Update document v2.13.0

.github/CODEOWNERS

@@ -8,7 +8,7 @@ docs/GettingStarted.md @DataDog/documentation
 lib/datadog/appsec/ @DataDog/asm-ruby
 lib/datadog/appsec.rb @DataDog/asm-ruby
 lib/datadog/tracing/ @DataDog/tracing-ruby
-lib/datadog/tracing/contrib/ @DataDog/apm-idm-ruby
+lib/datadog/tracing/contrib/ @DataDog/tracing-ruby
 lib/datadog/tracing.rb @DataDog/tracing-ruby
 lib/datadog/opentelemetry/ @DataDog/tracing-ruby
 lib/datadog/opentelemetry.rb @DataDog/tracing-ruby
@@ -21,7 +21,7 @@ ext/ @DataDog/profiling-rb @DataDog/ruby-guild
 sig/datadog/appsec/ @DataDog/asm-ruby
 sig/datadog/appsec.rbs @DataDog/asm-ruby
 sig/datadog/tracing/ @DataDog/tracing-ruby
-sig/datadog/tracing/contrib/ @DataDog/apm-idm-ruby
+sig/datadog/tracing/contrib/ @DataDog/tracing-ruby
 sig/datadog/tracing.rbs @DataDog/tracing-ruby
 sig/datadog/opentelemetry/ @DataDog/tracing-ruby
 sig/datadog/opentelemetry.rbs @DataDog/tracing-ruby
@@ -31,7 +31,7 @@ sig/datadog/profiling.rbs @DataDog/profiling-rb @DataDog/ruby-guild
 # Specs
 spec/datadog/appsec/ @DataDog/asm-ruby
 spec/datadog/tracing/ @DataDog/tracing-ruby
-spec/datadog/tracing/contrib/ @DataDog/apm-idm-ruby
+spec/datadog/tracing/contrib/ @DataDog/tracing-ruby
 spec/datadog/tracing_spec.rb @DataDog/tracing-ruby
 spec/datadog/opentelemetry/ @DataDog/tracing-ruby
 spec/datadog/opentelemetry_spec.rb @DataDog/tracing-ruby

.github/forced-tests-list.json

@@ -1,3 +1,8 @@
 {
-
-}
+  "SCA_STANDALONE": [
+    "tests/appsec/test_asm_standalone.py::Test_SCAStandalone_Telemetry_V2"
+  ],
+  "APPSEC_STANDALONE": [
+    "tests/appsec/test_asm_standalone.py::Test_AppSecStandalone_UpstreamPropagation_V2"
+  ]
+}

.github/workflows/build-gem.yml

@@ -36,7 +36,7 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
-      - uses: ruby/setup-ruby@bbda85882f33075a3727c01e3c8d0de0be6146ce # v1.224.0
+      - uses: ruby/setup-ruby@922ebc4c5262cd14e07bb0e1db020984b6c064fe # v1.226.0
         with:
           ruby-version: '3.2'
           bundler-cache: true # runs 'bundle install' and caches installed gems automatically
@@ -87,7 +87,7 @@ jobs:
       - name: List gem
         run: |
           find pkg
-      - uses: ruby/setup-ruby@bbda85882f33075a3727c01e3c8d0de0be6146ce # v1.224.0
+      - uses: ruby/setup-ruby@922ebc4c5262cd14e07bb0e1db020984b6c064fe # v1.226.0
         with:
           ruby-version: '3.2'
       - name: Install gem

.github/workflows/generate-supported-versions.yml

@@ -19,7 +19,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Ruby
-        uses: ruby/setup-ruby@bbda85882f33075a3727c01e3c8d0de0be6146ce # v1.224.0
+        uses: ruby/setup-ruby@922ebc4c5262cd14e07bb0e1db020984b6c064fe # v1.226.0
         with:
           ruby-version: "3.3"
 

