Skip to content

Improve detection of missing request end events - #8510

Merged
smola merged 1 commit into
masterfrom
smola/request-end-event
Mar 5, 2025
Merged

Improve detection of missing request end events#8510
smola merged 1 commit into
masterfrom
smola/request-end-event

Conversation

@smola

@smolasmola commented Mar 5, 2025

Copy link
Copy Markdown
Member

What Does This Do

Improve detection of missing or out of order request events.

Motivation

This has been a problem for a while, and there are still some cases with unknown root cause.

Additional Notes

Contributor Checklist

Jira ticket: [PROJ-IDENT]

@smolasmola added type: feature Enhancements and improvements comp: asm waf Application Security Management (WAF) labels Mar 5, 2025
@pr-commenter

pr-commenterBot commented Mar 5, 2025

Copy link
Copy Markdown

Benchmarks

Startup

Parameters

BaselineCandidate
baseline_or_candidatebaselinecandidate
git_branchmastersmola/request-end-event
git_commit_date17411966611741196809
git_commit_shac779bc9934d39e
release_version1.48.0-SNAPSHOT~c779bc93f31.48.0-SNAPSHOT~934d39e757
See matching parameters
BaselineCandidate
applicationinsecure-bankinsecure-bank
ci_job_date17411992411741199241
ci_job_id834269199834269199
ci_pipeline_id5782594357825943
cpu_modelIntel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHzIntel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_versionLinux runner-upmzzdd-project-304-concurrent-0-88dah3dl 6.8.0-1021-aws #23~22.04.1-Ubuntu SMP Tue Dec 10 16:50:46 UTC 2024 x86_64 x86_64 x86_64 GNU/LinuxLinux runner-upmzzdd-project-304-concurrent-0-88dah3dl 6.8.0-1021-aws #23~22.04.1-Ubuntu SMP Tue Dec 10 16:50:46 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
moduleAgentAgent
parentNoneNone
variantiastiast

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 55 metrics, 8 unstable metrics.

Startup time reports for insecure-bank
gantt
title insecure-bank - global startup overhead: candidate=1.48.0-SNAPSHOT~934d39e757, baseline=1.48.0-SNAPSHOT~c779bc93f3
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.053 s) : 0, 1053407
Total [baseline] (8.688 s) : 0, 8687950
Agent [candidate] (1.039 s) : 0, 1039415
Total [candidate] (8.652 s) : 0, 8651694
section iast
Agent [baseline] (1.18 s) : 0, 1180318
Total [baseline] (9.272 s) : 0, 9272104
Agent [candidate] (1.195 s) : 0, 1194642
Total [candidate] (9.266 s) : 0, 9266202
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.177 s) : 0, 1176975
Total [baseline] (9.208 s) : 0, 9208219
Agent [candidate] (1.17 s) : 0, 1170197
Total [candidate] (9.19 s) : 0, 9189801
section iast_TELEMETRY_OFF
Agent [baseline] (1.172 s) : 0, 1171838
Total [baseline] (9.203 s) : 0, 9203410
Agent [candidate] (1.167 s) : 0, 1166990
Total [candidate] (9.217 s) : 0, 9216771
Loading
  • baseline results
ModuleVariantDurationΔ tracing
Agenttracing1.053 s-
Agentiast1.18 s126.911 ms (12.0%)
Agentiast_HARDCODED_SECRET_DISABLED1.177 s123.568 ms (11.7%)
Agentiast_TELEMETRY_OFF1.172 s118.431 ms (11.2%)
Totaltracing8.688 s-
Totaliast9.272 s584.154 ms (6.7%)
Totaliast_HARDCODED_SECRET_DISABLED9.208 s520.269 ms (6.0%)
Totaliast_TELEMETRY_OFF9.203 s515.459 ms (5.9%)
  • candidate results
ModuleVariantDurationΔ tracing
Agenttracing1.039 s-
Agentiast1.195 s155.227 ms (14.9%)
Agentiast_HARDCODED_SECRET_DISABLED1.17 s130.782 ms (12.6%)
Agentiast_TELEMETRY_OFF1.167 s127.576 ms (12.3%)
Totaltracing8.652 s-
Totaliast9.266 s614.508 ms (7.1%)
Totaliast_HARDCODED_SECRET_DISABLED9.19 s538.108 ms (6.2%)
Totaliast_TELEMETRY_OFF9.217 s565.077 ms (6.5%)
gantt
title insecure-bank - break down per module: candidate=1.48.0-SNAPSHOT~934d39e757, baseline=1.48.0-SNAPSHOT~c779bc93f3
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (726.027 ms) : 0, 726027
BytebuddyAgent [candidate] (716.4 ms) : 0, 716400
GlobalTracer [baseline] (240.814 ms) : 0, 240814
GlobalTracer [candidate] (239.303 ms) : 0, 239303
AppSec [baseline] (55.79 ms) : 0, 55790
AppSec [candidate] (55.202 ms) : 0, 55202
Remote Config [baseline] (707.428 µs) : 0, 707
Remote Config [candidate] (688.981 µs) : 0, 689
Telemetry [baseline] (14.894 ms) : 0, 14894
Telemetry [candidate] (12.862 ms) : 0, 12862
section iast
BytebuddyAgent [baseline] (843.841 ms) : 0, 843841
BytebuddyAgent [candidate] (855.448 ms) : 0, 855448
GlobalTracer [baseline] (231.867 ms) : 0, 231867
GlobalTracer [candidate] (233.744 ms) : 0, 233744
AppSec [baseline] (57.118 ms) : 0, 57118
AppSec [candidate] (56.466 ms) : 0, 56466
Remote Config [baseline] (627.679 µs) : 0, 628
Remote Config [candidate] (661.709 µs) : 0, 662
Telemetry [baseline] (8.839 ms) : 0, 8839
Telemetry [candidate] (8.821 ms) : 0, 8821
IAST [baseline] (22.983 ms) : 0, 22983
IAST [candidate] (24.078 ms) : 0, 24078
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (841.881 ms) : 0, 841881
BytebuddyAgent [candidate] (836.446 ms) : 0, 836446
GlobalTracer [baseline] (231.213 ms) : 0, 231213
GlobalTracer [candidate] (230.323 ms) : 0, 230323
AppSec [baseline] (56.734 ms) : 0, 56734
AppSec [candidate] (56.225 ms) : 0, 56225
Remote Config [baseline] (613.733 µs) : 0, 614
Remote Config [candidate] (607.847 µs) : 0, 608
Telemetry [baseline] (8.653 ms) : 0, 8653
Telemetry [candidate] (8.634 ms) : 0, 8634
IAST [baseline] (22.827 ms) : 0, 22827
IAST [candidate] (22.891 ms) : 0, 22891
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (837.236 ms) : 0, 837236
BytebuddyAgent [candidate] (833.443 ms) : 0, 833443
GlobalTracer [baseline] (231.222 ms) : 0, 231222
GlobalTracer [candidate] (230.567 ms) : 0, 230567
AppSec [baseline] (56.717 ms) : 0, 56717
AppSec [candidate] (56.582 ms) : 0, 56582
Remote Config [baseline] (613.527 µs) : 0, 614
Remote Config [candidate] (618.303 µs) : 0, 618
Telemetry [baseline] (8.606 ms) : 0, 8606
Telemetry [candidate] (8.528 ms) : 0, 8528
IAST [baseline] (22.449 ms) : 0, 22449
IAST [candidate] (22.284 ms) : 0, 22284
Loading
Startup time reports for petclinic
gantt
title petclinic - global startup overhead: candidate=1.48.0-SNAPSHOT~934d39e757, baseline=1.48.0-SNAPSHOT~c779bc93f3
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.043 s) : 0, 1042776
Total [baseline] (10.489 s) : 0, 10489211
Agent [candidate] (1.038 s) : 0, 1037563
Total [candidate] (10.423 s) : 0, 10423039
section appsec
Agent [baseline] (1.185 s) : 0, 1184740
Total [baseline] (10.759 s) : 0, 10758955
Agent [candidate] (1.183 s) : 0, 1182523
Total [candidate] (10.708 s) : 0, 10708230
section iast
Agent [baseline] (1.172 s) : 0, 1172336
Total [baseline] (10.94 s) : 0, 10939848
Agent [candidate] (1.174 s) : 0, 1173980
Total [candidate] (10.977 s) : 0, 10976633
section profiling
Agent [baseline] (1.257 s) : 0, 1256934
Total [baseline] (10.849 s) : 0, 10849142
Agent [candidate] (1.268 s) : 0, 1267787
Total [candidate] (10.842 s) : 0, 10841808
Loading
  • baseline results
ModuleVariantDurationΔ tracing
Agenttracing1.043 s-
Agentappsec1.185 s141.964 ms (13.6%)
Agentiast1.172 s129.56 ms (12.4%)
Agentprofiling1.257 s214.157 ms (20.5%)
Totaltracing10.489 s-
Totalappsec10.759 s269.745 ms (2.6%)
Totaliast10.94 s450.637 ms (4.3%)
Totalprofiling10.849 s359.931 ms (3.4%)
  • candidate results
ModuleVariantDurationΔ tracing
Agenttracing1.038 s-
Agentappsec1.183 s144.96 ms (14.0%)
Agentiast1.174 s136.417 ms (13.1%)
Agentprofiling1.268 s230.224 ms (22.2%)
Totaltracing10.423 s-
Totalappsec10.708 s285.19 ms (2.7%)
Totaliast10.977 s553.593 ms (5.3%)
Totalprofiling10.842 s418.769 ms (4.0%)
gantt
title petclinic - break down per module: candidate=1.48.0-SNAPSHOT~934d39e757, baseline=1.48.0-SNAPSHOT~c779bc93f3
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (718.287 ms) : 0, 718287
BytebuddyAgent [candidate] (715.672 ms) : 0, 715672
GlobalTracer [baseline] (240.973 ms) : 0, 240973
GlobalTracer [candidate] (239.011 ms) : 0, 239011
AppSec [baseline] (55.623 ms) : 0, 55623
AppSec [candidate] (54.948 ms) : 0, 54948
Remote Config [baseline] (705.974 µs) : 0, 706
Remote Config [candidate] (693.244 µs) : 0, 693
Telemetry [baseline] (12.226 ms) : 0, 12226
Telemetry [candidate] (12.217 ms) : 0, 12217
section appsec
BytebuddyAgent [baseline] (735.753 ms) : 0, 735753
BytebuddyAgent [candidate] (734.197 ms) : 0, 734197
GlobalTracer [baseline] (236.925 ms) : 0, 236925
GlobalTracer [candidate] (236.287 ms) : 0, 236287
AppSec [baseline] (176.817 ms) : 0, 176817
AppSec [candidate] (176.984 ms) : 0, 176984
Remote Config [baseline] (673.662 µs) : 0, 674
Remote Config [candidate] (666.435 µs) : 0, 666
Telemetry [baseline] (8.704 ms) : 0, 8704
Telemetry [candidate] (8.659 ms) : 0, 8659
IAST [baseline] (21.675 ms) : 0, 21675
IAST [candidate] (21.585 ms) : 0, 21585
section iast
BytebuddyAgent [baseline] (838.478 ms) : 0, 838478
BytebuddyAgent [candidate] (837.717 ms) : 0, 837717
GlobalTracer [baseline] (230.601 ms) : 0, 230601
GlobalTracer [candidate] (232.071 ms) : 0, 232071
AppSec [baseline] (55.701 ms) : 0, 55701
AppSec [candidate] (56.904 ms) : 0, 56904
Remote Config [baseline] (605.407 µs) : 0, 605
Remote Config [candidate] (626.558 µs) : 0, 627
Telemetry [baseline] (8.597 ms) : 0, 8597
Telemetry [candidate] (8.715 ms) : 0, 8715
IAST [baseline] (23.29 ms) : 0, 23290
IAST [candidate] (22.95 ms) : 0, 22950
section profiling
BytebuddyAgent [baseline] (707.462 ms) : 0, 707462
BytebuddyAgent [candidate] (714.416 ms) : 0, 714416
GlobalTracer [baseline] (347.934 ms) : 0, 347934
GlobalTracer [candidate] (351.585 ms) : 0, 351585
AppSec [baseline] (54.984 ms) : 0, 54984
AppSec [candidate] (54.283 ms) : 0, 54283
Remote Config [baseline] (667.584 µs) : 0, 668
Remote Config [candidate] (676.252 µs) : 0, 676
Telemetry [baseline] (8.885 ms) : 0, 8885
Telemetry [candidate] (8.938 ms) : 0, 8938
ProfilingAgent [baseline] (96.651 ms) : 0, 96651
ProfilingAgent [candidate] (97.272 ms) : 0, 97272
Profiling [baseline] (96.676 ms) : 0, 96676
Profiling [candidate] (97.296 ms) : 0, 97296
Loading

