-
Notifications
You must be signed in to change notification settings - Fork 290
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove support for X-Forwarded in client IP resolution #7946
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
smola
force-pushed
the
smola/x-forwarded
branch
2 times, most recently
from
November 25, 2024 07:38
c994881
to
b9f3e12
Compare
smola
force-pushed
the
smola/x-forwarded
branch
from
November 25, 2024 08:48
b9f3e12
to
ad3a959
Compare
BenchmarksStartupParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 54 metrics, 9 unstable metrics. Startup time reports for petclinicgantt
title petclinic - global startup overhead: candidate=1.43.0-SNAPSHOT~ad3a95960c, baseline=1.43.0-SNAPSHOT~4925a50233
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.086 s) : 0, 1086427
Total [baseline] (10.605 s) : 0, 10604515
Agent [candidate] (1.094 s) : 0, 1094072
Total [candidate] (10.5 s) : 0, 10499775
section appsec
Agent [baseline] (1.225 s) : 0, 1224960
Total [baseline] (10.724 s) : 0, 10723703
Agent [candidate] (1.224 s) : 0, 1224438
Total [candidate] (10.725 s) : 0, 10725433
section iast
Agent [baseline] (1.222 s) : 0, 1222010
Total [baseline] (10.931 s) : 0, 10931262
Agent [candidate] (1.217 s) : 0, 1216705
Total [candidate] (10.922 s) : 0, 10921906
section profiling
Agent [baseline] (1.316 s) : 0, 1315919
Total [baseline] (10.763 s) : 0, 10762566
Agent [candidate] (1.311 s) : 0, 1310754
Total [candidate] (10.789 s) : 0, 10789219
gantt
title petclinic - break down per module: candidate=1.43.0-SNAPSHOT~ad3a95960c, baseline=1.43.0-SNAPSHOT~4925a50233
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (690.42 ms) : 0, 690420
BytebuddyAgent [candidate] (696.245 ms) : 0, 696245
GlobalTracer [baseline] (316.614 ms) : 0, 316614
GlobalTracer [candidate] (318.847 ms) : 0, 318847
AppSec [baseline] (54.381 ms) : 0, 54381
AppSec [candidate] (55.128 ms) : 0, 55128
Remote Config [baseline] (699.351 µs) : 0, 699
Remote Config [candidate] (692.964 µs) : 0, 693
Telemetry [baseline] (10.638 ms) : 0, 10638
Telemetry [candidate] (9.354 ms) : 0, 9354
section appsec
BytebuddyAgent [baseline] (709.662 ms) : 0, 709662
BytebuddyAgent [candidate] (710.579 ms) : 0, 710579
GlobalTracer [baseline] (315.229 ms) : 0, 315229
GlobalTracer [candidate] (314.203 ms) : 0, 314203
AppSec [baseline] (168.081 ms) : 0, 168081
AppSec [candidate] (166.006 ms) : 0, 166006
IAST [baseline] (19.622 ms) : 0, 19622
IAST [candidate] (20.684 ms) : 0, 20684
Remote Config [baseline] (644.878 µs) : 0, 645
Remote Config [candidate] (646.145 µs) : 0, 646
Telemetry [baseline] (7.882 ms) : 0, 7882
Telemetry [candidate] (8.988 ms) : 0, 8988
section iast
BytebuddyAgent [baseline] (813.725 ms) : 0, 813725
BytebuddyAgent [candidate] (809.507 ms) : 0, 809507
GlobalTracer [baseline] (307.599 ms) : 0, 307599
GlobalTracer [candidate] (306.232 ms) : 0, 306232
AppSec [baseline] (57.832 ms) : 0, 57832
AppSec [candidate] (58.104 ms) : 0, 58104
IAST [baseline] (20.962 ms) : 0, 20962
IAST [candidate] (20.977 ms) : 0, 20977
Remote Config [baseline] (616.618 µs) : 0, 617
Remote Config [candidate] (616.613 µs) : 0, 617
Telemetry [baseline] (7.514 ms) : 0, 7514
Telemetry [candidate] (7.516 ms) : 0, 7516
section profiling
BytebuddyAgent [baseline] (686.925 ms) : 0, 686925
BytebuddyAgent [candidate] (683.742 ms) : 0, 683742
GlobalTracer [baseline] (435.283 ms) : 0, 435283
GlobalTracer [candidate] (432.871 ms) : 0, 432871
AppSec [baseline] (53.728 ms) : 0, 53728
AppSec [candidate] (53.583 ms) : 0, 53583
Remote Config [baseline] (659.63 µs) : 0, 660
Remote Config [candidate] (651.272 µs) : 0, 651
Telemetry [baseline] (7.7 ms) : 0, 7700
Telemetry [candidate] (7.646 ms) : 0, 7646