.github/workflows/publish.yml

@@ -20,7 +20,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
-      - uses: ruby/setup-ruby@bbda85882f33075a3727c01e3c8d0de0be6146ce # v1.224.0
+      - uses: ruby/setup-ruby@922ebc4c5262cd14e07bb0e1db020984b6c064fe # v1.226.0
         with:
           ruby-version: '3.3.7'
 
@@ -117,7 +117,7 @@ jobs:
         with:
           persist-credentials: false # `rubygems/release-gem` action handles credentials itself
       - name: Set up Ruby
-        uses: ruby/setup-ruby@bbda85882f33075a3727c01e3c8d0de0be6146ce # v1.224.0
+        uses: ruby/setup-ruby@922ebc4c5262cd14e07bb0e1db020984b6c064fe # v1.226.0
         with:
           ruby-version: '3.3.7'
       - run: bundle install
@@ -161,7 +161,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
       - name: Set up Ruby
-        uses: ruby/setup-ruby@bbda85882f33075a3727c01e3c8d0de0be6146ce # v1.224.0
+        uses: ruby/setup-ruby@922ebc4c5262cd14e07bb0e1db020984b6c064fe # v1.226.0
         with:
           ruby-version: '3.3.7'
       - run: bundle install

.github/workflows/system-tests.yml

@@ -22,7 +22,7 @@ permissions: {}
 env:
   REGISTRY: ghcr.io
   REPO: ghcr.io/datadog/dd-trace-rb
-  SYSTEM_TESTS_REF: main # This must always be set to `main` on dd-trace-rb's master branch
+  SYSTEM_TESTS_REF: appsec-56683-rewrite-rails-devise-application
 
 jobs:
   changes:
@@ -76,7 +76,7 @@ jobs:
           ref: ${{ env.SYSTEM_TESTS_REF }}
           persist-credentials: false
       - name: Login to Docker Hub
-        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -97,7 +97,7 @@ jobs:
         run: |
           docker image list
       - name: Log in to the Container registry
-        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
@@ -183,7 +183,7 @@ jobs:
             printf "\nEOF\n"
           } >> "$GITHUB_OUTPUT"
       - name: Login to Docker Hub
-        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -197,7 +197,7 @@ jobs:
             docker pull "${{ env.REPO }}/system-tests/${{ matrix.library.name }}/${{ matrix.image }}-${{ matrix.app }}:g${sha}" || true
           done
       - name: Log in to the Container registry
-        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
@@ -268,7 +268,6 @@ jobs:
           - APPSEC_DISABLED
           - APPSEC_BLOCKING_FULL_DENYLIST
           - APPSEC_REQUEST_BLOCKING
-          - APPSEC_STANDALONE
           - APPSEC_BLOCKING
         include:
           - library: ruby
@@ -325,6 +324,12 @@ jobs:
           - library: ruby
             app: rails70
             scenario: DEBUGGER_PII_REDACTION
+          - library: ruby
+            app: rails70
+            scenario: SCA_STANDALONE
+          - library: ruby
+            app: rails70
+            scenario: APPSEC_STANDALONE
           - library: ruby
             app: rack
             scenario: SAMPLING
@@ -359,7 +364,7 @@ jobs:
           ref: ${{ env.SYSTEM_TESTS_REF }}
           persist-credentials: false
       - name: Login to Docker Hub
-        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -493,7 +498,7 @@ jobs:
     name: Cleanup (${{ matrix.image }})
     steps:
       - name: Log in to the Container registry
-        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}

.github/workflows/test-macos.yaml

@@ -43,7 +43,7 @@ jobs:
       # head rubies
       - if: ${{ matrix.ruby == 'head' }}
         run: sed -i~ -e '/spec\.required_ruby_version/d' datadog.gemspec
-      - uses: ruby/setup-ruby@bbda85882f33075a3727c01e3c8d0de0be6146ce # v1.224.0
+      - uses: ruby/setup-ruby@922ebc4c5262cd14e07bb0e1db020984b6c064fe # v1.226.0
         with:
           ruby-version: ${{ matrix.ruby }}
           rubygems: 3.3.26