Load

Parameters

BaselineCandidate
baseline_or_candidatebaselinecandidate
end_time2025-03-05T17:57:412025-03-05T18:05:26
git_branchmastersmola/request-end-event
git_commit_date17411966611741196809
git_commit_shac779bc9934d39e
release_version1.48.0-SNAPSHOT~c779bc93f31.48.0-SNAPSHOT~934d39e757
start_time2025-03-05T17:57:272025-03-05T18:05:12
See matching parameters
BaselineCandidate
applicationinsecure-bankinsecure-bank
ci_job_date17411983261741198326
ci_job_id834269200834269200
ci_pipeline_id5782594357825943
cpu_modelIntel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHzIntel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_versionLinux runner-mxhwuccu-project-304-concurrent-0-shaeouaz 6.8.0-1021-aws #23~22.04.1-Ubuntu SMP Tue Dec 10 16:50:46 UTC 2024 x86_64 x86_64 x86_64 GNU/LinuxLinux runner-mxhwuccu-project-304-concurrent-0-shaeouaz 6.8.0-1021-aws #23~22.04.1-Ubuntu SMP Tue Dec 10 16:50:46 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
variantiastiast

Summary

Found 0 performance improvements and 1 performance regressions! Performance is the same for 13 metrics, 16 unstable metrics.

