signup-address branch March 13, 2025 15:49
@github-actionsgithub-actionsBot added this to the 1.48.0 milestone Mar 13, 2025
mtoffl01 pushed a commit that referenced this pull request Mar 24, 2025
svc-squareup-copybara pushed a commit to cashapp/misk that referenced this pull request Apr 11, 2025
| Package | Type | Package file | Manager | Update | Change |
|---|---|---|---|---|---|
| org.flywaydb.flyway | plugin | misk/gradle/libs.versions.toml | gradle
| minor | `11.6.0` -> `11.7.0` |
|
[com.squareup.okio:okio-fakefilesystem](https://github.com/square/okio)
| dependencies | misk/gradle/libs.versions.toml | gradle | minor |
`3.10.2` -> `3.11.0` |
| [com.squareup.okio:okio](https://github.com/square/okio) |
dependencies | misk/gradle/libs.versions.toml | gradle | minor |
`3.10.2` -> `3.11.0` |
|
[com.autonomousapps.dependency-analysis](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin)
| plugin | misk/gradle/libs.versions.toml | gradle | minor | `2.15.0` ->
`2.16.0` |
| [com.datadoghq:dd-trace-api](https://github.com/datadog/dd-trace-java)
| dependencies | misk/gradle/libs.versions.toml | gradle | minor |
`1.47.3` -> `1.48.1` |
| [com.datadoghq:dd-trace-ot](https://github.com/datadog/dd-trace-java)
| dependencies | misk/gradle/libs.versions.toml | gradle | minor |
`1.47.3` -> `1.48.1` |
| [software.amazon.awssdk:sdk-core](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:sqs](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
|
[software.amazon.awssdk:dynamodb-enhanced](https://aws.amazon.com/sdkforjava)
| dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:dynamodb](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:aws-core](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:bom](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:auth](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
---
### Release Notes
<details>
<summary>square/okio (com.squareup.okio:okio-fakefilesystem)</summary>
###
[`v3.11.0`](https://github.com/square/okio/blob/HEAD/CHANGELOG.md#Version-3110)
*2025-04-09*
- Fix: Clear the deflater's byte array reference
- New: Faster implementation of `String.decodeHex()` on Kotlin/JS.
- New: Declare `EXACTLY_ONCE` execution for blocks like `Closeable.use
{}` and `FileSystem.read {}`.
- Upgrade: \[Kotlin 2.1.20]\[kotlin\_2\_1\_20].
</details>
<details>
<summary>autonomousapps/dependency-analysis-android-gradle-plugin
(com.autonomousapps.dependency-analysis)</summary>
###
[`v2.16.0`](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin/blob/HEAD/CHANGELOG.md#Version-2160)
- \[Feat]: support `com.android.test` projects.
- \[Feat]: support typesafe project accessors with opt-in.
```kotlin
dependencyAnalysis {
useTypesafeProjectAccessors(true) // false by default
}
```
</details>
<details>
<summary>datadog/dd-trace-java (com.datadoghq:dd-trace-api)</summary>
###
[`v1.48.1`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.48.1):
1.48.1
### Components
#### Tracer internal logging
- 🐛 Remove print line causing unnecessary logs
([#&#8203;8687](DataDog/dd-trace-java#8687) -
[@&#8203;sarahchen6](https://github.com/sarahchen6))
###
[`v1.48.0`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.48.0):
1.48.0
### Known Bugs
> \[!NOTE]
> If you are experiencing issues with spamming timeout logs, please
update to the [latest
version](https://github.com/DataDog/dd-trace-java/releases/latest) or
set
[JDK_SOCKET_ENABLED](https://github.com/DataDog/dd-trace-java/blob/33fc3c9a9b7cda3beda88b8b3e5224ae2b10764a/dd-trace-api/src/main/java/datadog/trace/api/config/GeneralConfig.java#L98)
to false.
