Skip to content

1.16.0
Compare
Choose a tag to compare
@github-actions github-actions released this 03 Nov 20:50
· 2770 commits to master since this release
v1.16.0
242d338
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

This release includes a security change for the Tracing Redis integration:

Currently, the Datadog Agent removes command arguments from the resource name. However there are cases, like Redis compressed keys, where this obfuscation cannot correctly remove command arguments. To safeguard that situation, the resource name set by the tracer will only be the command (e.g. SET) with no arguments. To retain the previous behavior and keep arguments in the span resource, with the potential risk of some command arguments not being fully obfuscated, set DD_REDIS_COMMAND_ARGS=true or set the option c.instrument :redis, command_args: true.

Added

  • Tracing: Propagate trace through Concurrent::Promises.future (#1522)
  • Core: Name Datadog::Core::Remote::Worker thread (#3207)

Changed

  • Tracing: Redis - Omit command arguments from span.resource by default (#3235)
  • Ci-app: Bump datadog-ci dependency from 0.2.0 to 0.3.0 (#3223)

Fixed

  • Appsec: ASM parse response body (#3153)
  • Appsec: ASM make sure to append content type and length information (#3204)
  • Appsec: Make sure function that checks content-type header value accepts nil content-type header value (#3234)
  • Profiling: Shut down profiler if any components failed (#3197)
  • Tracing: Fix ActiveSupport instrumentation of custom cache stores (#3206)

Read the full changeset and the release milestone.

Assets 3
Loading