scenarioΔ mean http_req_durationΔ mean throughputcandidate mean http_req_durationcandidate mean throughputbaseline mean http_req_durationbaseline mean throughput
scenario:load:petclinic:profilingworse
[+41.518µs; +92.983µs] or [+2.725%; +6.102%]
unstable
[-653.564op/s; +425.644op/s] or [-21.241%; +13.833%]
1.591ms2962.963op/s1.524ms3076.923op/s
Request duration reports for petclinic
gantt
title petclinic - request duration [CI 0.99] : candidate=1.48.0-SNAPSHOT~934d39e757, baseline=1.48.0-SNAPSHOT~c779bc93f3
dateFormat X
axisFormat %s
section baseline
no_agent (1.347 ms) : 1328, 1367
. : milestone, 1347,
appsec (1.737 ms) : 1713, 1761
. : milestone, 1737,
appsec_no_iast (1.723 ms) : 1699, 1748
. : milestone, 1723,
code_origins (1.709 ms) : 1676, 1742
. : milestone, 1709,
iast (1.525 ms) : 1500, 1550
. : milestone, 1525,
profiling (1.524 ms) : 1500, 1547
. : milestone, 1524,
tracing (1.489 ms) : 1464, 1514
. : milestone, 1489,
section candidate
no_agent (1.358 ms) : 1338, 1377
. : milestone, 1358,
appsec (1.729 ms) : 1705, 1753
. : milestone, 1729,
appsec_no_iast (1.746 ms) : 1722, 1770
. : milestone, 1746,
code_origins (1.687 ms) : 1654, 1720
. : milestone, 1687,
iast (1.5 ms) : 1476, 1524
. : milestone, 1500,
profiling (1.591 ms) : 1566, 1615
. : milestone, 1591,
tracing (1.494 ms) : 1469, 1519
. : milestone, 1494,
Loading
  • baseline results
VariantRequest duration [CI 0.99]Δ no_agent
no_agent1.347 ms [1.328 ms, 1.367 ms]-
appsec1.737 ms [1.713 ms, 1.761 ms]389.973 µs (28.9%)
appsec_no_iast1.723 ms [1.699 ms, 1.748 ms]376.262 µs (27.9%)
code_origins1.709 ms [1.676 ms, 1.742 ms]362.08 µs (26.9%)
iast1.525 ms [1.5 ms, 1.55 ms]177.704 µs (13.2%)
profiling1.524 ms [1.5 ms, 1.547 ms]176.55 µs (13.1%)
tracing1.489 ms [1.464 ms, 1.514 ms]142.24 µs (10.6%)
  • candidate results
VariantRequest duration [CI 0.99]Δ no_agent
no_agent1.358 ms [1.338 ms, 1.377 ms]-
appsec1.729 ms [1.705 ms, 1.753 ms]371.064 µs (27.3%)
appsec_no_iast1.746 ms [1.722 ms, 1.77 ms]388.025 µs (28.6%)
code_origins1.687 ms [1.654 ms, 1.72 ms]329.266 µs (24.3%)
iast1.5 ms [1.476 ms, 1.524 ms]142.262 µs (10.5%)
profiling1.591 ms [1.566 ms, 1.615 ms]233.288 µs (17.2%)
tracing1.494 ms [1.469 ms, 1.519 ms]136.274 µs (10.0%)
Request duration reports for insecure-bank
gantt
title insecure-bank - request duration [CI 0.99] : candidate=1.48.0-SNAPSHOT~934d39e757, baseline=1.48.0-SNAPSHOT~c779bc93f3
dateFormat X
axisFormat %s
section baseline
no_agent (387.774 µs) : 367, 408
. : milestone, 388,
iast (514.38 µs) : 493, 536
. : milestone, 514,
iast_FULL (733.779 µs) : 712, 756
. : milestone, 734,
iast_GLOBAL (556.801 µs) : 535, 578
. : milestone, 557,
iast_HARDCODED_SECRET_DISABLED (514.067 µs) : 492, 537
. : milestone, 514,
iast_INACTIVE (461.382 µs) : 441, 482
. : milestone, 461,
iast_TELEMETRY_OFF (497.794 µs) : 476, 519
. : milestone, 498,
tracing (463.149 µs) : 442, 484
. : milestone, 463,
section candidate
no_agent (390.876 µs) : 371, 411
. : milestone, 391,
iast (516.421 µs) : 495, 538
. : milestone, 516,
iast_FULL (736.416 µs) : 714, 758
. : milestone, 736,
iast_GLOBAL (560.307 µs) : 539, 582
. : milestone, 560,
iast_HARDCODED_SECRET_DISABLED (516.425 µs) : 493, 539
. : milestone, 516,
iast_INACTIVE (467.193 µs) : 446, 489
. : milestone, 467,
iast_TELEMETRY_OFF (501.15 µs) : 479, 524
. : milestone, 501,
tracing (466.425 µs) : 445, 488
. : milestone, 466,
Loading
  • baseline results
VariantRequest duration [CI 0.99]Δ no_agent
no_agent387.774 µs [367.453 µs, 408.095 µs]-
iast514.38 µs [492.765 µs, 535.995 µs]126.607 µs (32.6%)
iast_FULL733.779 µs [711.779 µs, 755.779 µs]346.005 µs (89.2%)
iast_GLOBAL556.801 µs [535.219 µs, 578.382 µs]169.027 µs (43.6%)
iast_HARDCODED_SECRET_DISABLED514.067 µs [491.526 µs, 536.608 µs]126.293 µs (32.6%)
iast_INACTIVE461.382 µs [440.594 µs, 482.17 µs]73.608 µs (19.0%)
iast_TELEMETRY_OFF497.794 µs [476.199 µs, 519.389 µs]110.02 µs (28.4%)
tracing463.149 µs [442.032 µs, 484.266 µs]75.375 µs (19.4%)
  • candidate results
VariantRequest duration [CI 0.99]Δ no_agent
no_agent390.876 µs [371.166 µs, 410.586 µs]-
iast516.421 µs [494.701 µs, 538.14 µs]125.545 µs (32.1%)
iast_FULL736.416 µs [714.483 µs, 758.348 µs]345.54 µs (88.4%)
iast_GLOBAL560.307 µs [538.797 µs, 581.818 µs]169.431 µs (43.3%)
iast_HARDCODED_SECRET_DISABLED516.425 µs [493.357 µs, 539.494 µs]125.549 µs (32.1%)
iast_INACTIVE467.193 µs [445.561 µs, 488.825 µs]76.317 µs (19.5%)
iast_TELEMETRY_OFF501.15 µs [478.641 µs, 523.659 µs]110.274 µs (28.2%)
tracing466.425 µs [444.754 µs, 488.095 µs]75.549 µs (19.3%)

Dacapo

Parameters

BaselineCandidate
baseline_or_candidatebaselinecandidate
git_branchmastersmola/request-end-event
git_commit_date17411966611741196809
git_commit_shac779bc9934d39e
release_version1.48.0-SNAPSHOT~c779bc93f31.48.0-SNAPSHOT~934d39e757
See matching parameters
BaselineCandidate
applicationbiojavabiojava
ci_job_date17411988111741198811
ci_job_id834269201834269201
ci_pipeline_id5782594357825943
cpu_modelIntel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHzIntel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_versionLinux runner-w3rafupo-project-304-concurrent-0-xjrpnrsl 6.8.0-1021-aws #23~22.04.1-Ubuntu SMP Tue Dec 10 16:50:46 UTC 2024 x86_64 x86_64 x86_64 GNU/LinuxLinux runner-w3rafupo-project-304-concurrent-0-xjrpnrsl 6.8.0-1021-aws #23~22.04.1-Ubuntu SMP Tue Dec 10 16:50:46 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
variantappsecappsec

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics.

Execution time for biojava
gantt
title biojava - execution time [CI 0.99] : candidate=1.48.0-SNAPSHOT~934d39e757, baseline=1.48.0-SNAPSHOT~c779bc93f3
dateFormat X
axisFormat %s
section baseline
no_agent (15.223 s) : 15223000, 15223000
. : milestone, 15223000,
appsec (14.804 s) : 14804000, 14804000
. : milestone, 14804000,
iast (19.168 s) : 19168000, 19168000
. : milestone, 19168000,
iast_GLOBAL (18.103 s) : 18103000, 18103000
. : milestone, 18103000,
profiling (15.635 s) : 15635000, 15635000
. : milestone, 15635000,
tracing (15.01 s) : 15010000, 15010000
. : milestone, 15010000,
section candidate
no_agent (14.685 s) : 14685000, 14685000
. : milestone, 14685000,
appsec (14.934 s) : 14934000, 14934000
. : milestone, 14934000,
iast (19.152 s) : 19152000, 19152000
. : milestone, 19152000,
iast_GLOBAL (17.972 s) : 17972000, 17972000
. : milestone, 17972000,
profiling (14.867 s) : 14867000, 14867000
. : milestone, 14867000,
tracing (15.131 s) : 15131000, 15131000
. : milestone, 15131000,
Loading
  • baseline results
VariantExecution Time [CI 0.99]Δ no_agent
no_agent15.223 s [15.223 s, 15.223 s]-
appsec14.804 s [14.804 s, 14.804 s]-419.0 ms (-2.8%)
iast19.168 s [19.168 s, 19.168 s]3.945 s (25.9%)
iast_GLOBAL18.103 s [18.103 s, 18.103 s]2.88 s (18.9%)
profiling15.635 s [15.635 s, 15.635 s]412.0 ms (2.7%)
tracing15.01 s [15.01 s, 15.01 s]-213.0 ms (-1.4%)
  • candidate results
VariantExecution Time [CI 0.99]Δ no_agent
no_agent14.685 s [14.685 s, 14.685 s]-
appsec14.934 s [14.934 s, 14.934 s]249.0 ms (1.7%)
iast19.152 s [19.152 s, 19.152 s]4.467 s (30.4%)
iast_GLOBAL17.972 s [17.972 s, 17.972 s]3.287 s (22.4%)
profiling14.867 s [14.867 s, 14.867 s]182.0 ms (1.2%)
tracing15.131 s [15.131 s, 15.131 s]446.0 ms (3.0%)
Execution time for tomcat
gantt
title tomcat - execution time [CI 0.99] : candidate=1.48.0-SNAPSHOT~934d39e757, baseline=1.48.0-SNAPSHOT~c779bc93f3
dateFormat X
axisFormat %s
section baseline
no_agent (1.474 ms) : 1462, 1486
. : milestone, 1474,
appsec (2.35 ms) : 2307, 2394
. : milestone, 2350,
iast (2.118 ms) : 2062, 2173
. : milestone, 2118,
iast_GLOBAL (2.168 ms) : 2112, 2224
. : milestone, 2168,
profiling (1.977 ms) : 1933, 2021
. : milestone, 1977,
tracing (1.937 ms) : 1895, 1979
. : milestone, 1937,
section candidate
no_agent (1.474 ms) : 1463, 1486
. : milestone, 1474,
appsec (2.325 ms) : 2282, 2368
. : milestone, 2325,
iast (2.114 ms) : 2059, 2168
. : milestone, 2114,
iast_GLOBAL (2.155 ms) : 2100, 2211
. : milestone, 2155,
profiling (1.975 ms) : 1932, 2018
. : milestone, 1975,
tracing (1.946 ms) : 1904, 1988
. : milestone, 1946,
Loading
  • baseline results
VariantExecution Time [CI 0.99]Δ no_agent
no_agent1.474 ms [1.462 ms, 1.486 ms]-
appsec2.35 ms [2.307 ms, 2.394 ms]876.363 µs (59.5%)
iast2.118 ms [2.062 ms, 2.173 ms]643.5 µs (43.7%)
iast_GLOBAL2.168 ms [2.112 ms, 2.224 ms]694.059 µs (47.1%)
profiling1.977 ms [1.933 ms, 2.021 ms]503.38 µs (34.1%)
tracing1.937 ms [1.895 ms, 1.979 ms]462.987 µs (31.4%)
  • candidate results
VariantExecution Time [CI 0.99]Δ no_agent
no_agent1.474 ms [1.463 ms, 1.486 ms]-
appsec2.325 ms [2.282 ms, 2.368 ms]850.41 µs (57.7%)
iast2.114 ms [2.059 ms, 2.168 ms]639.323 µs (43.4%)
iast_GLOBAL2.155 ms [2.1 ms, 2.211 ms]681.083 µs (46.2%)
profiling1.975 ms [1.932 ms, 2.018 ms]500.682 µs (34.0%)
tracing1.946 ms [1.904 ms, 1.988 ms]471.284 µs (32.0%)

@smola
smola marked this pull request as ready for review March 5, 2025 08:56
@smola
smola requested a review from a team as a code ownerMarch 5, 2025 08:56
@smola
smola requested review from jandro996 and robertpiMarch 5, 2025 08:56
@smola
smolaforce-pushed the smola/request-end-event branch from e56d234 to 3775fffCompareMarch 5, 2025 15:32
@smola
smola requested a review from a team as a code ownerMarch 5, 2025 15:32
@smola
smola requested review from sezen-datadog and ygreeMarch 5, 2025 15:32

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice :o

@smola
smolaforce-pushed the smola/request-end-event branch from 3775fff to 4b5e1beCompareMarch 5, 2025 17:45
@smola
smolaforce-pushed the smola/request-end-event branch from 4b5e1be to 934d39eCompareMarch 5, 2025 17:47
@smola
smola enabled auto-merge (squash) March 5, 2025 17:47
@smola
smola merged commit 4eaa53b into masterMar 5, 2025
@smola
smola deleted the smola/request-end-event branch March 5, 2025 23:07
@github-actionsgithub-actionsBot added this to the 1.48.0 milestone Mar 5, 2025
svc-squareup-copybara pushed a commit to cashapp/misk that referenced this pull request Apr 11, 2025
| Package | Type | Package file | Manager | Update | Change |
|---|---|---|---|---|---|
| org.flywaydb.flyway | plugin | misk/gradle/libs.versions.toml | gradle
| minor | `11.6.0` -> `11.7.0` |
|
[com.squareup.okio:okio-fakefilesystem](https://github.com/square/okio)
| dependencies | misk/gradle/libs.versions.toml | gradle | minor |
`3.10.2` -> `3.11.0` |
| [com.squareup.okio:okio](https://github.com/square/okio) |
dependencies | misk/gradle/libs.versions.toml | gradle | minor |
`3.10.2` -> `3.11.0` |
|
[com.autonomousapps.dependency-analysis](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin)
| plugin | misk/gradle/libs.versions.toml | gradle | minor | `2.15.0` ->
`2.16.0` |
| [com.datadoghq:dd-trace-api](https://github.com/datadog/dd-trace-java)
| dependencies | misk/gradle/libs.versions.toml | gradle | minor |
`1.47.3` -> `1.48.1` |
| [com.datadoghq:dd-trace-ot](https://github.com/datadog/dd-trace-java)
| dependencies | misk/gradle/libs.versions.toml | gradle | minor |
`1.47.3` -> `1.48.1` |
| [software.amazon.awssdk:sdk-core](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:sqs](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
|
[software.amazon.awssdk:dynamodb-enhanced](https://aws.amazon.com/sdkforjava)
| dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:dynamodb](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:aws-core](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:bom](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:auth](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
---
### Release Notes
<details>
<summary>square/okio (com.squareup.okio:okio-fakefilesystem)</summary>
###
[`v3.11.0`](https://github.com/square/okio/blob/HEAD/CHANGELOG.md#Version-3110)
*2025-04-09*
- Fix: Clear the deflater's byte array reference
- New: Faster implementation of `String.decodeHex()` on Kotlin/JS.
- New: Declare `EXACTLY_ONCE` execution for blocks like `Closeable.use
{}` and `FileSystem.read {}`.
- Upgrade: \[Kotlin 2.1.20]\[kotlin\_2\_1\_20].
</details>
<details>
<summary>autonomousapps/dependency-analysis-android-gradle-plugin
(com.autonomousapps.dependency-analysis)</summary>
###
[`v2.16.0`](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin/blob/HEAD/CHANGELOG.md#Version-2160)
- \[Feat]: support `com.android.test` projects.
- \[Feat]: support typesafe project accessors with opt-in.
```kotlin
dependencyAnalysis {
useTypesafeProjectAccessors(true) // false by default
}
```
</details>
<details>
<summary>datadog/dd-trace-java (com.datadoghq:dd-trace-api)</summary>
###
[`v1.48.1`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.48.1):
1.48.1
### Components
#### Tracer internal logging
- 🐛 Remove print line causing unnecessary logs
([#&#8203;8687](DataDog/dd-trace-java#8687) -
[@&#8203;sarahchen6](https://github.com/sarahchen6))
###
[`v1.48.0`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.48.0):
1.48.0
### Known Bugs
> \[!NOTE]
> If you are experiencing issues with spamming timeout logs, please
update to the [latest
version](https://github.com/DataDog/dd-trace-java/releases/latest) or
set
[JDK_SOCKET_ENABLED](https://github.com/DataDog/dd-trace-java/blob/33fc3c9a9b7cda3beda88b8b3e5224ae2b10764a/dd-trace-api/src/main/java/datadog/trace/api/config/GeneralConfig.java#L98)
to false.
### Components
#### Application Security Management (IAST)
- ✨ Fix vulnerability location org.jose4j.lang.HashUtil
([#&#8203;8610](DataDog/dd-trace-java#8610) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Fix weak randomness in oracle.ucp.util.OpaqueString
([#&#8203;8609](DataDog/dd-trace-java#8609) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Fix weak hash false positive in
oracle.security.o5logon.O5Logon
([#&#8203;8608](DataDog/dd-trace-java#8608) -
[@&#8203;jandro996](https://github.com/jandro996))
- 🐛 Prevent before callsites targeting constructors in super calls
([#&#8203;8549](DataDog/dd-trace-java#8549) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
#### Application Security Management (WAF)
- ✨ Update login events public SDK to V2
([#&#8203;8620](DataDog/dd-trace-java#8620) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- 🐛 Send RASP LFI capability only when AppSec is statically enabled
([#&#8203;8573](DataDog/dd-trace-java#8573) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Improve detection of missing request end events
([#&#8203;8510](DataDog/dd-trace-java#8510) -
[@&#8203;smola](https://github.com/smola))
- 🧹 Remove remote configuration for API Security sampling rate
([#&#8203;8486](DataDog/dd-trace-java#8486) -
[@&#8203;smola](https://github.com/smola))
- ✨ Add setUser to user monitoring SDK
([#&#8203;8482](DataDog/dd-trace-java#8482) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- ✨ Add missing address for signup event
([#&#8203;8469](DataDog/dd-trace-java#8469) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- ✨ Allow login events SDK to be used with appsec disabled
([#&#8203;8464](DataDog/dd-trace-java#8464) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- ✨ Add support for endpoint discovery in spring mvc
([#&#8203;8352](DataDog/dd-trace-java#8352) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- ✨ New API Security sampling algorithm
([#&#8203;8178](DataDog/dd-trace-java#8178) -
[@&#8203;ValentinZakharov](https://github.com/ValentinZakharov))
#### Build & Tooling
- ✨ Add buffer size customizability to JDK UDS support
([#&#8203;8629](DataDog/dd-trace-java#8629) -
[@&#8203;sarahchen6](https://github.com/sarahchen6))
- ✨ Add JDK built-in support for UDS on Java 16+
([#&#8203;8314](DataDog/dd-trace-java#8314) -