### Components
#### Application Security Management (IAST)
- ✨ Fix vulnerability location org.jose4j.lang.HashUtil
([#&#8203;8610](DataDog/dd-trace-java#8610) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Fix weak randomness in oracle.ucp.util.OpaqueString
([#&#8203;8609](DataDog/dd-trace-java#8609) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Fix weak hash false positive in
oracle.security.o5logon.O5Logon
([#&#8203;8608](DataDog/dd-trace-java#8608) -
[@&#8203;jandro996](https://github.com/jandro996))
- 🐛 Prevent before callsites targeting constructors in super calls
([#&#8203;8549](DataDog/dd-trace-java#8549) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
#### Application Security Management (WAF)
- ✨ Update login events public SDK to V2
([#&#8203;8620](DataDog/dd-trace-java#8620) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- 🐛 Send RASP LFI capability only when AppSec is statically enabled
([#&#8203;8573](DataDog/dd-trace-java#8573) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Improve detection of missing request end events
([#&#8203;8510](DataDog/dd-trace-java#8510) -
[@&#8203;smola](https://github.com/smola))
- 🧹 Remove remote configuration for API Security sampling rate
([#&#8203;8486](DataDog/dd-trace-java#8486) -
[@&#8203;smola](https://github.com/smola))
- ✨ Add setUser to user monitoring SDK
([#&#8203;8482](DataDog/dd-trace-java#8482) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- ✨ Add missing address for signup event
([#&#8203;8469](DataDog/dd-trace-java#8469) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- ✨ Allow login events SDK to be used with appsec disabled
([#&#8203;8464](DataDog/dd-trace-java#8464) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- ✨ Add support for endpoint discovery in spring mvc
([#&#8203;8352](DataDog/dd-trace-java#8352) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- ✨ New API Security sampling algorithm
([#&#8203;8178](DataDog/dd-trace-java#8178) -
[@&#8203;ValentinZakharov](https://github.com/ValentinZakharov))
#### Build & Tooling
- ✨ Add buffer size customizability to JDK UDS support
([#&#8203;8629](DataDog/dd-trace-java#8629) -
[@&#8203;sarahchen6](https://github.com/sarahchen6))
- ✨ Add JDK built-in support for UDS on Java 16+
([#&#8203;8314](DataDog/dd-trace-java#8314) -
[@&#8203;sarahchen6](https://github.com/sarahchen6))
#### Configuration at Runtime
- 🐛 Send RASP LFI capability only when AppSec is statically enabled
([#&#8203;8573](DataDog/dd-trace-java#8573) -
[@&#8203;jandro996](https://github.com/jandro996))
#### Continuous Integration Visibility
- 🐛 Prevent double reporting of Scalatest events when using SBT with
test forking
([#&#8203;8682](DataDog/dd-trace-java#8682) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- 🐛 Shutdown CI Visibility test event handlers before tracer
([#&#8203;8677](DataDog/dd-trace-java#8677) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- 🐛 Do not apply JUnit 4 instrumentation to MUnit runners
([#&#8203;8675](DataDog/dd-trace-java#8675),
[#&#8203;8683](DataDog/dd-trace-java#8683) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- ✨ Remove error log when source path resolution fails on
isModified check
([#&#8203;8663](DataDog/dd-trace-java#8663) -
[@&#8203;daniel-mohedano](https://github.com/daniel-mohedano))
- ✨ Implement tests reordering for JUnit 4
([#&#8203;8650](DataDog/dd-trace-java#8650) -
[@&#8203;daniel-mohedano](https://github.com/daniel-mohedano))
- 🐛 Set default Attempt to Fix retries if none provided from the
backend
([#&#8203;8615](DataDog/dd-trace-java#8615) -
[@&#8203;daniel-mohedano](https://github.com/daniel-mohedano))
- ✨ Allow to manually set PR info
([#&#8203;8566](DataDog/dd-trace-java#8566) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- 🐛 Fix Test Optimization init when repo root cannot be determined
([#&#8203;8533](DataDog/dd-trace-java#8533) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- ✨ Add capabilities tagging
([#&#8203;8499](DataDog/dd-trace-java#8499),
[#&#8203;8540](DataDog/dd-trace-java#8540) -
[@&#8203;daniel-mohedano](https://github.com/daniel-mohedano))
#### Crash tracking
- 🐛 Remove dependency on bash from crash/oome uploder scripts
([#&#8203;8652](DataDog/dd-trace-java#8652) -
