Bump ddtrace from 4.4.0 to 4.5.2

[dependabot]

Bumps ddtrace from 4.4.0 to 4.5.2.

Release notes

Sourced from ddtrace's releases.

4.5.2

Estimated end-of-life date, accurate to within three months: 05-2027 See the support level definitions for more information.

Bug Fixes

• Add a timeout to Unix socket connections to prevent thread I/O hangs during pre-fork shutdown.

4.5.1

Estimated end-of-life date, accurate to within three months: 05-2027 See the support level definitions for more information.

⚠️ Known issues

We have identified a bug where workloads relying on fork could encounter crashes post-fork due to a race condition. We are currently working on a fix.

Bug Fixes

• AAP: Fixes a memory corruption issue where concurrent calls to the WAF on the same request context from multiple threads (e.g. an asyncio event loop and a thread pool executor inheriting the same context via contextvars) could cause use-after-free or double-free crashes (SIGSEGV) inside libddwaf. A per-context lock now serializes WAF calls on the same context.

• CI Visibility: Fixed an incompatibility with pytest-html and other third-party reporting plugins caused by the ddtrace pytest plugin using a non-standard dd_retry test outcome for retry attempts. The outcome is now set to rerun, which is the standard value used by pytest-rerunfailures and recognized by reporting plugins.

4.5.0

Estimated end-of-life date, accurate to within three months: 05-2027 See the support level definitions for more information.

⚠️ Known issues

We have identified a bug where workloads relying on fork could encounter crashes post-fork due to a race condition. We are currently working on a fix.

Upgrade Notes

• dynamic instrumentation
  • log probes now use the debugger intake track. This requires Datadog agent version 7.49.0 or above.
• CI Visibility
  • Official release of the new version of the pytest plugin, with architectural improvements. This new version uses an independent span writer for Test Optimization (similar to the DD_CIVISIBILITY_USE_BETA_WRITER option), and also contains performance and memory usage improvements. A beta version of the plugin had been available since v4.2.0, and could be enabled via the DD_PYTEST_USE_NEW_PLUGIN environment variable. This new version is now the default, and the environment variable can be used to revert to the previous plugin if used with false or 0 values.

Deprecation Notes

• tracing
  • DD_TRACE_128_BIT_TRACEID_GENERATION_ENABLED is deprecated and will be removed in version 5.0.0. 128-bit trace ID generation will become mandatory.
• The tracer parameter is deprecated in the following functions and class methods and will be removed in version 5.0.0:
  • aiohttp: trace_app
  • asgi: TraceMiddleware.__init__
  • bottle: TracePlugin.__init__
  • cherrypy: TraceMiddleware.__init__
  • falcon: TraceMiddleware.__init__

... (truncated)

Commits

• 6761c66 chore: increase version (#16810)
• 0e9d258 fix: timeout for uds socket (backport 4.5) (#16778)
• 1360240 ci(llmobs): fix brittle llmobs agentless writer tests (#16773) (#16792)
• 9234d50 ci: remove all-green check (#16782) [backport 4.5] (#16785)
• f969fc4 chore(ci): update st hash (#16761)
• 5d48b8e fix(aap): fix possible memory corruption in WAF context [backport 4.5] (#16755)
• bdedb37 ci: pin test agent in hatch.toml [backport #16652 to 4.5] (#16742)
• 4bd9cd5 fix(ci_visibility): replace dd_retry with rerun [backport #16692 to 4.5] (#16...
• 07f371f chore: set version to 4.5.1 (#16707)
• 15d168b set stable version to 4.5.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)