[@&#8203;sarahchen6](https://github.com/sarahchen6))
#### Configuration at Runtime
- 🐛 Send RASP LFI capability only when AppSec is statically enabled
([#&#8203;8573](DataDog/dd-trace-java#8573) -
[@&#8203;jandro996](https://github.com/jandro996))
#### Continuous Integration Visibility
- 🐛 Prevent double reporting of Scalatest events when using SBT with
test forking
([#&#8203;8682](DataDog/dd-trace-java#8682) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- 🐛 Shutdown CI Visibility test event handlers before tracer
([#&#8203;8677](DataDog/dd-trace-java#8677) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- 🐛 Do not apply JUnit 4 instrumentation to MUnit runners
([#&#8203;8675](DataDog/dd-trace-java#8675),
[#&#8203;8683](DataDog/dd-trace-java#8683) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- ✨ Remove error log when source path resolution fails on
isModified check
([#&#8203;8663](DataDog/dd-trace-java#8663) -
[@&#8203;daniel-mohedano](https://github.com/daniel-mohedano))
- ✨ Implement tests reordering for JUnit 4
([#&#8203;8650](DataDog/dd-trace-java#8650) -
[@&#8203;daniel-mohedano](https://github.com/daniel-mohedano))
- 🐛 Set default Attempt to Fix retries if none provided from the
backend
([#&#8203;8615](DataDog/dd-trace-java#8615) -
[@&#8203;daniel-mohedano](https://github.com/daniel-mohedano))
- ✨ Allow to manually set PR info
([#&#8203;8566](DataDog/dd-trace-java#8566) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- 🐛 Fix Test Optimization init when repo root cannot be determined
([#&#8203;8533](DataDog/dd-trace-java#8533) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- ✨ Add capabilities tagging
([#&#8203;8499](DataDog/dd-trace-java#8499),
[#&#8203;8540](DataDog/dd-trace-java#8540) -
[@&#8203;daniel-mohedano](https://github.com/daniel-mohedano))
#### Crash tracking
- 🐛 Remove dependency on bash from crash/oome uploder scripts
([#&#8203;8652](DataDog/dd-trace-java#8652) -
[@&#8203;jbachorik](https://github.com/jbachorik))
#### Data Streams Monitoring
- ✨ e2e pipeline configuration when data jobs is enabled
([#&#8203;8553](DataDog/dd-trace-java#8553) -
[@&#8203;kr-igor](https://github.com/kr-igor))
#### Dynamic Instrumentation
- 🐛 Fix In-Product when config is empty
([#&#8203;8679](DataDog/dd-trace-java#8679) -
[@&#8203;jpbempel](https://github.com/jpbempel))
- ✨ Add support for filtering shaded third-party libs
([#&#8203;8612](DataDog/dd-trace-java#8612) -
[@&#8203;jpbempel](https://github.com/jpbempel))
- ✨ Add In-Product Enablement
([#&#8203;8587](DataDog/dd-trace-java#8587) -
[@&#8203;jpbempel](https://github.com/jpbempel))
- ✨⚡ Reduce footprint of SourceFile tracking
([#&#8203;8524](DataDog/dd-trace-java#8524) -
[@&#8203;jpbempel](https://github.com/jpbempel))
- ✨⚡ Optimize the SourceFile tracking
([#&#8203;8520](DataDog/dd-trace-java#8520) -
[@&#8203;jpbempel](https://github.com/jpbempel))
#### OpenTracing
- 🧹 Remove activeScope() use in OpenTracing shim
([#&#8203;8478](DataDog/dd-trace-java#8478) -
[@&#8203;mcculls](https://github.com/mcculls))
#### Profiling
- ✨ Add profiler env check command to AgentCLI
([#&#8203;8671](DataDog/dd-trace-java#8671) -
[@&#8203;jbachorik](https://github.com/jbachorik))
- ✨ Bump ddprof to 1.23.0
([#&#8203;8668](DataDog/dd-trace-java#8668) -
[@&#8203;jbachorik](https://github.com/jbachorik))
- Fix a crash related to ElfParser::loadSymbolTable
([#&#8203;191](DataDog/dd-trace-java#191)) by
[@&#8203;yanglong1010](https://github.com/yanglong1010) in
DataDog/java-profiler#192
- Unwind String.indexOf intrinsic on AArch64 by
[@&#8203;MattAlp](https://github.com/MattAlp) in
DataDog/java-profiler#193
- Fix Java 24 support by
[@&#8203;jbachorik](https://github.com/jbachorik) in
DataDog/java-profiler#194
- A set of fixes related to clang, aarch64 and musl pecularities of
vmstructs stack unwinder by
[@&#8203;jbachorik](https://github.com/jbachorik) in
DataDog/java-profiler#199
- 🐛 Remove process information from JFR recording
([#&#8203;8661](DataDog/dd-trace-java#8661) -
[@&#8203;r1viollet](https://github.com/r1viollet))
- 🐛 Make TempLocationManager USER aware
([#&#8203;8605](DataDog/dd-trace-java#8605) -
[@&#8203;jbachorik](https://github.com/jbachorik))
- ✨ Extract git tags from embedded git.properties and
datadog_git.properties
([#&#8203;8561](DataDog/dd-trace-java#8561) -
[@&#8203;wmouchere](https://github.com/wmouchere))
#### Telemetry
- 🐛 Fix appsec.rasp.error and appsec.waf.error telemetry metrics
([#&#8203;8624](DataDog/dd-trace-java#8624) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Create metric: appsec.rasp.rule.skipped
([#&#8203;8618](DataDog/dd-trace-java#8618) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Extract git tags from embedded git.properties and
datadog_git.properties
([#&#8203;8561](DataDog/dd-trace-java#8561) -
[@&#8203;wmouchere](https://github.com/wmouchere))
#### Testing
- 🧹 Simplify ssi tests one-pipeline
([#&#8203;8558](DataDog/dd-trace-java#8558) -
[@&#8203;robertomonteromiguel](https://github.com/robertomonteromiguel))
- ✨ Add smoke tests for java's concurrent API
([#&#8203;8438](DataDog/dd-trace-java#8438) -
[@&#8203;sarahchen6](https://github.com/sarahchen6))
#### Trace context propagation
- ✨ Adding Support for `TRACE_PROPAGATION_BEHAVIOR_EXTRACT`
([#&#8203;8535](DataDog/dd-trace-java#8535) -
[@&#8203;mhlidd](https://github.com/mhlidd))
#### Tracer core
- 🐛 Ensure shaded helpers have unique names
([#&#8203;8559](DataDog/dd-trace-java#8559) -
[@&#8203;amarziali](https://github.com/amarziali))
- ✨ Support common config sources for user-provided git info
([#&#8203;8547](DataDog/dd-trace-java#8547) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- ✨ Make the default config sources more robust when a security
manager is installed
([#&#8203;8544](DataDog/dd-trace-java#8544) -
[@&#8203;mcculls](https://github.com/mcculls))
- ✨ Support targeting services with configurations in stable
configuration file
([#&#8203;8526](DataDog/dd-trace-java#8526) -
[@&#8203;mtoffl01](https://github.com/mtoffl01))
- ✨ Add new parser for `DD_TAGS` and prioritizing `DD_SERVICE`
([#&#8203;8296](DataDog/dd-trace-java#8296) -
[@&#8203;mhlidd](https://github.com/mhlidd))
#### Tracer internal logging
- 🐛 Add missing debug log for the cloudPayloadTaggingServices config
([#&#8203;8600](DataDog/dd-trace-java#8600) -
[@&#8203;ygree](https://github.com/ygree))
- ✨ Add the possibility to output the logs of the Java tracer
in JSON
([#&#8203;8083](DataDog/dd-trace-java#8083) -
[@&#8203;cecile75](https://github.com/cecile75))
#### Tracer public API
- ✨ Introducing `DD_TRACE_EXPERIMENTAL_FEATURES_ENABLED` Config
([#&#8203;8536](DataDog/dd-trace-java#8536) -
[@&#8203;mhlidd](https://github.com/mhlidd))
- ✨ Config Consistency Round 2