[@&#8203;jbachorik](https://github.com/jbachorik))
#### Data Streams Monitoring
- ✨ e2e pipeline configuration when data jobs is enabled
([#&#8203;8553](DataDog/dd-trace-java#8553) -
[@&#8203;kr-igor](https://github.com/kr-igor))
#### Dynamic Instrumentation
- 🐛 Fix In-Product when config is empty
([#&#8203;8679](DataDog/dd-trace-java#8679) -
[@&#8203;jpbempel](https://github.com/jpbempel))
- ✨ Add support for filtering shaded third-party libs
([#&#8203;8612](DataDog/dd-trace-java#8612) -
[@&#8203;jpbempel](https://github.com/jpbempel))
- ✨ Add In-Product Enablement
([#&#8203;8587](DataDog/dd-trace-java#8587) -
[@&#8203;jpbempel](https://github.com/jpbempel))
- ✨⚡ Reduce footprint of SourceFile tracking
([#&#8203;8524](DataDog/dd-trace-java#8524) -
[@&#8203;jpbempel](https://github.com/jpbempel))
- ✨⚡ Optimize the SourceFile tracking
([#&#8203;8520](DataDog/dd-trace-java#8520) -
[@&#8203;jpbempel](https://github.com/jpbempel))
#### OpenTracing
- 🧹 Remove activeScope() use in OpenTracing shim
([#&#8203;8478](DataDog/dd-trace-java#8478) -
[@&#8203;mcculls](https://github.com/mcculls))
#### Profiling
- ✨ Add profiler env check command to AgentCLI
([#&#8203;8671](DataDog/dd-trace-java#8671) -
[@&#8203;jbachorik](https://github.com/jbachorik))
- ✨ Bump ddprof to 1.23.0
([#&#8203;8668](DataDog/dd-trace-java#8668) -
[@&#8203;jbachorik](https://github.com/jbachorik))
- Fix a crash related to ElfParser::loadSymbolTable
([#&#8203;191](DataDog/dd-trace-java#191)) by
[@&#8203;yanglong1010](https://github.com/yanglong1010) in
DataDog/java-profiler#192
- Unwind String.indexOf intrinsic on AArch64 by
[@&#8203;MattAlp](https://github.com/MattAlp) in
DataDog/java-profiler#193
- Fix Java 24 support by
[@&#8203;jbachorik](https://github.com/jbachorik) in
DataDog/java-profiler#194
- A set of fixes related to clang, aarch64 and musl pecularities of
vmstructs stack unwinder by
[@&#8203;jbachorik](https://github.com/jbachorik) in
DataDog/java-profiler#199
- 🐛 Remove process information from JFR recording
([#&#8203;8661](DataDog/dd-trace-java#8661) -
[@&#8203;r1viollet](https://github.com/r1viollet))
- 🐛 Make TempLocationManager USER aware
([#&#8203;8605](DataDog/dd-trace-java#8605) -
[@&#8203;jbachorik](https://github.com/jbachorik))
- ✨ Extract git tags from embedded git.properties and
datadog_git.properties
([#&#8203;8561](DataDog/dd-trace-java#8561) -
[@&#8203;wmouchere](https://github.com/wmouchere))
#### Telemetry
- 🐛 Fix appsec.rasp.error and appsec.waf.error telemetry metrics
([#&#8203;8624](DataDog/dd-trace-java#8624) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Create metric: appsec.rasp.rule.skipped
([#&#8203;8618](DataDog/dd-trace-java#8618) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Extract git tags from embedded git.properties and
datadog_git.properties
([#&#8203;8561](DataDog/dd-trace-java#8561) -
[@&#8203;wmouchere](https://github.com/wmouchere))
#### Testing
- 🧹 Simplify ssi tests one-pipeline
([#&#8203;8558](DataDog/dd-trace-java#8558) -
[@&#8203;robertomonteromiguel](https://github.com/robertomonteromiguel))
- ✨ Add smoke tests for java's concurrent API
([#&#8203;8438](DataDog/dd-trace-java#8438) -
[@&#8203;sarahchen6](https://github.com/sarahchen6))
#### Trace context propagation
- ✨ Adding Support for `TRACE_PROPAGATION_BEHAVIOR_EXTRACT`
([#&#8203;8535](DataDog/dd-trace-java#8535) -
[@&#8203;mhlidd](https://github.com/mhlidd))
#### Tracer core
- 🐛 Ensure shaded helpers have unique names
([#&#8203;8559](DataDog/dd-trace-java#8559) -
[@&#8203;amarziali](https://github.com/amarziali))
- ✨ Support common config sources for user-provided git info
([#&#8203;8547](DataDog/dd-trace-java#8547) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- ✨ Make the default config sources more robust when a security
manager is installed
([#&#8203;8544](DataDog/dd-trace-java#8544) -
[@&#8203;mcculls](https://github.com/mcculls))
- ✨ Support targeting services with configurations in stable
configuration file
([#&#8203;8526](DataDog/dd-trace-java#8526) -
[@&#8203;mtoffl01](https://github.com/mtoffl01))
- ✨ Add new parser for `DD_TAGS` and prioritizing `DD_SERVICE`
([#&#8203;8296](DataDog/dd-trace-java#8296) -
[@&#8203;mhlidd](https://github.com/mhlidd))
#### Tracer internal logging
- 🐛 Add missing debug log for the cloudPayloadTaggingServices config
([#&#8203;8600](DataDog/dd-trace-java#8600) -
[@&#8203;ygree](https://github.com/ygree))
- ✨ Add the possibility to output the logs of the Java tracer
in JSON
([#&#8203;8083](DataDog/dd-trace-java#8083) -
[@&#8203;cecile75](https://github.com/cecile75))
#### Tracer public API
- ✨ Introducing `DD_TRACE_EXPERIMENTAL_FEATURES_ENABLED` Config
([#&#8203;8536](DataDog/dd-trace-java#8536) -
[@&#8203;mhlidd](https://github.com/mhlidd))
- ✨ Config Consistency Round 2
([#&#8203;8489](DataDog/dd-trace-java#8489) -
[@&#8203;mhlidd](https://github.com/mhlidd))
### Instrumentations
####
- 🐛 Fix NPE in getMdcCopy of LoggingEventInstrumentation
([#&#8203;8599](DataDog/dd-trace-java#8599) -
[@&#8203;ygree](https://github.com/ygree))
#### Apache Spark instrumentation
- ✨ Instrument Runtime.exit() to finish spark application spans
([#&#8203;8572](DataDog/dd-trace-java#8572) -
[@&#8203;paul-laffon-dd](https://github.com/paul-laffon-dd))
- ✨ Configure OpenLineage if present in Spark instrumentation
([#&#8203;8541](DataDog/dd-trace-java#8541) -
[@&#8203;mobuchowski](https://github.com/mobuchowski))
#### Armeria Instrumentation
- ✨ Support armeria grpc 1.32.3
([#&#8203;8606](DataDog/dd-trace-java#8606) -
[@&#8203;github-actions](https://github.com/github-actions)\[bot])
#### AWS DynamoDB Instrumentation
- ✨ Create DynamoDB instrumentation + add span pointers for
`updateItem` and `deleteItem`
([#&#8203;8490](DataDog/dd-trace-java#8490) -
[@&#8203;nhulston](https://github.com/nhulston))
#### AWS SDK instrumentation
- ✨ Add DynamoDB in
DEFAULT_TRACE_CLOUD_PAYLOAD_TAGGING_SERVICES
([#&#8203;8595](DataDog/dd-trace-java#8595) -
[@&#8203;joeyzhao2018](https://github.com/joeyzhao2018))
#### Azure Functions instrumentation
- ✨ Enable tracer computed trace metrics by default for Azure
Functions
([#&#8203;8518](DataDog/dd-trace-java#8518) -
[@&#8203;duncanpharvey](https://github.com/duncanpharvey))
- 💡 Add azure-functions instrumentation
([#&#8203;8432](DataDog/dd-trace-java#8432) -
[@&#8203;duncanpharvey](https://github.com/duncanpharvey))
#### Core Java language instrumentation
- 🐛 Fix ForkJoinPool.execute() instrumentation on Java 21+
([#&#8203;8560](DataDog/dd-trace-java#8560) -
[@&#8203;PerfectSlayer](https://github.com/PerfectSlayer))
#### Eclipse Vert.x instrumentation
- ✨ Add vertx postgresql client instrumentation
([#&#8203;8471](DataDog/dd-trace-java#8471) -
[@&#8203;vandonr](https://github.com/vandonr) - thanks for the
contribution!)
#### Kafka instrumentation
- ✨ Support and test kafka-clients 4
([#&#8203;8581](DataDog/dd-trace-java#8581) -
[@&#8203;amarziali](https://github.com/amarziali))
#### Kotlin instrumentation
- ✨ Avoid disconnected traces when using Kotlin flowOn
([#&#8203;8651](DataDog/dd-trace-java#8651) -
[@&#8203;mcculls](https://github.com/mcculls))
#### OpenTelemetry instrumentation
- 🧹 Migrate OtelContext wrapper to new internal Context API
([#&#8203;8645](DataDog/dd-trace-java#8645) -
[@&#8203;mcculls](https://github.com/mcculls))
#### Spring instrumentation
- 🐛 Support CompletableFuture on spring webmvc controllers
([#&#8203;8659](DataDog/dd-trace-java#8659) -
[@&#8203;amarziali](https://github.com/amarziali))
- ✨ Add support for endpoint discovery in spring mvc
([#&#8203;8352](DataDog/dd-trace-java#8352) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
#### WebSocket Instrumentation
- ✨ Instrument Jetty websocket pojo
([#&#8203;8562](DataDog/dd-trace-java#8562) -
[@&#8203;amarziali](https://github.com/amarziali))
- 💡 Instrument Java Websocket API (JSR356)
([#&#8203;8440](DataDog/dd-trace-java#8440) -
[@&#8203;amarziali](https://github.com/amarziali))
#### All other instrumentations
- ✨ Introduce cache for peer.hostname lookup
([#&#8203;8601](DataDog/dd-trace-java#8601) -
[@&#8203;mcculls](https://github.com/mcculls))
- ✨ Support pekko http 1.1
([#&#8203;8532](DataDog/dd-trace-java#8532) -
[@&#8203;amarziali](https://github.com/amarziali))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am
every weekday" in timezone Australia/Melbourne, Automerge - At any time
(no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://github.com/renovatebot/renovate).