ProfilingAgent [baseline] (92.665 ms) : 0, 92665
ProfilingAgent [candidate] (93.366 ms) : 0, 93366
Profiling [baseline] (92.688 ms) : 0, 92688
Profiling [candidate] (93.39 ms) : 0, 93390
Startup time reports for insecure-bankgantt
title insecure-bank - global startup overhead: candidate=1.43.0-SNAPSHOT~ad3a95960c, baseline=1.43.0-SNAPSHOT~4925a50233
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.1 s) : 0, 1099679
Total [baseline] (8.73 s) : 0, 8729744
Agent [candidate] (1.096 s) : 0, 1095536
Total [candidate] (8.68 s) : 0, 8679681
section iast
Agent [baseline] (1.224 s) : 0, 1223670
Total [baseline] (9.212 s) : 0, 9211548
Agent [candidate] (1.219 s) : 0, 1219091
Total [candidate] (9.191 s) : 0, 9190900
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.228 s) : 0, 1227999
Total [baseline] (9.184 s) : 0, 9184056
Agent [candidate] (1.214 s) : 0, 1213785
Total [candidate] (9.184 s) : 0, 9184309
section iast_TELEMETRY_OFF
Agent [baseline] (1.223 s) : 0, 1222754
Total [baseline] (9.209 s) : 0, 9209368
Agent [candidate] (1.225 s) : 0, 1225420
Total [candidate] (9.241 s) : 0, 9241109
gantt
title insecure-bank - break down per module: candidate=1.43.0-SNAPSHOT~ad3a95960c, baseline=1.43.0-SNAPSHOT~4925a50233
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (698.812 ms) : 0, 698812
BytebuddyAgent [candidate] (697.746 ms) : 0, 697746
GlobalTracer [baseline] (320.46 ms) : 0, 320460
GlobalTracer [candidate] (318.903 ms) : 0, 318903
AppSec [baseline] (55.107 ms) : 0, 55107
AppSec [candidate] (54.405 ms) : 0, 54405
Remote Config [baseline] (702.89 µs) : 0, 703
Remote Config [candidate] (684.101 µs) : 0, 684
Telemetry [baseline] (10.842 ms) : 0, 10842
Telemetry [candidate] (10.001 ms) : 0, 10001
section iast
BytebuddyAgent [baseline] (814.873 ms) : 0, 814873
BytebuddyAgent [candidate] (810.903 ms) : 0, 810903
GlobalTracer [baseline] (307.483 ms) : 0, 307483
GlobalTracer [candidate] (307.459 ms) : 0, 307459
AppSec [baseline] (57.023 ms) : 0, 57023
AppSec [candidate] (58.026 ms) : 0, 58026
IAST [baseline] (22.404 ms) : 0, 22404
IAST [candidate] (20.839 ms) : 0, 20839
Remote Config [baseline] (605.948 µs) : 0, 606
Remote Config [candidate] (602.769 µs) : 0, 603
Telemetry [baseline] (7.507 ms) : 0, 7507
Telemetry [candidate] (7.496 ms) : 0, 7496
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (816.838 ms) : 0, 816838
BytebuddyAgent [candidate] (808.045 ms) : 0, 808045
GlobalTracer [baseline] (310.338 ms) : 0, 310338
GlobalTracer [candidate] (305.969 ms) : 0, 305969
AppSec [baseline] (58.074 ms) : 0, 58074
AppSec [candidate] (57.371 ms) : 0, 57371
IAST [baseline] (20.827 ms) : 0, 20827
IAST [candidate] (20.697 ms) : 0, 20697
Remote Config [baseline] (605.31 µs) : 0, 605
Remote Config [candidate] (601.251 µs) : 0, 601
Telemetry [baseline] (7.532 ms) : 0, 7532
Telemetry [candidate] (7.391 ms) : 0, 7391
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (812.091 ms) : 0, 812091
BytebuddyAgent [candidate] (815.717 ms) : 0, 815717
GlobalTracer [baseline] (309.596 ms) : 0, 309596
GlobalTracer [candidate] (308.9 ms) : 0, 308900
AppSec [baseline] (58.313 ms) : 0, 58313
AppSec [candidate] (57.43 ms) : 0, 57430
IAST [baseline] (20.81 ms) : 0, 20810
IAST [candidate] (21.41 ms) : 0, 21410
Remote Config [baseline] (656.164 µs) : 0, 656
Remote Config [candidate] (631.016 µs) : 0, 631
Telemetry [baseline] (7.508 ms) : 0, 7508
Telemetry [candidate] (7.491 ms) : 0, 7491
LoadParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 17 unstable metrics. Request duration reports for insecure-bankgantt
title insecure-bank - request duration [CI 0.99] : candidate=1.43.0-SNAPSHOT~ad3a95960c, baseline=1.43.0-SNAPSHOT~4925a50233
