v5.59.0 proposal

.github/dependabot.yml

@@ -31,6 +31,12 @@ updates:
       - dependency-name: "jest-docblock"
         # 30.0.0 onwards only supports Node.js 18.14.x and above
         update-types: ["version-update:semver-major"]
+        # The path-to-regexp version has to be the same as used in express v4.
+        # Consider vendoring it instead.
+      - dependency-name: "path-to-regexp"
+      - dependency-name: "lru-cache"
+        # 11.0.0 onwards only supports Node.js 20 and above
+        update-types: ["version-update:semver-major"]
     groups:
       dev-minor-and-patch-dependencies:
         dependency-type: "development"

.github/workflows/apm-integrations.yml

@@ -438,6 +438,14 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: ./.github/actions/plugins/test
 
+  hono:
+    runs-on: ubuntu-latest
+    env:
+      PLUGINS: hono
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: ./.github/actions/plugins/test
+
   http:
     strategy:
       matrix:

.github/workflows/platform.yml

@@ -296,13 +296,16 @@ jobs:
           version: ${{ matrix.version }}
       - uses: ./.github/actions/install
       - run: yarn add --ignore-scripts mocha@10 # Use older mocha to support old Node.js versions
+      - run: yarn add --ignore-scripts express@4 # Use older express to support old Node.js versions
       - run: node node_modules/.bin/mocha --colors --timeout 30000 integration-tests/init.spec.js
 
   integration-guardrails-unsupported:
     strategy:
       matrix:
         version: ['0.8', '0.10', '0.12', '4', '6', '8', '10', '12']
     runs-on: ubuntu-latest
+    env:
+      DD_TRACE_DEBUG: 'true' # This exercises more of the guardrails code
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: ./.github/actions/node

.github/workflows/test-optimization.yml

@@ -34,6 +34,19 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
 
+  integration:
+    strategy:
+      matrix:
+        version: [oldest, maintenance, active, latest]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: ./.github/actions/node
+        with:
+          version: ${{ matrix.version }}
+      - uses: ./.github/actions/install
+      - run: yarn test:integration:testopt
+
   integration-playwright:
     strategy:
       matrix:

LICENSE-3rdparty.csv

@@ -68,6 +68,7 @@ dev,sinon,BSD-3-Clause,Copyright 2010-2017 Christian Johansen
 dev,sinon-chai,WTFPL and BSD-2-Clause,Copyright 2004 Sam Hocevar 2012–2017 Domenic Denicola
 dev,tap,ISC,Copyright 2011-2022 Isaac Z. Schlueter and Contributors
 dev,tiktoken,MIT,Copyright (c) 2022 OpenAI, Shantanu Jain
+dev,workerpool,Apache license 2.0,Copyright (C) 2014-2024 Jos de Jong wjosdejong@gmail.com
 dev,yaml,ISC,Copyright Eemeli Aro <eemeli@gmail.com>
 dev,yarn-deduplicate,Apache license 2.0,Copyright [yyyy] [name of copyright owner]
 file,aws-lambda-nodejs-runtime-interface-client,Apache 2.0,Copyright 2019 Amazon.com Inc. or its affiliates. All Rights Reserved.

benchmark/sirun/appsec-iast/insecure-bank.js

@@ -1,3 +1,5 @@
+'use strict'
+
 const http = require('http')
 const app = require('/opt/insecure-bank-js/app') // eslint-disable-line import/no-absolute-path
 

benchmark/sirun/appsec/insecure-bank.js

@@ -1,3 +1,5 @@
+'use strict'
+
 const http = require('http')
 const app = require('/opt/insecure-bank-js/app') // eslint-disable-line import/no-absolute-path
 

benchmark/sirun/encoding/index.js

@@ -1,3 +1,5 @@
+'use strict'
+
 const {
   ENCODER_VERSION
 } = process.env

benchmark/sirun/gc.js

@@ -1,3 +1,5 @@
+'use strict'
+
 const { createHistogram, PerformanceObserver } = require('perf_hooks')
 if (createHistogram) {
   const StatsD = require('./statsd')

benchmark/sirun/means.js

@@ -1,3 +1,5 @@
+'use strict'
+
 /* eslint-disable no-console */
 
 const chunks = []

benchmark/sirun/scope/index.js

@@ -1,3 +1,5 @@
+'use strict'
+
 const {
   DD_TRACE_SCOPE,
   COUNT

benchmark/sirun/shimmer-runtime/index.js

@@ -1,3 +1,5 @@
+'use strict'
+
 /* eslint-disable require-await */
 
 const shimmer = require('../../../packages/datadog-shimmer')

benchmark/sirun/shimmer-startup/index.js

@@ -1,3 +1,5 @@
+'use strict'
+
 /* eslint-disable require-await */
 
 const shimmer = require('../../../packages/datadog-shimmer')

benchmark/sirun/spans/spans.js

@@ -1,3 +1,5 @@
+'use strict'
+
 const tracer = require('../../..').init()
 
 tracer._tracer._processor.process = function process (span) {

benchmark/sirun/strip-unwanted-results.js

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+'use strict'
 
 const fs = require('fs')
 const path = require('path')

ci/cypress/after-run.js

@@ -1 +1,3 @@
+'use strict'
+
 module.exports = require('../../packages/datadog-plugin-cypress/src/after-run')

ci/cypress/after-spec.js

@@ -1 +1,3 @@
+'use strict'
+
 module.exports = require('../../packages/datadog-plugin-cypress/src/after-spec')

ci/cypress/plugin.js

@@ -1,3 +1,5 @@
+'use strict'
+
 const { NODE_MAJOR } = require('../../version')
 
 // These polyfills are here because cypress@6.7.0, which we still support for v5, runs its plugin code

ci/cypress/polyfills.js

@@ -1,3 +1,5 @@
+'use strict'
+
 if (!Object.hasOwn) {
   Object.defineProperty(Object, 'hasOwn', {
     // eslint-disable-next-line prefer-object-has-own

ci/cypress/support.js

@@ -1 +1,3 @@
+'use strict'
+
 require('../../packages/datadog-plugin-cypress/src/support')

ci/init.js

@@ -1,3 +1,5 @@
+'use strict'
+
 /* eslint-disable no-console */
 const tracer = require('../packages/dd-trace')
 const { isTrue, isFalse } = require('../packages/dd-trace/src/util')

docker-compose.yml

@@ -165,14 +165,14 @@ services:
 
   # Use this for local development when making new VCR cassettes to persist to the test agent
   # Do not use the above testagent service if using this one.
-  testagent-vcr:
-    image: ghcr.io/datadog/dd-apm-test-agent/ddapm-test-agent:v1.24.1
-    ports:
-      - "127.0.0.1:9126:9126"
-    environment:
-      - LOG_LEVEL=DEBUG
-      - TRACE_LANGUAGE=javascript
-      - ENABLED_CHECKS=trace_stall,meta_tracer_version_header,trace_count_header,trace_peer_service
-      - PORT=9126
-    volumes:
-      - ${VCR_CASSETTES_PATH:-/tmp/empty-vcr}:/vcr-cassettes:delegated
+  # testagent-vcr:
+  #   image: ghcr.io/datadog/dd-apm-test-agent/ddapm-test-agent:v1.24.1
+  #   ports:
+  #     - "127.0.0.1:9126:9126"
+  #   environment:
+  #     - LOG_LEVEL=DEBUG
+  #     - TRACE_LANGUAGE=javascript
+  #     - ENABLED_CHECKS=trace_stall,meta_tracer_version_header,trace_count_header,trace_peer_service
+  #     - PORT=9126
+  #   volumes:
+  #     - ${VCR_CASSETTES_PATH:-/tmp/empty-vcr}:/vcr-cassettes:delegated

docs/test.ts

@@ -339,6 +339,8 @@ tracer.use('grpc', { client: { metadata: [] } });
 tracer.use('grpc', { server: { metadata: [] } });
 tracer.use('hapi');
 tracer.use('hapi', httpServerOptions);
+tracer.use('hono');
+tracer.use('hono', httpServerOptions);
 tracer.use('http');
 tracer.use('http', {
   server: httpServerOptions