GitOrigin-RevId: 331314f71acaced3adc75ea5d7e855c248d593fc
eizus pushed a commit to cdrxyz/misk that referenced this pull request Jul 18, 2026
| Package | Type | Package file | Manager | Update | Change |
|---|---|---|---|---|---|
| org.flywaydb.flyway | plugin | misk/gradle/libs.versions.toml | gradle
| minor | `11.6.0` -> `11.7.0` |
|
[com.squareup.okio:okio-fakefilesystem](https://github.com/square/okio)
| dependencies | misk/gradle/libs.versions.toml | gradle | minor |
`3.10.2` -> `3.11.0` |
| [com.squareup.okio:okio](https://github.com/square/okio) |
dependencies | misk/gradle/libs.versions.toml | gradle | minor |
`3.10.2` -> `3.11.0` |
|
[com.autonomousapps.dependency-analysis](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin)
| plugin | misk/gradle/libs.versions.toml | gradle | minor | `2.15.0` ->
`2.16.0` |
| [com.datadoghq:dd-trace-api](https://github.com/datadog/dd-trace-java)
| dependencies | misk/gradle/libs.versions.toml | gradle | minor |
`1.47.3` -> `1.48.1` |
| [com.datadoghq:dd-trace-ot](https://github.com/datadog/dd-trace-java)
| dependencies | misk/gradle/libs.versions.toml | gradle | minor |
`1.47.3` -> `1.48.1` |
| [software.amazon.awssdk:sdk-core](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:sqs](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
|
[software.amazon.awssdk:dynamodb-enhanced](https://aws.amazon.com/sdkforjava)
| dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:dynamodb](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:aws-core](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:bom](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:auth](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
---
### Release Notes
<details>
<summary>square/okio (com.squareup.okio:okio-fakefilesystem)</summary>
###
[`v3.11.0`](https://github.com/square/okio/blob/HEAD/CHANGELOG.md#Version-3110)
*2025-04-09*
- Fix: Clear the deflater's byte array reference
- New: Faster implementation of `String.decodeHex()` on Kotlin/JS.
- New: Declare `EXACTLY_ONCE` execution for blocks like `Closeable.use
{}` and `FileSystem.read {}`.
- Upgrade: \[Kotlin 2.1.20]\[kotlin\_2\_1\_20].
</details>
<details>
<summary>autonomousapps/dependency-analysis-android-gradle-plugin
(com.autonomousapps.dependency-analysis)</summary>
###
[`v2.16.0`](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin/blob/HEAD/CHANGELOG.md#Version-2160)
- \[Feat]: support `com.android.test` projects.
- \[Feat]: support typesafe project accessors with opt-in.
```kotlin
dependencyAnalysis {
useTypesafeProjectAccessors(true) // false by default
}
```
</details>
<details>
<summary>datadog/dd-trace-java (com.datadoghq:dd-trace-api)</summary>
###
[`v1.48.1`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.48.1):
1.48.1
### Components
#### Tracer internal logging
- 🐛 Remove print line causing unnecessary logs
([#&#8203;8687](DataDog/dd-trace-java#8687) -
[@&#8203;sarahchen6](https://github.com/sarahchen6))
###
[`v1.48.0`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.48.0):
1.48.0
### Known Bugs
> \[!NOTE]
> If you are experiencing issues with spamming timeout logs, please
update to the [latest
version](https://github.com/DataDog/dd-trace-java/releases/latest) or
set
[JDK_SOCKET_ENABLED](https://github.com/DataDog/dd-trace-java/blob/33fc3c9a9b7cda3beda88b8b3e5224ae2b10764a/dd-trace-api/src/main/java/datadog/trace/api/config/GeneralConfig.java#L98)
to false.