.github/workflows/test-memory-leaks.yaml

@@ -18,7 +18,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
-      - uses: ruby/setup-ruby@bbda85882f33075a3727c01e3c8d0de0be6146ce # v1.224.0
+      - uses: ruby/setup-ruby@922ebc4c5262cd14e07bb0e1db020984b6c064fe # v1.226.0
         with:
           ruby-version: 3.4.1
           bundler-cache: true # runs 'bundle install' and caches installed gems automatically
@@ -33,7 +33,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
-      - uses: ruby/setup-ruby@bbda85882f33075a3727c01e3c8d0de0be6146ce # Adds 3.4-asan builds
+      - uses: ruby/setup-ruby@922ebc4c5262cd14e07bb0e1db020984b6c064fe # Adds 3.4-asan builds
         with:
           ruby-version: 3.4-asan
           bundler-cache: true # runs 'bundle install' and caches installed gems automatically

.github/workflows/test-yjit.yaml

@@ -49,7 +49,7 @@ jobs:
       # head rubies
       - if: ${{ matrix.ruby == 'head' }}
         run: sed -i~ -e '/spec\.required_ruby_version/d' datadog.gemspec
-      - uses: ruby/setup-ruby@bbda85882f33075a3727c01e3c8d0de0be6146ce # v1.224.0
+      - uses: ruby/setup-ruby@922ebc4c5262cd14e07bb0e1db020984b6c064fe # v1.226.0
         with:
           ruby-version: ${{ matrix.ruby }}
           bundler-cache: true # runs 'bundle install' and caches installed gems automatically

.rubocop.yml

@@ -208,6 +208,11 @@ Performance/Squeeze: # (new in 1.7)
   Enabled: true
 Performance/StringInclude: # (new in 1.7)
   Enabled: true
+# These complain about strings that contain interpolation, demanding
+# additional conversion to symbol which is extra overhead:
+# https://github.com/rubocop/rubocop/issues/13955
+Performance/StringIdentifierArgument:
+  Enabled: false
 
 # Requires Ruby 2.2
 Style/HashSyntax:
@@ -379,6 +384,10 @@ RSpec/DescribeClass:
 RSpec/LetSetup:
   Enabled: false
 
+# Botches example descriptions. https://github.com/rubocop/rubocop/issues/13956
+RSpec/ExampleWording:
+  Enabled: false
+
 # Identifies where `fetch(key) { value }` can be replaced by `fetch(key, value)`.
 # Can't differentiate between `Hash#fetch` and `RailsCache#fetch`,
 # passing in wrong parameters to these methods.

.standard_todo.yml

@@ -10,6 +10,10 @@ ignore:
   - Style/TrailingCommaInArrayLiteral
   - Style/TrailingCommaInHashLiteral
   - Style/StringLiterals
+  # These complain about strings that contain interpolation, demanding
+  # additional conversion to symbol which is extra overhead:
+  # https://github.com/rubocop/rubocop/issues/13955
+  - Performance/StringIdentifierArgument
 
 # This disables standardrb for the rest of dd-trace-rb (other than profiling)
 - .pryrc
@@ -40,6 +44,7 @@ ignore:
 - spec/datadog/core/**/**
 - spec/datadog/di/integration/*_test_class*.rb
 - spec/datadog/kit/**/**
+- spec/datadog/opentelemetry/**/**
 - spec/datadog/tracing/**/**
 - spec/support/**/**
 - tasks/**/**

