Skip to content

chore(deps): bump dd-trace from 5.110.0 to 6.3.0 - #403

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dd-trace-6.0.0
Open

chore(deps): bump dd-trace from 5.110.0 to 6.3.0#403
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dd-trace-6.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps dd-trace from 5.110.0 to 6.3.0.

Release notes

Sourced from dd-trace's releases.

6.3.0

Features

  • @​modelcontextprotocol/sdk: Add tracing for MCP server requests and client operations #8916
  • General: Sample event loop delay per iteration on Node 26.5+ #9273
  • LLM Observability: Propagate session_id to following spans and across services MLOB-7756 #9279

Fixes

  • AppSec: Instrument cookie parseCookie for cookie >=1.1 #9272
  • AppSec: Log the error when the native WAF binding fails to load #9288
  • AppSec: Suppress informational responses after blocking requests #9290
  • azure: Enable Web Crypto on Node 18 #9311
  • azure-functions: Fix span links and missing telemetry for non-HTTP triggers #9278
  • General: Handle invalid programmatic option values #9312
  • graphql: Honor errorExtensions on the mercurius request span #9284
  • OpenTelemetry: Wire span processors passed to the provider constructor #9285
  • Test Optimization: Do not mark unchanged tests as impacted #9314
  • Test Optimization: Handle disabled tests in serial retries #9313
  • Test Optimization: Omit empty FTR capture containers #9304

Internal (CI, Testing, Benchmarking)

  • AppSec: Deflake api-security telemetry metrics integration tests #9303
  • General: Select version targets by Node.js runtime #9306
  • lint: Revert editorconfig checker from npm to docker #9315
  • OpenTelemetry: Deflake OTLP metrics HTTP export test with fake timers #9287
  • readme: Update eol column for v5 #9267

6.2.0

Features

  • graphql: Add mercurius support with a top-level graphql.request span #9142

Fixes

  • AppSec: Report request headers on Lambda spans when AppSec is enabled #9257
  • General: Avoid rewriter source map marker in source #9212
  • General: Skip loader hook registration when instrumentation bails out #9242
  • guardrails: Forward abort telemetry synchronously to avoid a hung exit #9268
  • instrumentations: Preserve asyncEnd wait with code-transformer 0.16 #9256
  • msgpack: Cap MsgpackChunk growth at the agent intake limit #8672
  • OpenTelemetry: Wrap sdk-trace TracerProvider for sdk-node 0.220+ #9255
  • ssi: Run ssi in current proposal branch #9223
  • Test Optimization: Stop propagating metadata to workers #9261

Documentation

  • Serverless: Add serverless integrations skill #9188

Internal (CI, Testing, Benchmarking)

  • benchmarks: Support BP_EXTERNAL_S3_URL override #9155
  • guardrails: Skip node 24 initialize runtime checks #9283

... (truncated)

Commits
  • a20ae3c v6.3.0
  • 93ee9e0 feat(llmobs): propagate session_id to following spans and across services [ML...
  • cfb3aba chore(deps): bump the gh-actions-packages group across 2 directories with 3 u...
  • 91bb6ae chore(deps-dev): bump the dev-minor-and-patch-dependencies group across 2 dir...
  • 33363d7 ci(lint): revert editorconfig checker from npm to docker (#9315)
  • 1664e80 fix(opentelemetry): wire span processors passed to the provider constructor (...
  • f952191 feat(@​modelcontextprotocol/sdk): add tracing for MCP server requests and clie...
  • f45b239 fix(config): handle invalid programmatic option values (#9312)
  • c638996 feat(runtime-metrics): sample event loop delay per iteration on Node 26.5+ (#...
  • f47a60e fix(playwright): do not mark unchanged tests as impacted (#9314)
  • Additional commits viewable in compare view
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


@dependabot @github

dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from vgpastor as a code owner July 13, 2026 11:01
@vercel

vercel Bot commented Jul 13, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
response-grid Ready Ready Preview, Comment Jul 22, 2026 9:31am

Request Review

Bumps [dd-trace](https://github.com/DataDog/dd-trace-js) from 5.110.0 to 6.3.0.
- [Release notes](https://github.com/DataDog/dd-trace-js/releases)
- [Commits](DataDog/dd-trace-js@v5.110.0...v6.3.0)

---
updated-dependencies:
- dependency-name: dd-trace
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump dd-trace from 5.110.0 to 6.0.0 chore(deps): bump dd-trace from 5.110.0 to 6.3.0 Jul 22, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dd-trace-6.0.0 branch from a062eff to db4f1c1 Compare July 22, 2026 09:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants