chore(deps): bump ddtrace from 3.9.4 to 3.10.0

[dependabot]

Bumps ddtrace from 3.9.4 to 3.10.0.

Release notes

Sourced from ddtrace's releases.

3.10.0

Deprecation Notes

• Dynamic Instrumentation:
  • The DD_DYNAMIC_INSTRUMENTATION_UPLOAD_FLUSH_INTERVAL environment variable has been deprecated in favor of DD_DYNAMIC_INSTRUMENTATION_UPLOAD_INTERVAL_SECONDS. The old environment variable will be removed in a future major release.
• Tracing
  • The escaped and timestamp arguments in the record_exception method are deprecated and will be removed in version 4.0.0.

New Features

• DSM:
  • Add flag in set_consume_checkpoint() to indicate if DSM checkpoint was manually set.
• Tracing:
  • Adds the environment variable DD_RUNTIME_METRICS_RUNTIME_ID_ENABLED to enable runtime metrics for tagging runtime metrics with the current runtime ID. This is useful for tracking runtime metrics across multiple processes. Previously, this was DD_TRACE_EXPERIMENTAL_RUNTIME_ID_ENABLED.
  • azure_servicebus: Add support for Azure Service Bus producers.
  • azure_functions: Adds messaging span attributes for service bus triggers
  • azure_functions: Add distributed tracing support for Service Bus triggers.
  • ddtrace-api: Adds patching of ddtrace_api.tracer.set_tags to the ddtrace_api integration
  • loguru,structlog,logbook:
    • Enable trace-log correlation for structured loggers by default.
    • Adds support for trace-log correlation via remote configuration. Previously, this functionality was only available for Python’s built-in logging library.
• Dynamic Instrumentation:
  • Code Origins for Spans is now automatically enabled when Dynamic Instrumentation is turned on.
• LLM Observability:
  • Introduces tracing support for bedrock-agent-runtime invoke_agent calls. If bedrock agents tracing is enabled, the internal bedrock traces will be converted and submitted as LLM Observability spans.
  • Adds support for configuring proxy URLs for LLM Observability using the DD_LLMOBS_INSTRUMENTED_PROXY_URLS environment variable or by enabling LLM Observability with the instrumented_proxy_urls argument. Spans sent to a proxy URL will now show up as workflow spans instead of LLM spans.
  • Adds LLM Observability tracing support for the OpenAI Responses endpoint.
  • google_genai: Introduces tracing support for Google's Generative AI SDK for Python's generate_content and generate_content_stream methods. See the docs for more information.
  • pydantic_ai: Introduces tracing support for PydanticAI's Agent.iter and Tool.run methods. See the docs for more information.
• CI Visibility:
  • This introduces preliminary support to link children pytest-xdist tests (and test suites and test modules) to their parent sessions, instead of being sent as independent sessions.
• Exception Replay:
  • Added in-product enablement support.
• Code Security (IAST):
  • Handle IAST security controls custom validation and sanitization methods. See the Security Controls documentation for more information about this feature.
• Profiling:
  • Add gevent support to the new stack sampling mechanism (stack v2).
• AAP:
  • This introduces the WAF trace tagging feature. This feature enables Datadog’s security research team to efficiently gather API security findings without generating appsec events, which bypass tracer sampling mechanisms. As an example, trace-tagging rules can be used to add attributes to traces with details about the signing algorithm and expiration of a JWT token with the goal of providing authentication-related findings.

Bug Fixes

• Tracing:
  • algoliasearch: Fix for algoliasearch dangling reference.
  • This resolves a TypeError in encoding when truncating a large bytes object.
  • Resolves a sampling issue where agent-based sampling rates were not correctly applied after a process forked or the tracer was reconfigured.
  • Resolves a bug where os.system or subprocess.Popen could return the wrong exception type.
  • This fix resolves an issue in which traced nested generator functions had their execution order subtly changed in a way that affected the stack unwinding sequence during exception handling. The issue was caused by the tracer's use of simple iteration via for v in g: yield v during the wrapping of generator functions where full bidrectional communication with the sub-generator via yield from g was appropriate. See PEP380 for an explanation of how these two generator uses differ.

... (truncated)

Commits

• 3292584 feat(azure_functions): add messaging attributes to azure function service bus...
• d9a1237 chore(azure_servicebus): use azure.servicebus.send for operation (#13829)
• 90f089d ci(benchmarks): skip slow startup benchmarks (#13845)
• 07c7c53 ci: fix macrobenchmark trigger to run on rc releases (#13846)
• cdc3c5f ci(crashtracker): refactor crash report listening logic (#13839)
• f4ac9fd feat(llmobs): [MLOB-2989] add pydantic_ai instrumentation (#13621)
• 1e77400 docs: update release pandoc script (#13837)
• 5d10180 fix: generator wrapping with Python 3.10 (#13835)
• d49d74e chore(aap): add updates and requests to private info tag (#13834)
• a54e0fb chore(ci): riotize appsec_integrations_flask (#13833)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)