CHANGELOG.md

@@ -2,6 +2,28 @@
 
 ## [Unreleased]
 
+## [2.13.0] - 2025-04-02
+
+### Added
+
+* Core: Add `DD_TRACE_EXPERIMENTAL_RUNTIME_ID_ENABLED` experimental option to enable runtime ID collection for runtime metrics. ([#4473][])
+* Tracing: Add support for W3C Baggage API along with automatic extraction and injection, and OpenTelemetry support. ([#4493][], [#4505][])
+* Tracing: Add `DD_APM_TRACING_ENABLED` option to disable APM tracing while keeping other products traces. ([#4498][])
+* Tracing: Add `DD_TRACE_NATIVE_SPAN_EVENTS` option to override span events serialization for agent-less environments. ([#4507][])
+* AppSec: Add stack trace reporting for security events. ([#4526][])
+* AppSec: Improve `devise` instrumentation to support latest Account Takeover (ATO) detection. ([#4433][])
+
+### Changed
+
+* Core: Improve `DD_TAGS` configuration handling to be more consistent across Datadog libraries and Agent. ([#4530][])
+* Tracing: Enable by default 128-bit trace ID logging so that trace IDs are consistent across logs and the Datadog UI. ([#4528][])
+
+### Fixed
+
+* Core: Fix initialization when the library is partially loaded. ([#4498][])
+* Tracing: Fix trace ID propagation by ensuring extraction of 16-character hex values from the `_dd.p.tid` tag in `x-datadog-tags` header. ([#4534][])
+* Tracing: Profiling: Fix warnings printed by `ruby -w`. ([#4547][], [#4549][])
+
 ## [2.12.2] - 2025-03-17
 
 ### Fixed
@@ -3145,7 +3167,8 @@ Release notes: https://github.com/DataDog/dd-trace-rb/releases/tag/v0.3.1
 Git diff: https://github.com/DataDog/dd-trace-rb/compare/v0.3.0...v0.3.1
 
 
-[Unreleased]: https://github.com/DataDog/dd-trace-rb/compare/v2.12.2...master
+[Unreleased]: https://github.com/DataDog/dd-trace-rb/compare/v2.13.0...master
+[2.13.0]: https://github.com/DataDog/dd-trace-rb/compare/v2.12.2...v2.13.0
 [2.12.2]: https://github.com/DataDog/dd-trace-rb/compare/v2.12.1...v2.12.2
 [2.12.1]: https://github.com/DataDog/dd-trace-rb/compare/v2.12.0...v2.12.1
 [2.12.0]: https://github.com/DataDog/dd-trace-rb/compare/v2.11.0...v2.12.0
@@ -4649,8 +4672,20 @@ Git diff: https://github.com/DataDog/dd-trace-rb/compare/v0.3.0...v0.3.1
 [#4424]: https://github.com/DataDog/dd-trace-rb/issues/4424
 [#4425]: https://github.com/DataDog/dd-trace-rb/issues/4425
 [#4426]: https://github.com/DataDog/dd-trace-rb/issues/4426
+[#4433]: https://github.com/DataDog/dd-trace-rb/issues/4433
 [#4437]: https://github.com/DataDog/dd-trace-rb/issues/4437
+[#4473]: https://github.com/DataDog/dd-trace-rb/issues/4473
+[#4493]: https://github.com/DataDog/dd-trace-rb/issues/4493
 [#4497]: https://github.com/DataDog/dd-trace-rb/issues/4497
+[#4498]: https://github.com/DataDog/dd-trace-rb/issues/4498
+[#4505]: https://github.com/DataDog/dd-trace-rb/issues/4505
+[#4507]: https://github.com/DataDog/dd-trace-rb/issues/4507
+[#4526]: https://github.com/DataDog/dd-trace-rb/issues/4526
+[#4528]: https://github.com/DataDog/dd-trace-rb/issues/4528
+[#4530]: https://github.com/DataDog/dd-trace-rb/issues/4530
+[#4534]: https://github.com/DataDog/dd-trace-rb/issues/4534
+[#4547]: https://github.com/DataDog/dd-trace-rb/issues/4547
+[#4549]: https://github.com/DataDog/dd-trace-rb/issues/4549
 [@AdrianLC]: https://github.com/AdrianLC
 [@Azure7111]: https://github.com/Azure7111
 [@BabyGroot]: https://github.com/BabyGroot