### Components
#### Application Security Management (IAST)
- ✨ Fix vulnerability location org.jose4j.lang.HashUtil
([#&#8203;8610](DataDog/dd-trace-java#8610) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Fix weak randomness in oracle.ucp.util.OpaqueString
([#&#8203;8609](DataDog/dd-trace-java#8609) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Fix weak hash false positive in
oracle.security.o5logon.O5Logon
([#&#8203;8608](DataDog/dd-trace-java#8608) -
[@&#8203;jandro996](https://github.com/jandro996))
- 🐛 Prevent before callsites targeting constructors in super calls
([#&#8203;8549](DataDog/dd-trace-java#8549) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
#### Application Security Management (WAF)
- ✨ Update login events public SDK to V2
([#&#8203;8620](DataDog/dd-trace-java#8620) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- 🐛 Send RASP LFI capability only when AppSec is statically enabled
([#&#8203;8573](DataDog/dd-trace-java#8573) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Improve detection of missing request end events
([#&#8203;8510](DataDog/dd-trace-java#8510) -
[@&#8203;smola](https://github.com/smola))
- 🧹 Remove remote configuration for API Security sampling rate
([#&#8203;8486](DataDog/dd-trace-java#8486) -
[@&#8203;smola](https://github.com/smola))
- ✨ Add setUser to user monitoring SDK
([#&#8203;8482](DataDog/dd-trace-java#8482) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- ✨ Add missing address for signup event
([#&#8203;8469](DataDog/dd-trace-java#8469) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- ✨ Allow login events SDK to be used with appsec disabled
([#&#8203;8464](DataDog/dd-trace-java#8464) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- ✨ Add support for endpoint discovery in spring mvc
([#&#8203;8352](DataDog/dd-trace-java#8352) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- ✨ New API Security sampling algorithm
([#&#8203;8178](DataDog/dd-trace-java#8178) -
[@&#8203;ValentinZakharov](https://github.com/ValentinZakharov))
#### Build & Tooling
- ✨ Add buffer size customizability to JDK UDS support
([#&#8203;8629](DataDog/dd-trace-java#8629) -
[@&#8203;sarahchen6](https://github.com/sarahchen6))
- ✨ Add JDK built-in support for UDS on Java 16+
([#&#8203;8314](DataDog/dd-trace-java#8314) -
[@&#8203;sarahchen6](https://github.com/sarahchen6))
#### Configuration at Runtime
- 🐛 Send RASP LFI capability only when AppSec is statically enabled
([#&#8203;8573](DataDog/dd-trace-java#8573) -
[@&#8203;jandro996](https://github.com/jandro996))
#### Continuous Integration Visibility
- 🐛 Prevent double reporting of Scalatest events when using SBT with
test forking
([#&#8203;8682](DataDog/dd-trace-java#8682) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- 🐛 Shutdown CI Visibility test event handlers before tracer
([#&#8203;8677](DataDog/dd-trace-java#8677) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- 🐛 Do not apply JUnit 4 instrumentation to MUnit runners
([#&#8203;8675](DataDog/dd-trace-java#8675),
[#&#8203;8683](DataDog/dd-trace-java#8683) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- ✨ Remove error log when source path resolution fails on
isModified check
([#&#8203;8663](DataDog/dd-trace-java#8663) -
[@&#8203;daniel-mohedano](https://github.com/daniel-mohedano))
- ✨ Implement tests reordering for JUnit 4
([#&#8203;8650](DataDog/dd-trace-java#8650) -
[@&#8203;daniel-mohedano](https://github.com/daniel-mohedano))
- 🐛 Set default Attempt to Fix retries if none provided from the
backend
([#&#8203;8615](DataDog/dd-trace-java#8615) -
[@&#8203;daniel-mohedano](https://github.com/daniel-mohedano))
- ✨ Allow to manually set PR info
([#&#8203;8566](DataDog/dd-trace-java#8566) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- 🐛 Fix Test Optimization init when repo root cannot be determined
([#&#8203;8533](DataDog/dd-trace-java#8533) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- ✨ Add capabilities tagging
([#&#8203;8499](DataDog/dd-trace-java#8499),
[#&#8203;8540](DataDog/dd-trace-java#8540) -
[@&#8203;daniel-mohedano](https://github.com/daniel-mohedano))
#### Crash tracking
- 🐛 Remove dependency on bash from crash/oome uploder scripts
([#&#8203;8652](DataDog/dd-trace-java#8652) -
[@&#8203;jbachorik](https://github.com/jbachorik))
