chore(deps): update dependency datadog.trace.bundle to 3.49.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
Datadog.Trace.Bundle (source)	3.45.0 → 3.49.0

---

Release Notes

DataDog/dd-trace-dotnet (Datadog.Trace.Bundle)

v3.49.0: 3.49.0

Summary

• [OTLP] Add trace metrics via OTLP span metrics export (#​8826)
• Implement span-derived primary tags (AKA Additional tags) on Client-Side-Stats computation (#​8766)
• Implement support for DD_TAGS in Client-Side stats (#​8823)
• Add EventBridge DSM producer injection (#​8639)

Changes

Tracer

• Refactor GraphQL error response building and add pre-emptive truncation (#​8647)
• Implement span-derived primary tags (AKA Additional tags) on Client-Side-Stats computation (#​8766)
• Minor and performance updates for client-side-stats (#​8822)
• Implement support for DD_TAGS in Client-Side stats (#​8823)
• Apply cardinality limits to Client-Side stats implementation (#​8824)
• [OTLP] Add trace metrics via OTLP span metrics export (#​8826)
• Optimise OTEL metrics collection to reduce allocations (#​8834)
• Update TruncateUTF8 to never split a code point and improve perf (#​8836)
• [Debugger] Log over-length identifier redaction at Warning instead of Error (#​8853)
• Attempt to prevent crash on module unload (#​8854)

ASM

• [AAP] Add response headers even if no appsec event is present (#​8784)
• [Appsec] Add comments and refs to help out codex reviews when libddwaf is involved (#​8831)
• [BUG] Fix query obfuscation culture invariant (#​8850)

Continuous Profiler

• [Profiler] Fix live objects age (#​8842)
• Avoid excessive BuggyBits exceptions in endpoint tests (#​8881)

Debugger

• [Debugger] Define debugger safety guidance (#​8817)
• [Debugger] Prevent expression member access from invoking getters (#​8878)

Fixes

• Remove config_norm_rules.json tests (#​8844)

Miscellaneous

• Add dd-autoinstrumentation CLI with LLM-native structured output (#​8313)
• [Tests] Add Azure Functions Trigger tests for messaging SDKs (#​8698)
• Bump libdatadog to 2.0.0 (~v36.0.0) (#​8827)
• Add bounded cardinality limits for OTEL metrics collection (#​8846)
• update AAS setup guide (#​8848)

Data Streams Monitoring

• Add EventBridge DSM producer injection (#​8639)

Build / Test

• [Test] Handle dotnet/runtime#127957 BadImageFormatException fingerprint (#​8729)
• [CI] Add commit-only fallback when resolving serverless/single-step Azure build artifacts (#​8782)
• Flag new major versions of NuGets we don't support (#​8800)
• [Test Package Versions Bump] Updating package versions (#​8837)
• [Smoke Test Docker Image Bump] Updating docker image tags (#​8838)
• Remove legacy create_draft_release workflow (#​8839)
• Bump the gh-actions-packages group across 2 directories with 6 updates (#​8851)
• Update CI VMs to use latest images (#​8852)
• Remove unused kafka services from docker-compose.ym (#​8855)
• [Test Package Versions Bump] Updating package versions (#​8857)
• Move webhook url to protected environment (#​8863)
• [Test Package Versions Bump] Updating package versions (#​8864)
• Update CODEOWNERS to remove IDM from DSM and expand DSM ownership (#​8870)
• Fix ADO.NET dropped trace test flakes (#​8871)
• Make transaction early-flush writer test deterministic (#​8872)
• [Tests] Handle UTF-16 output from ProcDump v12.01 (#​8890)

Changes since 3.48.0

v3.48.0: 3.48.0

Summary

• [Tracing] Add support for IBMMQ 10.x.x
• [Client side stats] Fix incorrect statistic generation introduced in 3.43.0

Changes

Tracer

• Add support for IBM MQ 10.x.x (#​8835)
• Fix ObjectDisposedException race in DataStreamsWriter disposal (#​8758)

CI Visibility

• [CI Visibility] Avoid oversized coverage IPC messages (#​8832)

Debugger

• [Debugger] Guard static member capture (#​8814)
• [Debugger] Avoid resolving call tokens in exception replay IL scan (#​8815)

Fixes

• Remove sampling-based weighting in Client Side Stats (#​8828)

Build / Test

• Update to use dd-sts instead of long-lived credentials (#​8809)
• [Test Package Versions Bump] Updating package versions (#​8810)
• Fix GitHub Actions bugs and update documentation (#​8812)
• [CI] Add net10.0 to AWS Lambda test runtimes (#​8819)

Changes since 3.47.0

v3.47.0: 3.47.0

[!WARNING]
Version 3.43.0-3.47.0 includes a bug which can lead to incorrect trace stats. This only impacts customers that have explicitly enabled client side stats calculation. If you are affected, please update your library to version 3.48.0 or above.