([#&#8203;8489](DataDog/dd-trace-java#8489) -
[@&#8203;mhlidd](https://github.com/mhlidd))
### Instrumentations
####
- 🐛 Fix NPE in getMdcCopy of LoggingEventInstrumentation
([#&#8203;8599](DataDog/dd-trace-java#8599) -
[@&#8203;ygree](https://github.com/ygree))
#### Apache Spark instrumentation
- ✨ Instrument Runtime.exit() to finish spark application spans
([#&#8203;8572](DataDog/dd-trace-java#8572) -
[@&#8203;paul-laffon-dd](https://github.com/paul-laffon-dd))
- ✨ Configure OpenLineage if present in Spark instrumentation
([#&#8203;8541](DataDog/dd-trace-java#8541) -
[@&#8203;mobuchowski](https://github.com/mobuchowski))
#### Armeria Instrumentation
- ✨ Support armeria grpc 1.32.3
([#&#8203;8606](DataDog/dd-trace-java#8606) -
[@&#8203;github-actions](https://github.com/github-actions)\[bot])
#### AWS DynamoDB Instrumentation
- ✨ Create DynamoDB instrumentation + add span pointers for
`updateItem` and `deleteItem`
([#&#8203;8490](DataDog/dd-trace-java#8490) -
[@&#8203;nhulston](https://github.com/nhulston))
#### AWS SDK instrumentation
- ✨ Add DynamoDB in
DEFAULT_TRACE_CLOUD_PAYLOAD_TAGGING_SERVICES
([#&#8203;8595](DataDog/dd-trace-java#8595) -
[@&#8203;joeyzhao2018](https://github.com/joeyzhao2018))
#### Azure Functions instrumentation
- ✨ Enable tracer computed trace metrics by default for Azure
Functions
([#&#8203;8518](DataDog/dd-trace-java#8518) -
[@&#8203;duncanpharvey](https://github.com/duncanpharvey))
- 💡 Add azure-functions instrumentation
([#&#8203;8432](DataDog/dd-trace-java#8432) -
[@&#8203;duncanpharvey](https://github.com/duncanpharvey))
#### Core Java language instrumentation
- 🐛 Fix ForkJoinPool.execute() instrumentation on Java 21+
([#&#8203;8560](DataDog/dd-trace-java#8560) -
[@&#8203;PerfectSlayer](https://github.com/PerfectSlayer))
#### Eclipse Vert.x instrumentation
- ✨ Add vertx postgresql client instrumentation
([#&#8203;8471](DataDog/dd-trace-java#8471) -
[@&#8203;vandonr](https://github.com/vandonr) - thanks for the
contribution!)
#### Kafka instrumentation
- ✨ Support and test kafka-clients 4
([#&#8203;8581](DataDog/dd-trace-java#8581) -
[@&#8203;amarziali](https://github.com/amarziali))
#### Kotlin instrumentation
- ✨ Avoid disconnected traces when using Kotlin flowOn
([#&#8203;8651](DataDog/dd-trace-java#8651) -
[@&#8203;mcculls](https://github.com/mcculls))
#### OpenTelemetry instrumentation
- 🧹 Migrate OtelContext wrapper to new internal Context API
([#&#8203;8645](DataDog/dd-trace-java#8645) -
[@&#8203;mcculls](https://github.com/mcculls))
#### Spring instrumentation
- 🐛 Support CompletableFuture on spring webmvc controllers
([#&#8203;8659](DataDog/dd-trace-java#8659) -
[@&#8203;amarziali](https://github.com/amarziali))
- ✨ Add support for endpoint discovery in spring mvc
([#&#8203;8352](DataDog/dd-trace-java#8352) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
#### WebSocket Instrumentation
- ✨ Instrument Jetty websocket pojo
([#&#8203;8562](DataDog/dd-trace-java#8562) -
[@&#8203;amarziali](https://github.com/amarziali))
- 💡 Instrument Java Websocket API (JSR356)
([#&#8203;8440](DataDog/dd-trace-java#8440) -
[@&#8203;amarziali](https://github.com/amarziali))
#### All other instrumentations
- ✨ Introduce cache for peer.hostname lookup
([#&#8203;8601](DataDog/dd-trace-java#8601) -
[@&#8203;mcculls](https://github.com/mcculls))
- ✨ Support pekko http 1.1
([#&#8203;8532](DataDog/dd-trace-java#8532) -
[@&#8203;amarziali](https://github.com/amarziali))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am
every weekday" in timezone Australia/Melbourne, Automerge - At any time
(no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://github.com/renovatebot/renovate).
GitOrigin-RevId: 331314f71acaced3adc75ea5d7e855c248d593fc
eizus pushed a commit to cdrxyz/misk that referenced this pull request Jul 18, 2026
| Package | Type | Package file | Manager | Update | Change |
|---|---|---|---|---|---|
| org.flywaydb.flyway | plugin | misk/gradle/libs.versions.toml | gradle
| minor | `11.6.0` -> `11.7.0` |
|
[com.squareup.okio:okio-fakefilesystem](https://github.com/square/okio)
| dependencies | misk/gradle/libs.versions.toml | gradle | minor |
`3.10.2` -> `3.11.0` |
| [com.squareup.okio:okio](https://github.com/square/okio) |
dependencies | misk/gradle/libs.versions.toml | gradle | minor |
`3.10.2` -> `3.11.0` |
|
[com.autonomousapps.dependency-analysis](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin)
| plugin | misk/gradle/libs.versions.toml | gradle | minor | `2.15.0` ->
`2.16.0` |
| [com.datadoghq:dd-trace-api](https://github.com/datadog/dd-trace-java)
| dependencies | misk/gradle/libs.versions.toml | gradle | minor |
`1.47.3` -> `1.48.1` |
| [com.datadoghq:dd-trace-ot](https://github.com/datadog/dd-trace-java)
| dependencies | misk/gradle/libs.versions.toml | gradle | minor |
`1.47.3` -> `1.48.1` |
| [software.amazon.awssdk:sdk-core](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:sqs](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
|
[software.amazon.awssdk:dynamodb-enhanced](https://aws.amazon.com/sdkforjava)
| dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:dynamodb](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:aws-core](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:bom](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
| [software.amazon.awssdk:auth](https://aws.amazon.com/sdkforjava) |
dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.31.18` -> `2.31.20` |
---
### Release Notes
<details>
<summary>square/okio (com.squareup.okio:okio-fakefilesystem)</summary>
###
[`v3.11.0`](https://github.com/square/okio/blob/HEAD/CHANGELOG.md#Version-3110)
*2025-04-09*
- Fix: Clear the deflater's byte array reference
- New: Faster implementation of `String.decodeHex()` on Kotlin/JS.
- New: Declare `EXACTLY_ONCE` execution for blocks like `Closeable.use
{}` and `FileSystem.read {}`.
- Upgrade: \[Kotlin 2.1.20]\[kotlin\_2\_1\_20].
</details>
<details>
<summary>autonomousapps/dependency-analysis-android-gradle-plugin
(com.autonomousapps.dependency-analysis)</summary>
###
[`v2.16.0`](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin/blob/HEAD/CHANGELOG.md#Version-2160)
- \[Feat]: support `com.android.test` projects.
- \[Feat]: support typesafe project accessors with opt-in.
```kotlin
dependencyAnalysis {
useTypesafeProjectAccessors(true) // false by default
}
```
</details>
<details>
<summary>datadog/dd-trace-java (com.datadoghq:dd-trace-api)</summary>
###
[`v1.48.1`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.48.1):
1.48.1
### Components
#### Tracer internal logging
- 🐛 Remove print line causing unnecessary logs
([#&#8203;8687](DataDog/dd-trace-java#8687) -
[@&#8203;sarahchen6](https://github.com/sarahchen6))