#### Data Streams Monitoring
- ✨ e2e pipeline configuration when data jobs is enabled
([#&#8203;8553](DataDog/dd-trace-java#8553) -
[@&#8203;kr-igor](https://github.com/kr-igor))
#### Dynamic Instrumentation
- 🐛 Fix In-Product when config is empty
([#&#8203;8679](DataDog/dd-trace-java#8679) -
[@&#8203;jpbempel](https://github.com/jpbempel))
- ✨ Add support for filtering shaded third-party libs
([#&#8203;8612](DataDog/dd-trace-java#8612) -
[@&#8203;jpbempel](https://github.com/jpbempel))
- ✨ Add In-Product Enablement
([#&#8203;8587](DataDog/dd-trace-java#8587) -
[@&#8203;jpbempel](https://github.com/jpbempel))
- ✨⚡ Reduce footprint of SourceFile tracking
([#&#8203;8524](DataDog/dd-trace-java#8524) -
[@&#8203;jpbempel](https://github.com/jpbempel))
- ✨⚡ Optimize the SourceFile tracking
([#&#8203;8520](DataDog/dd-trace-java#8520) -
[@&#8203;jpbempel](https://github.com/jpbempel))
#### OpenTracing
- 🧹 Remove activeScope() use in OpenTracing shim
([#&#8203;8478](DataDog/dd-trace-java#8478) -
[@&#8203;mcculls](https://github.com/mcculls))
#### Profiling
- ✨ Add profiler env check command to AgentCLI
([#&#8203;8671](DataDog/dd-trace-java#8671) -
[@&#8203;jbachorik](https://github.com/jbachorik))
- ✨ Bump ddprof to 1.23.0
([#&#8203;8668](DataDog/dd-trace-java#8668) -
[@&#8203;jbachorik](https://github.com/jbachorik))
- Fix a crash related to ElfParser::loadSymbolTable
([#&#8203;191](DataDog/dd-trace-java#191)) by
[@&#8203;yanglong1010](https://github.com/yanglong1010) in
DataDog/java-profiler#192
- Unwind String.indexOf intrinsic on AArch64 by
[@&#8203;MattAlp](https://github.com/MattAlp) in
DataDog/java-profiler#193
- Fix Java 24 support by
[@&#8203;jbachorik](https://github.com/jbachorik) in
DataDog/java-profiler#194
- A set of fixes related to clang, aarch64 and musl pecularities of
vmstructs stack unwinder by
[@&#8203;jbachorik](https://github.com/jbachorik) in
DataDog/java-profiler#199
- 🐛 Remove process information from JFR recording
([#&#8203;8661](DataDog/dd-trace-java#8661) -
[@&#8203;r1viollet](https://github.com/r1viollet))
- 🐛 Make TempLocationManager USER aware
([#&#8203;8605](DataDog/dd-trace-java#8605) -
[@&#8203;jbachorik](https://github.com/jbachorik))
- ✨ Extract git tags from embedded git.properties and
datadog_git.properties
([#&#8203;8561](DataDog/dd-trace-java#8561) -
[@&#8203;wmouchere](https://github.com/wmouchere))
#### Telemetry
- 🐛 Fix appsec.rasp.error and appsec.waf.error telemetry metrics
([#&#8203;8624](DataDog/dd-trace-java#8624) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Create metric: appsec.rasp.rule.skipped
([#&#8203;8618](DataDog/dd-trace-java#8618) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Extract git tags from embedded git.properties and
datadog_git.properties
([#&#8203;8561](DataDog/dd-trace-java#8561) -
[@&#8203;wmouchere](https://github.com/wmouchere))
#### Testing
- 🧹 Simplify ssi tests one-pipeline
([#&#8203;8558](DataDog/dd-trace-java#8558) -
[@&#8203;robertomonteromiguel](https://github.com/robertomonteromiguel))
- ✨ Add smoke tests for java's concurrent API
([#&#8203;8438](DataDog/dd-trace-java#8438) -
[@&#8203;sarahchen6](https://github.com/sarahchen6))
#### Trace context propagation
- ✨ Adding Support for `TRACE_PROPAGATION_BEHAVIOR_EXTRACT`
([#&#8203;8535](DataDog/dd-trace-java#8535) -
[@&#8203;mhlidd](https://github.com/mhlidd))
#### Tracer core
- 🐛 Ensure shaded helpers have unique names
([#&#8203;8559](DataDog/dd-trace-java#8559) -
[@&#8203;amarziali](https://github.com/amarziali))
- ✨ Support common config sources for user-provided git info
([#&#8203;8547](DataDog/dd-trace-java#8547) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- ✨ Make the default config sources more robust when a security
manager is installed
([#&#8203;8544](DataDog/dd-trace-java#8544) -
[@&#8203;mcculls](https://github.com/mcculls))
- ✨ Support targeting services with configurations in stable
configuration file
([#&#8203;8526](DataDog/dd-trace-java#8526) -
[@&#8203;mtoffl01](https://github.com/mtoffl01))
- ✨ Add new parser for `DD_TAGS` and prioritizing `DD_SERVICE`
([#&#8203;8296](DataDog/dd-trace-java#8296) -
[@&#8203;mhlidd](https://github.com/mhlidd))
#### Tracer internal logging
- 🐛 Add missing debug log for the cloudPayloadTaggingServices config
([#&#8203;8600](DataDog/dd-trace-java#8600) -
[@&#8203;ygree](https://github.com/ygree))