Summary

• Add support for HotChocolate v16.x (#​8802)
• Add support for StackExchange.Redis v3.x (#​8808)
• Add support for Amazon.Lambda.RuntimeSupport v2.x (#​8797)

Changes

Tracer

• [DBM] Skip telemetry for DBM errors (#​8679)
• Trim experimental features flags (#​8789)
• Add support for HotChocolate v16.x (#​8802)
• Add support for StackExchange.Redis 3.x (#​8808)

CI Visibility

• [CI Visibility] Implement ITR code coverage backfill (#​8626)

Continuous Profiler

• [Profiler] Generate reference chain (#​8225)
• [Profiler] Add support for SMB/CIFS (#​8769)
• Fix flake in profiling demo app (#​8793)
• [Profiler] Try fixing flakiness (#​8813)

Debugger

• [Debugger] Bound root filter capture expressions (#​8780)
• [Debugger] Resolve instanceof types at runtime (#​8785)
• [Debugger] Avoid instantiating state machine attributes (#​8816)

Serverless

• feat: add support for latest Amazon.Lambda.RuntimeSupport package (#​8797)

Build / Test

• Use libdatadog for dotnet (#​8186)
• [Test Package Versions Bump] Updating package versions (#​8786)
• [Smoke Test Docker Image Bump] Updating docker image tags (#​8788)
• Add StartDependencies.Profiler to docker-compose.yml (#​8792)
• [TESTS] Fix monitoring home calculation fallback for tests (#​8798)
• Update DatadogTestLogger package versions to 0.0.54 (#​8799)
• Fix RunInstrumentationGenerator (#​8801)
• Fix local MSBuild issue with CompileSamples (#​8807)

Miscellaneous

• [Config] Register all native configuration variables (3/3) (#​8733)

Changes since 3.46.0

v3.46.0: 3.46.0

Summary

• [Profiler] Improve native unwinding performance and memory consumption on ARM64
• [Dynamic Instrumentation] Various performance improvements and bug fixes
• [Tracing] Fix OTLP traces being submitted to the wrong endpoint when an APM UDS socket is set
• Performance improvements and bug fixes.

Changes

Tracer

• Set TokenImpersonationLevel.Anonymous in NamedPipeClient (#​8676)
• Remove libdatadog-based trace exporter (#​8703)
• Use TaskScheduler.Default when calling Task.Factory.StartNew (#​8779)

Continuous Profiler

• [Profiler] Try fixing crashes in etw events based profiler (#​8673)
• [crashtracker] Libdatadog provides OS info (#​8678)
• [Profiler] Improve native unwinding performance on arm64 (#​8689)
• [Profiler] Fix coding issue (#​8721)
• [Profiler] Investigating timer_create failure on arm64/alpine (#​8744)
• [Profiler] fix flacky tests (#​8745)
• [Profiler] Measure LibrariesInfoCache performance (#​8757)
• Flaky test fixing (#​8760)
• [Profiler] Improve memory consumption LibrariesInfoCache (#​8777)

CI Visibility

• [CI Visibility] Fix Meta value length. (#​8749)

Debugger

• [Debugger] Add memory pressure monitoring telemetry for Dynamic Instrumentation (observe-only) (#​7834)
• [Dynamic Instrumentation] Rate limit condition evaluation error snapshots (#​8725)
• [Dynamic Instrumentation] Omit capture data for condition evaluation errors (#​8728)
• [Debugger] Fix probe file test waits (#​8740)
• [Debugger] Improve no capture reason in collection serializer (#​8746)
• [Debugger] Fix safe ToString handling for debugger collections (#​8747)
• [Debugger] Improve debugger collection serialization (#​8753)
• [Debugger] Avoid noisy async state machine metadata warnings (#​8761)
• [Debugger] Redact dictionary values by sensitive keys (#​8768)
• [Debugger] Minor Dynamic Instrumentation cleanups (#​8770)
• [Debugger] Avoid evaluating expressionless snapshot probes (#​8771)
• [Debugger] Avoid spurious timeout on empty collection serialization (#​8741)

Fixes

• fix(otel): Submit OTLP traces to correct endpoint when APM UDS socket is set (#​8668)
• [Native] Make GetTypeInfo Iterative to Prevent Native Stack Exhaustion (#​8708)
• fix(dsm): use TaskScheduler.Default for ProcessQueueLoop to avoid deadlock (#​8767)

Build / Test

• Update vendored OpenTelemetry.Exporter.OpenTelemetryProtocol (#​8655)
• Handle dotnet/runtime#127957 in integration tests (#​8665)
• Update more things to use artifacts output (#​8680)
• Update launchSettings.json files: monitoring-home path (#​8681)
• [Test Package Versions Bump] Updating package versions (#​8715)
• [CI] Point serverless-tools trigger at main to fix monitoring-home path (#​8726)
• Bump the gh-actions-packages group across 2 directories with 6 updates (#​8734)
• Capture smoke tests container after error (#​8748)
• No Clean before GeneratePackageVersions (#​8752)
• [CI] Retry docker pull of ddapm-test-agent image on transient failure (#​8755)
• [Test Package Versions Bump] Updating package versions (#​8764)
• [Test Package Versions Bump] Updating package versions (#​8772)
• Remove debugging blocks leaking environment variables in tests (#​8781)
• [Tests] Stabilize memory pressure monitor race tests (#​8751)

Miscellaneous

• [Crashtracker] Do not redact frames in crashtracker (#​8675)
• [crashtracker] Remove Telemetry check (#​8677)
• Update DirectSubmissionLogSink tests to be less flaky (#​8714)
• Update OtlpSubmissionLogSink tests to be less flaky (#​8718)
• [Config] Add scope field to all existing registry entries (1/3) (#​8731)
• [Config] Add scope field infrastructure to configuration registry (2/3) (#​8732)
• fix link to file in autoinstrumentation doc (#​8738)
• Exclude InMemoryAssembly from dependency collection (#​8759)
• [Stats] Fix partial_version exclusion: use >= 0 instead of > 0 (#​8776)

Changes since 3.45.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud