deps(example-python): bump ddtrace from 4.10.1 to 4.12.2 in /examples/single_service/src/python-project

[dependabot]

Bumps ddtrace from 4.10.1 to 4.12.2.

Release notes

Sourced from ddtrace's releases.

4.12.2

Bug Fixes

• aws_durable_execution_sdk_python: This fix resolves an issue where a replayed durable operation that had failed permanently reported an incorrect aws.durable.replayed value and an aws.durable.operation_attempt one higher than its original execution.

4.12.1

Bug Fixes

• CI Visibility: This fix resolves an issue where the Datadog UI showed No extra information available when viewing details about why a test was skipped by Intelligent Test Runner, due to missing ITR correlation ID on test or suite events.

• Code Security (IAST): fixes an issue where taint tracking could abort the Python process when old-style % string formatting handled tainted
  text containing literal IAST evidence marker delimiters.

• Code Security (IAST): This fix scopes copy_ranges_from_strings and copy_and_shift_ranges_from_strings to the active request slot, matching
  the scoped taint read path. Previously these copy helpers resolved the taint map by scanning all request slots, so a concurrent or still-open
  request could capture the derived taint and the current request would miss the transformed tainted input.

• LLM Observability: Resolves a TypeError raised during streamed tool-call reconstruction when an OpenAI-compatible backend (e.g.
  DashScope/Qwen) emits a tool-call delta with function.arguments or custom.input set to None instead of "".

• Fix crashes in uwsgi worker when exiting from SIGTERM.

• IAST: A crash occurring when using uvloop has been fixed.

• LLM Observability: Resolves an issue where the OpenAI and LiteLLM integrations reported zero cost for OpenRouter requests using a
  bring-your-own-key setup.

4.12.0

Upgrade Notes

• LLM Observability:
  • When APM and LLMObs are both enabled, the APM trace writer now uses the v0.4 trace API version (v0.5 cannot carry the LLMObs span data). Setting DD_TRACE_API_VERSION=v0.5 with LLMObs enabled logs a warning and downgrades to v0.4. No user action is required.

• ASM:
  • This upgrades libddwaf to 2.0.0.

New Features

• AI Guard:

  • Add AI Guard support for LangChain 1.0+ agents built with create_agent.
  • This introduces the DD_AI_GUARD_OPENAI_ENABLED environment variable (true by default) as a per-provider kill switch. Set it to false to disable AI Guard auto-instrumentation of the OpenAI SDK without affecting other providers or requiring a tracer version rollback.
  • Added opt-in evaluation of streamed OpenAI Chat Completions and Responses via DD_AI_GUARD_ANALYZE_STREAM_RESPONSES_ENABLED (default off); streams are buffered and evaluated before any chunk is delivered, raising AIGuardAbortError on a block.
  • This introduces AI Guard standalone mode. When APM tracing is disabled (DD_APM_TRACING_ENABLED=false), traces produced by AI Guard are still sent to Datadog, kept with USER_KEEP sampling priority and the AI Guard decision maker so that they can be attributed to AI Guard, while APM host billing is not triggered.
  • Add opt-in buffered stream response evaluation for AI Guard on Anthropic streaming calls. When DD_AI_GUARD_ANALYZE_STREAM_RESPONSES_ENABLED=true (default false), all streamed chunks are buffered, the full assistant response is evaluated by AI Guard, and chunks are replayed to the caller only after an ALLOW verdict. On DENY/ABORT, AIGuardAbortError is raised and zero chunks are delivered. When the flag is off (the default), streaming behavior is unchanged.

• AAP:

  • Adds the normalized HTTP route span tag (_dd.appsec.normalized_route) for Tornado, following RFC-1103 and the existing FastAPI, Starlette, Django, and Flask implementations. The tag is emitted on every request span that already carries http.route when the API Security feature is active. Tornado routes using named capturing groups ((?P<name>...)) produce named parameters (e.g. /users/{id}); positional groups produce auto-numbered placeholders (e.g. {param1}). Optional trailing-slash patterns (/?) are treated as not declaring a trailing slash per RFC-1103 rule 1. #18398

... (truncated)

Commits

• 69ecf2d fix(aws_durable_execution_sdk_python): [SVLS-9168] handle FAILED checkpoints ...
• f1b2b87 chore: bump version to 4.12.2 (#19413)
• ddb7608 chore(version): set version to 4.12.1 (#19392)
• 7599b6d chore: raise RSS SLO for tracing-profiling-enabled scenario [backport 4.12] (...
• e20e14b fix(llmobs): coerce None tool-call arguments in openai streamed chunk reconst...
• 31503e2 fix(llmobs): surface OpenRouter BYOK upstream cost [backport 4.12] (#19367)
• 845f8cf fix(native): run shutdown in thread in uwsgi [backport 4.12] (#19345)
• 0298937 fix(iast): handle literal evidence markers in modulo propagation [backport 4....
• 361a9fa chore(iast): preserve propagation during source suppression [backport 4.12] (...
• 357169a fix(ci_visibility): add ITR correlation ID [backport 4.12] (#19241)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, examples, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[datadog-official]

More details

The ddtrace 4.12.2 lockfile resolves with hash checking, imports successfully on Python 3.12, and the example's unittest and pytest paths pass in the available non-Bazel environment. The Bazel targets were not runnable because the sandbox could not access the Bazel Central Registry; no diff-specific behavioral regression was reproduced.

Was this helpful? React 👍 or 👎

_{📊 Validated against 4 scenarios · Open Bits AI session}

_{🤖 Datadog Autotest · Commit 50bdd5f · What is Autotest? · @DataDog review to ask questions · Any feedback? Reach out in #autotest}