- ✨ Add the possibility to output the logs of the Java tracer
in JSON
([#&#8203;8083](DataDog/dd-trace-java#8083) -
[@&#8203;cecile75](https://github.com/cecile75))
#### Tracer public API
- ✨ Introducing `DD_TRACE_EXPERIMENTAL_FEATURES_ENABLED` Config
([#&#8203;8536](DataDog/dd-trace-java#8536) -
[@&#8203;mhlidd](https://github.com/mhlidd))
- ✨ Config Consistency Round 2
([#&#8203;8489](DataDog/dd-trace-java#8489) -
[@&#8203;mhlidd](https://github.com/mhlidd))
### Instrumentations
####
- 🐛 Fix NPE in getMdcCopy of LoggingEventInstrumentation
([#&#8203;8599](DataDog/dd-trace-java#8599) -
[@&#8203;ygree](https://github.com/ygree))
#### Apache Spark instrumentation
- ✨ Instrument Runtime.exit() to finish spark application spans
([#&#8203;8572](DataDog/dd-trace-java#8572) -
[@&#8203;paul-laffon-dd](https://github.com/paul-laffon-dd))
- ✨ Configure OpenLineage if present in Spark instrumentation
([#&#8203;8541](DataDog/dd-trace-java#8541) -
[@&#8203;mobuchowski](https://github.com/mobuchowski))
#### Armeria Instrumentation
- ✨ Support armeria grpc 1.32.3
([#&#8203;8606](DataDog/dd-trace-java#8606) -
[@&#8203;github-actions](https://github.com/github-actions)\[bot])
#### AWS DynamoDB Instrumentation
- ✨ Create DynamoDB instrumentation + add span pointers for
`updateItem` and `deleteItem`
([#&#8203;8490](DataDog/dd-trace-java#8490) -
[@&#8203;nhulston](https://github.com/nhulston))
#### AWS SDK instrumentation
- ✨ Add DynamoDB in
DEFAULT_TRACE_CLOUD_PAYLOAD_TAGGING_SERVICES
([#&#8203;8595](DataDog/dd-trace-java#8595) -
[@&#8203;joeyzhao2018](https://github.com/joeyzhao2018))
#### Azure Functions instrumentation
- ✨ Enable tracer computed trace metrics by default for Azure
Functions
([#&#8203;8518](DataDog/dd-trace-java#8518) -
[@&#8203;duncanpharvey](https://github.com/duncanpharvey))
- 💡 Add azure-functions instrumentation
([#&#8203;8432](DataDog/dd-trace-java#8432) -
[@&#8203;duncanpharvey](https://github.com/duncanpharvey))
#### Core Java language instrumentation
- 🐛 Fix ForkJoinPool.execute() instrumentation on Java 21+
([#&#8203;8560](DataDog/dd-trace-java#8560) -
[@&#8203;PerfectSlayer](https://github.com/PerfectSlayer))
#### Eclipse Vert.x instrumentation
- ✨ Add vertx postgresql client instrumentation
([#&#8203;8471](DataDog/dd-trace-java#8471) -
[@&#8203;vandonr](https://github.com/vandonr) - thanks for the
contribution!)
#### Kafka instrumentation
- ✨ Support and test kafka-clients 4
([#&#8203;8581](DataDog/dd-trace-java#8581) -
[@&#8203;amarziali](https://github.com/amarziali))
#### Kotlin instrumentation
- ✨ Avoid disconnected traces when using Kotlin flowOn
([#&#8203;8651](DataDog/dd-trace-java#8651) -
[@&#8203;mcculls](https://github.com/mcculls))
#### OpenTelemetry instrumentation
- 🧹 Migrate OtelContext wrapper to new internal Context API
([#&#8203;8645](DataDog/dd-trace-java#8645) -
[@&#8203;mcculls](https://github.com/mcculls))
#### Spring instrumentation
- 🐛 Support CompletableFuture on spring webmvc controllers
([#&#8203;8659](DataDog/dd-trace-java#8659) -
[@&#8203;amarziali](https://github.com/amarziali))
- ✨ Add support for endpoint discovery in spring mvc
([#&#8203;8352](DataDog/dd-trace-java#8352) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
#### WebSocket Instrumentation
- ✨ Instrument Jetty websocket pojo
([#&#8203;8562](DataDog/dd-trace-java#8562) -
[@&#8203;amarziali](https://github.com/amarziali))
- 💡 Instrument Java Websocket API (JSR356)
([#&#8203;8440](DataDog/dd-trace-java#8440) -
[@&#8203;amarziali](https://github.com/amarziali))
#### All other instrumentations
- ✨ Introduce cache for peer.hostname lookup
([#&#8203;8601](DataDog/dd-trace-java#8601) -
[@&#8203;mcculls](https://github.com/mcculls))
- ✨ Support pekko http 1.1
([#&#8203;8532](DataDog/dd-trace-java#8532) -
[@&#8203;amarziali](https://github.com/amarziali))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am
every weekday" in timezone Australia/Melbourne, Automerge - At any time
(no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://github.com/renovatebot/renovate).
GitOrigin-RevId: 331314f71acaced3adc75ea5d7e855c248d593fc
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

comp: asm wafApplication Security Management (WAF)type: featureEnhancements and improvements

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

@manuel-alvarez-alvarez@smola@PerfectSlayer@sezen-datadog