###
[`v1.48.0`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.48.0):
1.48.0
### Known Bugs
> \[!NOTE]
> If you are experiencing issues with spamming timeout logs, please
update to the [latest
version](https://github.com/DataDog/dd-trace-java/releases/latest) or
set
[JDK_SOCKET_ENABLED](https://github.com/DataDog/dd-trace-java/blob/33fc3c9a9b7cda3beda88b8b3e5224ae2b10764a/dd-trace-api/src/main/java/datadog/trace/api/config/GeneralConfig.java#L98)
to false.
### Components
#### Application Security Management (IAST)
- ✨ Fix vulnerability location org.jose4j.lang.HashUtil
([#&#8203;8610](DataDog/dd-trace-java#8610) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Fix weak randomness in oracle.ucp.util.OpaqueString
([#&#8203;8609](DataDog/dd-trace-java#8609) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Fix weak hash false positive in
oracle.security.o5logon.O5Logon
([#&#8203;8608](DataDog/dd-trace-java#8608) -
[@&#8203;jandro996](https://github.com/jandro996))
- 🐛 Prevent before callsites targeting constructors in super calls
([#&#8203;8549](DataDog/dd-trace-java#8549) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
#### Application Security Management (WAF)
- ✨ Update login events public SDK to V2
([#&#8203;8620](DataDog/dd-trace-java#8620) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- 🐛 Send RASP LFI capability only when AppSec is statically enabled
([#&#8203;8573](DataDog/dd-trace-java#8573) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Improve detection of missing request end events
([#&#8203;8510](DataDog/dd-trace-java#8510) -
[@&#8203;smola](https://github.com/smola))
- 🧹 Remove remote configuration for API Security sampling rate
([#&#8203;8486](DataDog/dd-trace-java#8486) -
[@&#8203;smola](https://github.com/smola))
- ✨ Add setUser to user monitoring SDK
([#&#8203;8482](DataDog/dd-trace-java#8482) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- ✨ Add missing address for signup event
([#&#8203;8469](DataDog/dd-trace-java#8469) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- ✨ Allow login events SDK to be used with appsec disabled
([#&#8203;8464](DataDog/dd-trace-java#8464) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- ✨ Add support for endpoint discovery in spring mvc
([#&#8203;8352](DataDog/dd-trace-java#8352) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
- ✨ New API Security sampling algorithm
([#&#8203;8178](DataDog/dd-trace-java#8178) -
[@&#8203;ValentinZakharov](https://github.com/ValentinZakharov))
#### Build & Tooling
- ✨ Add buffer size customizability to JDK UDS support
([#&#8203;8629](DataDog/dd-trace-java#8629) -
[@&#8203;sarahchen6](https://github.com/sarahchen6))
- ✨ Add JDK built-in support for UDS on Java 16+
([#&#8203;8314](DataDog/dd-trace-java#8314) -
[@&#8203;sarahchen6](https://github.com/sarahchen6))
#### Configuration at Runtime
- 🐛 Send RASP LFI capability only when AppSec is statically enabled
([#&#8203;8573](DataDog/dd-trace-java#8573) -
[@&#8203;jandro996](https://github.com/jandro996))
#### Continuous Integration Visibility
- 🐛 Prevent double reporting of Scalatest events when using SBT with
test forking
([#&#8203;8682](DataDog/dd-trace-java#8682) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- 🐛 Shutdown CI Visibility test event handlers before tracer
([#&#8203;8677](DataDog/dd-trace-java#8677) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- 🐛 Do not apply JUnit 4 instrumentation to MUnit runners
([#&#8203;8675](DataDog/dd-trace-java#8675),
[#&#8203;8683](DataDog/dd-trace-java#8683) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- ✨ Remove error log when source path resolution fails on
isModified check
([#&#8203;8663](DataDog/dd-trace-java#8663) -
[@&#8203;daniel-mohedano](https://github.com/daniel-mohedano))
- ✨ Implement tests reordering for JUnit 4
([#&#8203;8650](DataDog/dd-trace-java#8650) -
[@&#8203;daniel-mohedano](https://github.com/daniel-mohedano))
- 🐛 Set default Attempt to Fix retries if none provided from the
backend
([#&#8203;8615](DataDog/dd-trace-java#8615) -
[@&#8203;daniel-mohedano](https://github.com/daniel-mohedano))
- ✨ Allow to manually set PR info
([#&#8203;8566](DataDog/dd-trace-java#8566) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- 🐛 Fix Test Optimization init when repo root cannot be determined
([#&#8203;8533](DataDog/dd-trace-java#8533) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- ✨ Add capabilities tagging
([#&#8203;8499](DataDog/dd-trace-java#8499),
[#&#8203;8540](DataDog/dd-trace-java#8540) -
[@&#8203;daniel-mohedano](https://github.com/daniel-mohedano))
#### Crash tracking
- 🐛 Remove dependency on bash from crash/oome uploder scripts
([#&#8203;8652](DataDog/dd-trace-java#8652) -
[@&#8203;jbachorik](https://github.com/jbachorik))
#### Data Streams Monitoring
- ✨ e2e pipeline configuration when data jobs is enabled
([#&#8203;8553](DataDog/dd-trace-java#8553) -
[@&#8203;kr-igor](https://github.com/kr-igor))
#### Dynamic Instrumentation
- 🐛 Fix In-Product when config is empty
([#&#8203;8679](DataDog/dd-trace-java#8679) -
[@&#8203;jpbempel](https://github.com/jpbempel))
- ✨ Add support for filtering shaded third-party libs
([#&#8203;8612](DataDog/dd-trace-java#8612) -
[@&#8203;jpbempel](https://github.com/jpbempel))
- ✨ Add In-Product Enablement
([#&#8203;8587](DataDog/dd-trace-java#8587) -
[@&#8203;jpbempel](https://github.com/jpbempel))
- ✨⚡ Reduce footprint of SourceFile tracking
([#&#8203;8524](DataDog/dd-trace-java#8524) -
[@&#8203;jpbempel](https://github.com/jpbempel))
- ✨⚡ Optimize the SourceFile tracking
([#&#8203;8520](DataDog/dd-trace-java#8520) -
[@&#8203;jpbempel](https://github.com/jpbempel))
#### OpenTracing
- 🧹 Remove activeScope() use in OpenTracing shim
([#&#8203;8478](DataDog/dd-trace-java#8478) -
[@&#8203;mcculls](https://github.com/mcculls))
#### Profiling
- ✨ Add profiler env check command to AgentCLI
([#&#8203;8671](DataDog/dd-trace-java#8671) -
[@&#8203;jbachorik](https://github.com/jbachorik))
- ✨ Bump ddprof to 1.23.0
([#&#8203;8668](DataDog/dd-trace-java#8668) -
[@&#8203;jbachorik](https://github.com/jbachorik))
- Fix a crash related to ElfParser::loadSymbolTable
([#&#8203;191](DataDog/dd-trace-java#191)) by
[@&#8203;yanglong1010](https://github.com/yanglong1010) in
DataDog/java-profiler#192
- Unwind String.indexOf intrinsic on AArch64 by
[@&#8203;MattAlp](https://github.com/MattAlp) in
DataDog/java-profiler#193
- Fix Java 24 support by
[@&#8203;jbachorik](https://github.com/jbachorik) in
DataDog/java-profiler#194
- A set of fixes related to clang, aarch64 and musl pecularities of
vmstructs stack unwinder by
[@&#8203;jbachorik](https://github.com/jbachorik) in
DataDog/java-profiler#199
- 🐛 Remove process information from JFR recording
([#&#8203;8661](DataDog/dd-trace-java#8661) -