dateFormat X
axisFormat %s
section baseline
no_agent (369.61 µs) : 350, 389
. : milestone, 370,
iast (484.912 µs) : 464, 506
. : milestone, 485,
iast_FULL (649.508 µs) : 628, 671
. : milestone, 650,
iast_GLOBAL (517.694 µs) : 495, 540
. : milestone, 518,
iast_HARDCODED_SECRET_DISABLED (485.476 µs) : 464, 507
. : milestone, 485,
iast_INACTIVE (452.831 µs) : 432, 474
. : milestone, 453,
iast_TELEMETRY_OFF (475.57 µs) : 454, 497
. : milestone, 476,
tracing (448.762 µs) : 428, 470
. : milestone, 449,
section candidate
no_agent (378.703 µs) : 358, 399
. : milestone, 379,
iast (488.103 µs) : 467, 510
. : milestone, 488,
iast_FULL (653.075 µs) : 632, 675
. : milestone, 653,
iast_GLOBAL (517.386 µs) : 496, 539
. : milestone, 517,
iast_HARDCODED_SECRET_DISABLED (490.613 µs) : 469, 512
. : milestone, 491,
iast_INACTIVE (450.011 µs) : 428, 472
. : milestone, 450,
iast_TELEMETRY_OFF (484.005 µs) : 462, 506
. : milestone, 484,
tracing (445.791 µs) : 424, 468
. : milestone, 446,
Request duration reports for petclinicgantt
title petclinic - request duration [CI 0.99] : candidate=1.43.0-SNAPSHOT~ad3a95960c, baseline=1.43.0-SNAPSHOT~4925a50233
dateFormat X
axisFormat %s
section baseline
no_agent (1.343 ms) : 1324, 1363
. : milestone, 1343,
appsec (1.742 ms) : 1718, 1766
. : milestone, 1742,
appsec_no_iast (1.766 ms) : 1742, 1790
. : milestone, 1766,
iast (1.497 ms) : 1475, 1519
. : milestone, 1497,
profiling (1.497 ms) : 1473, 1520
. : milestone, 1497,
tracing (1.468 ms) : 1443, 1494
. : milestone, 1468,
section candidate
no_agent (1.359 ms) : 1340, 1379
. : milestone, 1359,
appsec (1.746 ms) : 1722, 1770
. : milestone, 1746,
appsec_no_iast (1.748 ms) : 1724, 1773
. : milestone, 1748,
iast (1.488 ms) : 1465, 1511
. : milestone, 1488,
profiling (1.488 ms) : 1465, 1512
. : milestone, 1488,
tracing (1.463 ms) : 1438, 1487
. : milestone, 1463,
DacapoParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics. Execution time for tomcatgantt
title tomcat - execution time [CI 0.99] : candidate=1.43.0-SNAPSHOT~ad3a95960c, baseline=1.43.0-SNAPSHOT~4925a50233
dateFormat X
axisFormat %s
section baseline
no_agent (1.474 ms) : 1463, 1486
. : milestone, 1474,
appsec (2.361 ms) : 2320, 2403
. : milestone, 2361,
iast (2.103 ms) : 2050, 2156
. : milestone, 2103,
iast_GLOBAL (2.134 ms) : 2082, 2187
. : milestone, 2134,
profiling (1.972 ms) : 1930, 2014
. : milestone, 1972,
tracing (1.939 ms) : 1898, 1980
. : milestone, 1939,
section candidate
no_agent (1.47 ms) : 1458, 1481
. : milestone, 1470,
appsec (2.358 ms) : 2317, 2399
. : milestone, 2358,
iast (2.101 ms) : 2049, 2154
. : milestone, 2101,
iast_GLOBAL (2.136 ms) : 2084, 2189
. : milestone, 2136,
profiling (2.459 ms) : 2270, 2648
. : milestone, 2459,
tracing (1.939 ms) : 1899, 1980
. : milestone, 1939,
Execution time for biojavagantt
title biojava - execution time [CI 0.99] : candidate=1.43.0-SNAPSHOT~ad3a95960c, baseline=1.43.0-SNAPSHOT~4925a50233
dateFormat X
axisFormat %s
section baseline
no_agent (15.473 s) : 15473000, 15473000
. : milestone, 15473000,
appsec (15.111 s) : 15111000, 15111000
. : milestone, 15111000,
iast (18.627 s) : 18627000, 18627000
. : milestone, 18627000,
iast_GLOBAL (18.166 s) : 18166000, 18166000
. : milestone, 18166000,
profiling (14.856 s) : 14856000, 14856000
. : milestone, 14856000,
tracing (14.863 s) : 14863000, 14863000
. : milestone, 14863000,
section candidate
no_agent (15.438 s) : 15438000, 15438000
. : milestone, 15438000,
appsec (14.883 s) : 14883000, 14883000
. : milestone, 14883000,
iast (18.833 s) : 18833000, 18833000
. : milestone, 18833000,
iast_GLOBAL (18.01 s) : 18010000, 18010000
. : milestone, 18010000,
profiling (14.952 s) : 14952000, 14952000