Matrixfile

@@ -281,7 +281,10 @@
     'sinatra-4' => '❌ 2.5 / ❌ 2.6 / ❌ 2.7 / ✅ 3.0 / ✅ 3.1 / ✅ 3.2 / ✅ 3.3 / ✅ 3.4 / ✅ jruby',
   },
   'appsec:devise' => {
-    '' => '✅ 2.5 / ✅ 2.6 / ✅ 2.7 / ✅ 3.0 / ✅ 3.1 / ✅ 3.2 / ✅ 3.3 / ✅ 3.4 / ✅ jruby'
+    # NOTE: JRuby bundler failed to install some dependencies https://github.com/ruby/psych/issues/700
+    #       and it could be re-enabled when upstream fix the issue
+    'devise-min' => '✅ 2.5 / ✅ 2.6 / ❌ 2.7 / ❌ 3.0 / ❌ 3.1 / ❌ 3.2 / ❌ 3.3 / ❌ 3.4 / ❌ jruby',
+    'devise-latest' => '✅ 2.5 / ✅ 2.6 / ✅ 2.7 / ✅ 3.0 / ✅ 3.1 / ✅ 3.2 / ✅ 3.3 / ✅ 3.4 / ❌ jruby'
   },
   'appsec:rails' => {
     'rails4-mysql2'  => '✅ 2.5 / ❌ 2.6 / ❌ 2.7 / ❌ 3.0 / ❌ 3.1 / ❌ 3.2 / ❌ 3.3 / ❌ 3.4 / ❌ jruby',

Rakefile

@@ -38,7 +38,7 @@ namespace :test do
         RuntimeMatcher.match?(rubies)
       end
 
-      candidates.each do |group, _|
+      candidates.each_key do |group|
         env = if group.empty?
                 {}
               else

Steepfile

@@ -74,6 +74,9 @@ target :datadog do
   ignore 'lib/datadog/core/metrics/options.rb'
   # steep fails in this file due to https://github.com/soutaro/steep/issues/1231
   ignore 'lib/datadog/core/remote/tie.rb'
+  # steep gets lost in module inclusions
+  ignore 'lib/datadog/core/remote/transport/http/config.rb'
+  ignore 'lib/datadog/core/remote/transport/http/negotiation.rb'
   ignore 'lib/datadog/core/runtime/ext.rb'
   ignore 'lib/datadog/core/runtime/metrics.rb'
   ignore 'lib/datadog/core/transport/http/adapters/net.rb'
@@ -95,6 +98,10 @@ target :datadog do
   ignore 'lib/datadog/di/transport/http/api.rb'
   ignore 'lib/datadog/di/transport/http/diagnostics.rb'
   ignore 'lib/datadog/di/transport/http/input.rb'
+  # steep thinks the type of the class is 'self', whatever that is,
+  # and then complains that this type doesn't have any methods including
+  # language basics like 'send' and 'raise'.
+  ignore 'lib/datadog/di/probe_notifier_worker.rb'
   ignore 'lib/datadog/kit/appsec/events.rb' # disabled because of https://github.com/soutaro/steep/issues/701
   ignore 'lib/datadog/kit/identity.rb'      # disabled because of https://github.com/soutaro/steep/issues/701
   ignore 'lib/datadog/opentelemetry.rb'
@@ -108,15 +115,13 @@ target :datadog do
   ignore 'lib/datadog/profiling/scheduler.rb'
   ignore 'lib/datadog/profiling/tag_builder.rb'
   ignore 'lib/datadog/profiling/tasks/setup.rb'
-  ignore 'lib/datadog/tracing.rb'
   ignore 'lib/datadog/tracing/buffer.rb'
   ignore 'lib/datadog/tracing/client_ip.rb'
   ignore 'lib/datadog/tracing/component.rb'
   ignore 'lib/datadog/tracing/configuration/ext.rb'
   ignore 'lib/datadog/tracing/configuration/settings.rb'
   ignore 'lib/datadog/tracing/context.rb'
   ignore 'lib/datadog/tracing/contrib/'
-  ignore 'lib/datadog/tracing/correlation.rb'
   ignore 'lib/datadog/tracing/diagnostics/environment_logger.rb'
   ignore 'lib/datadog/tracing/diagnostics/health.rb'
   ignore 'lib/datadog/tracing/distributed/datadog.rb'