[@&#8203;r1viollet](https://github.com/r1viollet))
- 🐛 Make TempLocationManager USER aware
([#&#8203;8605](DataDog/dd-trace-java#8605) -
[@&#8203;jbachorik](https://github.com/jbachorik))
- ✨ Extract git tags from embedded git.properties and
datadog_git.properties
([#&#8203;8561](DataDog/dd-trace-java#8561) -
[@&#8203;wmouchere](https://github.com/wmouchere))
#### Telemetry
- 🐛 Fix appsec.rasp.error and appsec.waf.error telemetry metrics
([#&#8203;8624](DataDog/dd-trace-java#8624) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Create metric: appsec.rasp.rule.skipped
([#&#8203;8618](DataDog/dd-trace-java#8618) -
[@&#8203;jandro996](https://github.com/jandro996))
- ✨ Extract git tags from embedded git.properties and
datadog_git.properties
([#&#8203;8561](DataDog/dd-trace-java#8561) -
[@&#8203;wmouchere](https://github.com/wmouchere))
#### Testing
- 🧹 Simplify ssi tests one-pipeline
([#&#8203;8558](DataDog/dd-trace-java#8558) -
[@&#8203;robertomonteromiguel](https://github.com/robertomonteromiguel))
- ✨ Add smoke tests for java's concurrent API
([#&#8203;8438](DataDog/dd-trace-java#8438) -
[@&#8203;sarahchen6](https://github.com/sarahchen6))
#### Trace context propagation
- ✨ Adding Support for `TRACE_PROPAGATION_BEHAVIOR_EXTRACT`
([#&#8203;8535](DataDog/dd-trace-java#8535) -
[@&#8203;mhlidd](https://github.com/mhlidd))
#### Tracer core
- 🐛 Ensure shaded helpers have unique names
([#&#8203;8559](DataDog/dd-trace-java#8559) -
[@&#8203;amarziali](https://github.com/amarziali))
- ✨ Support common config sources for user-provided git info
([#&#8203;8547](DataDog/dd-trace-java#8547) -
[@&#8203;nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog))
- ✨ Make the default config sources more robust when a security
manager is installed
([#&#8203;8544](DataDog/dd-trace-java#8544) -
[@&#8203;mcculls](https://github.com/mcculls))
- ✨ Support targeting services with configurations in stable
configuration file
([#&#8203;8526](DataDog/dd-trace-java#8526) -
[@&#8203;mtoffl01](https://github.com/mtoffl01))
- ✨ Add new parser for `DD_TAGS` and prioritizing `DD_SERVICE`
([#&#8203;8296](DataDog/dd-trace-java#8296) -
[@&#8203;mhlidd](https://github.com/mhlidd))
#### Tracer internal logging
- 🐛 Add missing debug log for the cloudPayloadTaggingServices config
([#&#8203;8600](DataDog/dd-trace-java#8600) -
[@&#8203;ygree](https://github.com/ygree))
- ✨ Add the possibility to output the logs of the Java tracer
in JSON
([#&#8203;8083](DataDog/dd-trace-java#8083) -
[@&#8203;cecile75](https://github.com/cecile75))
#### Tracer public API
- ✨ Introducing `DD_TRACE_EXPERIMENTAL_FEATURES_ENABLED` Config
([#&#8203;8536](DataDog/dd-trace-java#8536) -
[@&#8203;mhlidd](https://github.com/mhlidd))
- ✨ Config Consistency Round 2
([#&#8203;8489](DataDog/dd-trace-java#8489) -
[@&#8203;mhlidd](https://github.com/mhlidd))
### Instrumentations
####
- 🐛 Fix NPE in getMdcCopy of LoggingEventInstrumentation
([#&#8203;8599](DataDog/dd-trace-java#8599) -
[@&#8203;ygree](https://github.com/ygree))
#### Apache Spark instrumentation
- ✨ Instrument Runtime.exit() to finish spark application spans
([#&#8203;8572](DataDog/dd-trace-java#8572) -
[@&#8203;paul-laffon-dd](https://github.com/paul-laffon-dd))
- ✨ Configure OpenLineage if present in Spark instrumentation
([#&#8203;8541](DataDog/dd-trace-java#8541) -
[@&#8203;mobuchowski](https://github.com/mobuchowski))
#### Armeria Instrumentation
- ✨ Support armeria grpc 1.32.3
([#&#8203;8606](DataDog/dd-trace-java#8606) -
[@&#8203;github-actions](https://github.com/github-actions)\[bot])
#### AWS DynamoDB Instrumentation
- ✨ Create DynamoDB instrumentation + add span pointers for
`updateItem` and `deleteItem`
([#&#8203;8490](DataDog/dd-trace-java#8490) -
[@&#8203;nhulston](https://github.com/nhulston))
#### AWS SDK instrumentation
- ✨ Add DynamoDB in
DEFAULT_TRACE_CLOUD_PAYLOAD_TAGGING_SERVICES
([#&#8203;8595](DataDog/dd-trace-java#8595) -
[@&#8203;joeyzhao2018](https://github.com/joeyzhao2018))
#### Azure Functions instrumentation
- ✨ Enable tracer computed trace metrics by default for Azure
Functions
([#&#8203;8518](DataDog/dd-trace-java#8518) -
[@&#8203;duncanpharvey](https://github.com/duncanpharvey))
- 💡 Add azure-functions instrumentation
([#&#8203;8432](DataDog/dd-trace-java#8432) -
[@&#8203;duncanpharvey](https://github.com/duncanpharvey))
#### Core Java language instrumentation
- 🐛 Fix ForkJoinPool.execute() instrumentation on Java 21+
([#&#8203;8560](DataDog/dd-trace-java#8560) -
[@&#8203;PerfectSlayer](https://github.com/PerfectSlayer))
#### Eclipse Vert.x instrumentation
- ✨ Add vertx postgresql client instrumentation
([#&#8203;8471](DataDog/dd-trace-java#8471) -
[@&#8203;vandonr](https://github.com/vandonr) - thanks for the
contribution!)
#### Kafka instrumentation
- ✨ Support and test kafka-clients 4
([#&#8203;8581](DataDog/dd-trace-java#8581) -
[@&#8203;amarziali](https://github.com/amarziali))
#### Kotlin instrumentation
- ✨ Avoid disconnected traces when using Kotlin flowOn
([#&#8203;8651](DataDog/dd-trace-java#8651) -
[@&#8203;mcculls](https://github.com/mcculls))
#### OpenTelemetry instrumentation
- 🧹 Migrate OtelContext wrapper to new internal Context API
([#&#8203;8645](DataDog/dd-trace-java#8645) -
[@&#8203;mcculls](https://github.com/mcculls))
#### Spring instrumentation
- 🐛 Support CompletableFuture on spring webmvc controllers
([#&#8203;8659](DataDog/dd-trace-java#8659) -
[@&#8203;amarziali](https://github.com/amarziali))
- ✨ Add support for endpoint discovery in spring mvc
([#&#8203;8352](DataDog/dd-trace-java#8352) -
[@&#8203;manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez))
#### WebSocket Instrumentation
- ✨ Instrument Jetty websocket pojo
([#&#8203;8562](DataDog/dd-trace-java#8562) -
[@&#8203;amarziali](https://github.com/amarziali))
- 💡 Instrument Java Websocket API (JSR356)
([#&#8203;8440](DataDog/dd-trace-java#8440) -
[@&#8203;amarziali](https://github.com/amarziali))
#### All other instrumentations
- ✨ Introduce cache for peer.hostname lookup
([#&#8203;8601](DataDog/dd-trace-java#8601) -
[@&#8203;mcculls](https://github.com/mcculls))
- ✨ Support pekko http 1.1
([#&#8203;8532](DataDog/dd-trace-java#8532) -
[@&#8203;amarziali](https://github.com/amarziali))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am
every weekday" in timezone Australia/Melbourne, Automerge - At any time
(no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://github.com/renovatebot/renovate).
GitOrigin-RevId: 331314f71acaced3adc75ea5d7e855c248d593fc
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

comp: asm wafApplication Security Management (WAF)type: featureEnhancements and improvements

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@smola@jandro996@sezen-datadog