Ddtrace

Latest version: v3.3.0

Safety actively analyzes 723326 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 3 of 48

2.19.4

Bug Fixes

- ASM: This ensures that no module from ASM are loaded when ASM is disabled or unavailable.

- SCA: This ensures that no module from IAST are loaded when IAST is disabled or unavailable.

- Runtime Code Analysis (IAST): Avoid imports of IAST native module when IAST is not enabled.

- ASM: This fix resolves an issue where IAST modules could be loaded, even if disabled,
which could create an ImportError exception on Windows.


---

2.19.3

Bug Fixes

- CI Visibility: fixes an issue where Auto Test Retries with pytest would always consider retries of tests defined inside unittest classes to be successful.
- profiling: fix SystemError from the memory profiler returning NULL when collecting events


---

2.19.2

Bug Fixes

- Tracing
- celery: Fixes an issue where `celery.apply` spans from Celery prerun got closed too soon leading to span tags being missing.
- openai: Fixes a patching issue where asynchronous moderation endpoint calls resulted in coroutine scheduling errors.
- openai: Ensures the OpenAI integration is compatible with Python versions 3.12 and 3.13.
- vertexai: Resolves an issue with `chat.send_message()` where the content keyword argument was not parsed correctly.
- LLM Observability
- This fix resolves an issue where annotating a span with non latin-1 (but valid utf-8) input/output values resulted in encoding errors.
- Lib-Injection
- Fixes incorrect telemetry data payload format.

---

2.19.1

Bug Fixes

- Profiling
- Fixes an issue where the memory allocation profiler can cause a segmentation fault due to data races when accessing its own global data structures from multiple threads.
- Fixes a bug where profiling mutexes were not cleared on fork in the child process. This could cause deadlocks in certain configurations.
- Removes a system call from the memory allocation profiler, used to detect forks, which ran on every allocation and resulted in a significant slowdown.

- Tracing
- `django`: Fixes issue where django cache is represented as a django service rather than the third party service.
- `botocore`: Resolves formatting errors in the bedrock integration when parsing request model IDs, which can now accept AWS ARNs.


---

2.19.0

New Features
- ASM
- Introduces "Standalone SCA billing", opting out for APM billing and applying to only SCA. Enable this by setting these two environment variables: `DD_APPSEC_SCA_ENABLED` and `DD_EXPERIMENTAL_APPSEC_STANDALONE_ENABLED`

- Code Security
- Introduces stack trace reports for Code Security.

- Profiling
- Adds an experimental integration with the PyTorch profiler which can be enabled by setting `DD_PROFILING_PYTORCH_ENABLED=true`. This feature instruments the PyTorch profiler API (<https://pytorch.org/docs/stable/_modules/torch/profiler/profiler.html>) so that GPU profiling data can be sent to Datadog for visualization. This feature supports torch version \>= 1.8.1.

- Tracing
- `azure_functions`: Introduces support for Azure Functions.

Upgrade Notes
- Makes the library compatible with Python 3.13

Bug Fixes
- ASM
- Resolves an issue where AppSec was using a patched request and builtins functions, creating telemetry errors.

- Code Security
- Adds more modules to the IAST patching denylist to improve startup time

- Lib-Injection
- Fixes missing lib-injection telemetry for common abort scenarios.

- LLM Observability
- Resolves an issue where `LLMObs.enable()` ignored global patch configurations, specifically
the `DD_TRACE_<INTEGRATION>_ENABLED` and `DD_PATCH_MODULES` environment variables.

- Telemetry
- library: Resolves deadlocks that could occur when sending instrumentation telemetry data after an unhandled exception is raised.

- Tracing
- `ASGI`: This fix resolves an issue parsing response cookies in FastAPI and awsgi
- `asyncio`: Resolves an issue where asyncio event loops fail to register when `ddtrace-run`/`import ddtrace.auto` is used and gevent is installed.
- `datastreams`: Logs at warning level for Kinesis errors that break the Data Streams Monitoring map.


---

2.18.2

Bug Fixes

- Code Security
- Adds more modules to the IAST patching denylist to improve startup time

- Profiling
- Removes a system call from the memory allocation profiler, used to detect forks, which ran on every allocation and resulted in a significant slowdown.

- Tracing
- `ASGI`: Resolves an issue parsing response cookies in FastAPI and awsgi
- Integrations: Improves error handling for exceptions raised during the startup of ddtrace integrations. This reduces the likelihood of the ddtrace library raising unhandled exceptions.


---

Page 3 of 48

Links

Releases

Has known vulnerabilities

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.