. : milestone, 14952000,
tracing (14.912 s) : 14912000, 14912000
. : milestone, 14912000,
|
manuel-alvarez-alvarez
approved these changes
Nov 28, 2024
svc-squareup-copybara
pushed a commit
to cashapp/misk
that referenced
this pull request
Dec 16, 2024
| Package | Type | Package file | Manager | Update | Change | |---|---|---|---|---|---| | [com.google.api.grpc:proto-google-common-protos](https://github.com/googleapis/sdk-platform-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.49.0` -> `2.50.0` | | [com.google.cloud:google-cloud-core-http](https://github.com/googleapis/sdk-platform-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.48.0` -> `2.49.0` | | [com.google.cloud:google-cloud-spanner](https://github.com/googleapis/java-spanner) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `6.82.0` -> `6.83.0` | | [com.google.cloud:google-cloud-logging](https://github.com/googleapis/java-logging) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `3.20.7` -> `3.21.0` | | [com.google.cloud:google-cloud-datastore](https://github.com/googleapis/java-datastore) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.24.3` -> `2.25.1` | | [com.google.cloud:google-cloud-core](https://github.com/googleapis/sdk-platform-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.48.0` -> `2.49.0` | | [com.google.api:gax](https://github.com/googleapis/sdk-platform-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.58.0` -> `2.59.0` | | [com.autonomousapps.dependency-analysis](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin) | plugin | misk/gradle/libs.versions.toml | gradle | patch | `2.6.0` -> `2.6.1` | | [com.datadoghq:dd-trace-api](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `1.43.0` -> `1.44.1` | | [com.datadoghq:dd-trace-ot](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `1.43.0` -> `1.44.1` | | [software.amazon.awssdk:sdk-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [software.amazon.awssdk:dynamodb-enhanced](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [software.amazon.awssdk:dynamodb](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [software.amazon.awssdk:aws-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [software.amazon.awssdk:bom](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [software.amazon.awssdk:auth](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [com.amazonaws:aws-java-sdk-sqs](https://aws.amazon.com/sdkforjava) ([source](https://github.com/aws/aws-sdk-java)) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.12.779` -> `1.12.780` | | [com.amazonaws:aws-java-sdk-s3](https://aws.amazon.com/sdkforjava) ([source](https://github.com/aws/aws-sdk-java)) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.12.779` -> `1.12.780` | | [com.amazonaws:aws-java-sdk-dynamodb](https://aws.amazon.com/sdkforjava) ([source](https://github.com/aws/aws-sdk-java)) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.12.779` -> `1.12.780` | | [com.amazonaws:aws-java-sdk-core](https://aws.amazon.com/sdkforjava) ([source](https://github.com/aws/aws-sdk-java)) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.12.779` -> `1.12.780` | --- ### Release Notes <details> <summary>googleapis/sdk-platform-java (com.google.api.grpc:proto-google-common-protos)</summary> ### [`v2.50.0`](https://github.com/googleapis/sdk-platform-java/blob/HEAD/CHANGELOG.md#2500-2024-11-14) ##### Features - Add experimental S2A integration in client libraries grpc transport ([#​3326](googleapis/sdk-platform-java#3326)) ([1138ca6](googleapis/sdk-platform-java@1138ca6)) - enable selective generation based on service config include list ([#​3323](googleapis/sdk-platform-java#3323)) ([0cddadb](googleapis/sdk-platform-java@0cddadb)) - introduce `java.time` to java-core ([#​3330](googleapis/sdk-platform-java#3330)) ([f202c3b](googleapis/sdk-platform-java@f202c3b)) - Update Gapic-Generator to generate libraries using `java.time` methods ([#​3321](googleapis/sdk-platform-java#3321)) ([b21c9a4](googleapis/sdk-platform-java@b21c9a4)) ##### Bug Fixes - Fix flaky test ScheduledRetryingExecutorTest.testCancelOuterFutureAfterStart ([#​3335](googleapis/sdk-platform-java#3335)) ([e73740d](googleapis/sdk-platform-java@e73740d)) - httpjson callables to trace attempts (started, failed) ([#​3300](googleapis/sdk-platform-java#3300)) ([15a64ee](googleapis/sdk-platform-java@15a64ee)) - instantiate GaxProperties at build time to ensure we get the protobuf version ([#​3365](googleapis/sdk-platform-java#3365)) ([bb2a3be](googleapis/sdk-platform-java@bb2a3be)) - protobuf version not always getting set in headers ([#​3322](googleapis/sdk-platform-java#3322)) ([7f6e470](googleapis/sdk-platform-java@7f6e470)) - use BuildKit instead of legacy builder to build the Hermetic Build images ([#​3338](googleapis/sdk-platform-java#3338)) ([222fb45](googleapis/sdk-platform-java@222fb45)) ##### Dependencies - update google auth library dependencies to v1.30.0 ([#​3367](googleapis/sdk-platform-java#3367)) ([a31c682](googleapis/sdk-platform-java@a31c682)) - update grpc dependencies to v1.68.1 ([#​3240](googleapis/sdk-platform-java#3240)) ([c8e3941](googleapis/sdk-platform-java@c8e3941)) ##### Documentation - fix list num ([#​3356](googleapis/sdk-platform-java#3356)) ([b7d6296](googleapis/sdk-platform-java@b7d6296)) - **hermetic-build:** indicate usage of Docker Buildkit in development guide ([#​3337](googleapis/sdk-platform-java#3337)) ([01e742d](googleapis/sdk-platform-java@01e742d)) - modify hermetic build docs ([#​3331](googleapis/sdk-platform-java#3331)) ([25023af](googleapis/sdk-platform-java@25023af)) </details> <details> <summary>googleapis/java-spanner (com.google.cloud:google-cloud-spanner)</summary> ### [`v6.83.0`](https://github.com/googleapis/java-spanner/blob/HEAD/CHANGELOG.md#6830-2024-12-13) ##### Features - Add Metrics host for built in metrics ([#​3519](googleapis/java-spanner#3519)) ([4ed455a](googleapis/java-spanner@4ed455a)) - Add opt-in for using multiplexed sessions for blind writes ([#​3540](googleapis/java-spanner#3540)) ([216f53e](googleapis/java-spanner@216f53e)) - Add UUID in Spanner TypeCode enum ([41f83dc](googleapis/java-spanner@41f83dc)) - Introduce java.time variables and methods ([#​3495](googleapis/java-spanner#3495)) ([8a7d533](googleapis/java-spanner@8a7d533)) - **spanner:** Support multiplexed session for Partitioned operations ([#​3231](googleapis/java-spanner#3231)) ([4501a3e](googleapis/java-spanner@4501a3e)) - Support 'set local' for retry_aborts_internally ([#​3532](googleapis/java-spanner#3532)) ([331942f](googleapis/java-spanner@331942f)) ##### Bug Fixes - **deps:** Update the Java code generator (gapic-generator-java) to 2.51.0 ([41f83dc](googleapis/java-spanner@41f83dc)) ##### Dependencies - Update sdk platform java dependencies ([#​3549](googleapis/java-spanner#3549)) ([6235f0f](googleapis/java-spanner@6235f0f)) </details> <details> <summary>googleapis/java-logging (com.google.cloud:google-cloud-logging)</summary> ### [`v3.21.0`](https://github.com/googleapis/java-logging/blob/HEAD/CHANGELOG.md#3210-2024-12-13) ##### Features - Introduce `java.time` methods ([#​1729](googleapis/java-logging#1729)) ([323eb33](googleapis/java-logging@323eb33)) ##### Bug Fixes - **deps:** Update the Java code generator (gapic-generator-java) to 2.51.0 ([04d8868](googleapis/java-logging@04d8868)) ##### Dependencies - Update dependency io.opentelemetry:opentelemetry-bom to v1.45.0 ([#​1638](googleapis/java-logging#1638)) ([7e007d4](googleapis/java-logging@7e007d4)) - Update sdk platform java dependencies ([#​1736](googleapis/java-logging#1736)) ([88b4cdf](googleapis/java-logging@88b4cdf)) </details> <details> <summary>googleapis/java-datastore (com.google.cloud:google-cloud-datastore)</summary> ### [`v2.25.1`](https://github.com/googleapis/java-datastore/blob/HEAD/CHANGELOG.md#2251-2024-12-13) ##### Bug Fixes - **deps:** Update the Java code generator (gapic-generator-java) to 2.51.0 ([106ee4d](googleapis/java-datastore@106ee4d)) ##### Dependencies - Update sdk platform java dependencies ([#​1685](googleapis/java-datastore#1685)) ([4372350](googleapis/java-datastore@4372350)) ### [`v2.25.0`](https://github.com/googleapis/java-datastore/blob/HEAD/CHANGELOG.md#2250-2024-12-11) ##### Features - Introduce `java.time` methods and variables ([#​1671](googleapis/java-datastore#1671)) ([5a78a80](googleapis/java-datastore@5a78a80)) ##### Dependencies - Update dependency com.google.cloud:gapic-libraries-bom to v1.48.0 ([#​1605](googleapis/java-datastore#1605)) ([5c6a678](googleapis/java-datastore@5c6a678)) ##### Documentation - Update gapic upgrade installation instructions ([#​1677](googleapis/java-datastore#1677)) ([b3fbfcc](googleapis/java-datastore@b3fbfcc)) </details> <details> <summary>autonomousapps/dependency-analysis-android-gradle-plugin (com.autonomousapps.dependency-analysis)</summary> ### [`v2.6.1`](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin/blob/HEAD/CHANGELOG.md#Version-261) - \[Fix]: `superClassName` can be null (Object has no superclass). </details> <details> <summary>datadog/dd-trace-java (com.datadoghq:dd-trace-api)</summary> ### [`v1.44.1`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.44.1): 1.44.1 ##### Components ##### Continuous Integration Visibility - 🐛 Fix tracing JUnit5 tests in Maven projects with multiple forks ([#​8089](DataDog/dd-trace-java#8089) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) ### [`v1.44.0`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.44.0): 1.44.0 ##### Known Issues > \[!WARNING]\ > This release contains a known issue that causes failures when using Test Optimization to trace JUnit 5 tests in a Maven project where Maven Surefire is configured with `forkCount` > 1. > The issue is fixed in v1.44.1 ##### Breaking Changes > \[!WARNING]\ > Support for `X-Forwarded` header is dropped from default client IP resolution. > It can still be re-activated using the `dd.trace.client-ip-header=x-forwarded` system property, or the `DD_TRACE_CLIENT_IP_HEADER=x-forwarded` environment variable. See [#​7946](DataDog/dd-trace-java#7946). ##### Components ##### Application Security Management (IAST) - ✨ Set unexpected IAST exceptions to debug log level ([#​8044](DataDog/dd-trace-java#8044) - [@​smola](https://github.com/smola)) - ✨ Increase IAST propagation to StringBuffer subSequence ([#​8038](DataDog/dd-trace-java#8038) - [@​Mariovido](https://github.com/Mariovido)) - ✨ Increase IAST propagation to StringBuilder subSequence ([#​8026](DataDog/dd-trace-java#8026) - [@​Mariovido](https://github.com/Mariovido)) - ✨ Add IAST propagation to String valueOf ([#​8013](DataDog/dd-trace-java#8013) - [@​Mariovido](https://github.com/Mariovido)) - ✨ Increase IAST propagation to StringBuilder append ([#​8010](DataDog/dd-trace-java#8010) - [@​Mariovido](https://github.com/Mariovido)) - ✨ Expand SSRF support in IAST to apache-httpclient-5 and apache-httpasyncclient-4 ([#​7920](DataDog/dd-trace-java#7920) - [@​Mariovido](https://github.com/Mariovido)) ##### Build & Tooling - ✨ Generate Muzzle classes for Groovy instrumentations ([#​8004](DataDog/dd-trace-java#8004) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) ##### Continuous Integration Visibility - ✨ Support distributed traces in tests ([#​8078](DataDog/dd-trace-java#8078) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Implement fail-fast tests ordering for JUnit 5 ([#​8055](DataDog/dd-trace-java#8055) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Mark JUnit 5 setup and teardown action spans as failed if there is an error ([#​8033](DataDog/dd-trace-java#8033) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Add tracing of setup and teardown actions in JUnit 4 ([#​8030](DataDog/dd-trace-java#8030) - [@​daniel-mohedano](https://github.com/daniel-mohedano)) ##### Crash tracking - ✨ Improve crash tracking install logging ([#​8045](DataDog/dd-trace-java#8045) - [@​PerfectSlayer](https://github.com/PerfectSlayer)) ##### Data Streams Monitoring - 🐛 Add Data Streams support in AWS SQS without raw message delivery ([#​8071](DataDog/dd-trace-java#8071) - [@​piochelepiotr](https://github.com/piochelepiotr)) - ✨ Add new tag for enabled products / features to DSM checkpoints ([#​8051](DataDog/dd-trace-java#8051) - [@​kr-igor](https://github.com/kr-igor)) - 💡 Instrument self hosted Kafka connectors ([#​7959](DataDog/dd-trace-java#7959) - [@​piochelepiotr](https://github.com/piochelepiotr)) ##### Dynamic Instrumentation - ✨ Add Micronaut 4 support for code origin for spans ([#​8039](DataDog/dd-trace-java#8039) - [@​jpbempel](https://github.com/jpbempel)) - ✨ Refactor probe matching for methods ([#​8021](DataDog/dd-trace-java#8021) - [@​jpbempel](https://github.com/jpbempel)) - ✨ Update the CodeOriginProbe fingerprint to not rely on a stack walk ([#​8016](DataDog/dd-trace-java#8016) - [@​evanchooly](https://github.com/evanchooly)) - ✨ Implement code origin support for grpc server entry spans ([#​7942](DataDog/dd-trace-java#7942) - [@​evanchooly](https://github.com/evanchooly)) ##### GraalVM native-image - 🐛 Update Graal build-time instrumentation config for TracePropagationStyle ([#​8065](DataDog/dd-trace-java#8065) - [@​MattAlp](https://github.com/MattAlp)) - 🐛 Fix NoClassDefFoundError: Could not initialize class DDSpanLink$EncoderHolder in Graal native-image ([#​8036](DataDog/dd-trace-java#8036) - [@​mcculls](https://github.com/mcculls)) - 🐛🧹 Fix native-image generation of reactive applications ([#​8012](DataDog/dd-trace-java#8012) - [@​mcculls](https://github.com/mcculls)) ##### OpenTracing - 🧹 Custom ScopeManagers are deprecated and will be removed in a future release of dd-trace-ot ([#​8058](DataDog/dd-trace-java#8058) - [@​mcculls](https://github.com/mcculls)) ##### Tracer core - ✨🧪 Service naming: split by jee deployment ([#​8064](DataDog/dd-trace-java#8064) - [@​amarziali](https://github.com/amarziali)) - ✨ Exclude jboss mdb proxies from instrumenting ([#​8061](DataDog/dd-trace-java#8061) - [@​amarziali](https://github.com/amarziali)) - ✨ Add a built-in trace interceptor for keeping traces depending of their latency ([#​8040](DataDog/dd-trace-java#8040) - [@​cecile75](https://github.com/cecile75)) - 💡 Introduce marker mechanism for eagerly initializing helpers ([#​8028](DataDog/dd-trace-java#8028) - [@​mcculls](https://github.com/mcculls)) - 💡 Add JSON component ([#​7973](DataDog/dd-trace-java#7973) - [@​PerfectSlayer](https://github.com/PerfectSlayer)) - ✨⚠️ Remove support for X-Forwarded in client IP resolution ([#​7946](DataDog/dd-trace-java#7946) - [@​smola](https://github.com/smola)) ##### Instrumentations ##### Apache HttpComponents - ✨ Expand SSRF support in IAST to apache-httpclient-5 and apache-httpasyncclient-4 ([#​7920](DataDog/dd-trace-java#7920) - [@​Mariovido](https://github.com/Mariovido)) ##### gRPC instrumentation - 🐛 Use lower priorities for grpc server errors ([#​8043](DataDog/dd-trace-java#8043) - [@​amarziali](https://github.com/amarziali)) ##### JDBC instrumentation - ✨ Add trace injection for prepared statements in Postgres ([#​7940](DataDog/dd-trace-java#7940) - [@​nenadnoveljic](https://github.com/nenadnoveljic)) ##### JMS instrumentation - 🐛 Protect mdb from instrumenting multiple time the same event ([#​8062](DataDog/dd-trace-java#8062) - [@​amarziali](https://github.com/amarziali)) ##### Kafka instrumentation - 💡 Instrument self hosted Kafka connectors ([#​7959](DataDog/dd-trace-java#7959) - [@​piochelepiotr](https://github.com/piochelepiotr)) ##### OpenTelemetry instrumentation - 🐛 Support using OpenTelemetry Event API inside `@WithSpan` annotated method ([#​8019](DataDog/dd-trace-java#8019) - [@​mcculls](https://github.com/mcculls)) ##### Reactor instrumentation - 🐛🧹 Fix native-image generation of reactive applications ([#​8012](DataDog/dd-trace-java#8012) - [@​mcculls](https://github.com/mcculls)) ##### Spring instrumentation - 🐛 Avoid double instrumenting lambdas on latest spring scheduling ([#​8005](DataDog/dd-trace-java#8005) - [@​amarziali](https://github.com/amarziali)) ##### All other instrumentations - 🐛 Twilio: allow service name flattening ([#​8025](DataDog/dd-trace-java#8025) - [@​amarziali](https://github.com/amarziali)) - ✨ Instrument Mulesoft 4.5.0+ ([#​7981](DataDog/dd-trace-java#7981) - [@​amarziali](https://github.com/amarziali)) </details> <details> <summary>aws/aws-sdk-java (com.amazonaws:aws-java-sdk-sqs)</summary> ### [`v1.12.780`](https://github.com/aws/aws-sdk-java/blob/HEAD/CHANGELOG.md#112780-2024-12-11) [Compare Source](aws/aws-sdk-java@1.12.779...1.12.780) #### **Amazon Simple Storage Service** - ### Bugfixes - AWS SDK for Java 1.x now includes additional validation for Amazon S3 client APIs to handle scenarios where an empty string ('') is passed as the key argument to the following operations: PutObject, DeleteObject, ListObjects, GetObjectMetaData, ListObjectsV2, SetObjectTagging, GetObjectTagging, SetObjectAcl, GetObjectAcl, SetObjectLegalHold, GetObjectLegalHold, CopyObject, CopyPart, SelectObjectContent, SetObjectRetention, GetObjectRetention, AbortMultipartUpload, CompleteMultipartUpload, InitiateMultipartUpload, ListParts, UploadPart, RestoreObjectV2, and RestoreObject. The SDK will validate the key argument and throw an exception if it is an empty string, ensuring correct and expected behavior. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am every weekday" in timezone Australia/Melbourne, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). GitOrigin-RevId: 69831bc62ea4d80cdcd42cef2aa9bd8eda28ae8c
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
What Does This Do
Remove
X-Forwarded
header from default client IP resolution.Motivation
Unclear evidence of real world usage of this header, as well as its format. Support is dropped from default client IP resolution, but it can still be used with
dd.trace.client-ip-header=x-forwarded
(system property) ofDD_TRACE_CLIENT_IP_HEADER=x-forwarded
(environment variable).The header is still collected on security events.
Support for parsing RFC 7239 (
Forwarded
format) is still maintained.Additional Notes
Contributor Checklist
type:
and (comp:
orinst:
) labels in addition to any usefull labelsclose
,fix
or any linking keywords when referencing an issue.Use
solves
instead, and assign the PR milestone to the issue[ ] Update the public documentation in case of new configuration flag or behaviorJira ticket: APPSEC-55834