Merge branch 'main' into taegyunkim/consolidate-gevent-task-metadata

Author: taegyunkim

.cursor/rules/appsec.mdc

@@ -292,7 +292,7 @@ Automatic discovery and cataloging of your APIs:
 | `DD_API_SECURITY_PARSE_RESPONSE_BODY` | `true` | Capture response body schemas |
 | `DD_API_SECURITY_ENDPOINT_COLLECTION_ENABLED` | `true` | Enable endpoint collection |
 | `DD_API_SECURITY_ENDPOINT_COLLECTION_MESSAGE_LIMIT` | `5000` | Max endpoints to track |
-| `DD_API_SECURITY_DOWNSTREAM_REQUEST_BODY_ANALYSIS_SAMPLE_RATE` | `0.5` | Rate for downstream request analysis |
+| `DD_API_SECURITY_DOWNSTREAM_BODY_ANALYSIS_SAMPLE_RATE` | `0.5` | Rate for downstream request analysis |
 | `DD_API_SECURITY_MAX_DOWNSTREAM_REQUEST_BODY_ANALYSIS` | `1` | Max downstream requests analyzed per request |
 
 ### FastAPI Example

.github/CODEOWNERS

@@ -224,6 +224,7 @@ tests/openfeature/                        @DataDog/feature-flagging-and-experime
 # API SDK
 ddtrace/trace/                                     @DataDog/apm-sdk-capabilities-python
 ddtrace/_trace/                                    @DataDog/apm-sdk-capabilities-python
+ddtrace/_trace/span.py                             @DataDog/apm-sdk-capabilities-python @DataDog/apm-core-python
 # File commonly updated for integrations, widen ownership to help with PR review
 ddtrace/_trace/trace_handlers.py                   @DataDog/apm-sdk-capabilities-python @DataDog/apm-core-python @DataDog/apm-idm-python
 ddtrace/opentelemetry/                             @DataDog/apm-sdk-capabilities-python

.github/actions/setup-ci-deps/action.yml

@@ -0,0 +1,37 @@
+name: 'Setup CI Dependencies'
+description: 'Install locked CI dependencies with caching'
+inputs:
+  python-version:
+    description: 'Python version (optional, uses current if not specified)'
+    required: false
+    default: ''
+outputs:
+  cache-hit:
+    description: 'Whether the cache was hit'
+    value: ${{ steps.cache.outputs.cache-hit }}
+runs:
+  using: composite
+  steps:
+    - name: Setup Python (if version specified)
+      if: inputs.python-version != ''
+      uses: actions/setup-python@v5
+      with:
+        python-version: ${{ inputs.python-version }}
+
+    - name: Get pip cache directory
+      id: pip-cache
+      shell: bash
+      run: echo "dir=$(pip cache dir)" >> $GITHUB_OUTPUT
+
+    - name: Cache pip dependencies
+      id: cache
+      uses: actions/cache@v4
+      with:
+        path: ${{ steps.pip-cache.outputs.dir }}
+        key: ${{ runner.os }}-pip-${{ hashFiles('ci/requirements/ci.txt') }}
+        restore-keys: |
+          ${{ runner.os }}-pip-
+
+    - name: Install CI dependencies
+      shell: bash
+      run: pip install -r ci/requirements/ci.txt

.github/workflows/build_python_3.yml

@@ -22,10 +22,9 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      - uses: ./.github/actions/setup-ci-deps
         with:
           python-version: "3.13"
-      - run: pip install cibuildwheel==3.1.4
       - id: set-matrix
         env:
           CIBW_BUILD: ${{ inputs.cibw_build }}

.github/workflows/changelog.yml

@@ -28,14 +28,10 @@ jobs:
         if: github.event_name == 'pull_request'
         run: scripts/check-releasenotes
 
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
-        name: Install Python
+      - uses: ./.github/actions/setup-ci-deps
         with:
           python-version: '3.13'
 
-      - name: Install Dependencies
-        run: pip install reno docutils
-
       - name: Lint changelog notes
         run: reno lint
 

.github/workflows/generate-package-versions.yml

@@ -69,16 +69,7 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y libmariadb-dev
 
-      - name: Install Python dependencies
-        run: |
-          python -m pip install --upgrade "pip<25.3"
-          pip install packaging
-          pip install requests
-          pip install pip-tools==7.5.2
-          pip install riot==0.20.1
-          pip install hatch==1.14.2
-          pip install PyYAML
-          pip install ddtrace
+      - uses: ./.github/actions/setup-ci-deps
 
       - name: Run regenerate-riot-latest
         run: scripts/regenerate-riot-latest.sh

.github/workflows/generate-supported-versions.yml

@@ -53,13 +53,7 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y libmariadb-dev
 
-      - name: Install Python dependencies
-        run: |
-          python -m pip install --upgrade pip
-          pip install packaging
-          pip install requests
-          pip install riot==0.20.1
-          pip install wrapt==1.16.0
+      - uses: ./.github/actions/setup-ci-deps
 
       - name: Install ddtrace
         run: |

.github/workflows/pytorch_gpu_tests.yml

@@ -25,20 +25,13 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
 
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
-        name: Install Python
+      - uses: ./.github/actions/setup-ci-deps
         with:
           python-version: '3.12'
 
       - uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c # v1.15.2
       - name: Install latest stable toolchain and rustfmt
         run: rustup update stable && rustup default stable && rustup component add rustfmt clippy
 
-      - name: Install hatch
-        run: pip install hatch==1.12.0
-
-      - name: Install PyTorch
-        run: pip install torch
-
       - name: Run tests
         run: hatch run profiling_pytorch:test

.github/workflows/report-skipped-flaky.yml

@@ -24,15 +24,10 @@ jobs:
         with:
           ref: ${{ inputs.branch }}
 
-      - name: Set up Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      - uses: ./.github/actions/setup-ci-deps
         with:
           python-version: '3.11'
 
-      - name: Install codeowners
-        run: |
-            pip install codeowners
-
       - name: Run flaky tests report script
         run: python scripts/report_skipped_flaky.py
 

.github/workflows/system-tests.yml

@@ -80,7 +80,7 @@ jobs:
           persist-credentials: false
           repository: 'DataDog/system-tests'
           # Automatically managed, use scripts/update-system-tests-version to update
-          ref: '7e245eb5813f8dde45f9f25a708739ab5209ffd3'
+          ref: '0382c548169eae1b20cf218d9f29ba067ded8a39'
 
       - name: Download wheels to binaries directory
         uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
@@ -133,7 +133,7 @@ jobs:
           persist-credentials: false
           repository: 'DataDog/system-tests'
           # Automatically managed, use scripts/update-system-tests-version to update
-          ref: '7e245eb5813f8dde45f9f25a708739ab5209ffd3'
+          ref: '0382c548169eae1b20cf218d9f29ba067ded8a39'
 
       - name: Build runner
         uses: ./.github/actions/install_runner
@@ -338,7 +338,7 @@ jobs:
           persist-credentials: false
           repository: 'DataDog/system-tests'
           # Automatically managed, use scripts/update-system-tests-version to update
-          ref: '7e245eb5813f8dde45f9f25a708739ab5209ffd3'
+          ref: '0382c548169eae1b20cf218d9f29ba067ded8a39'
       - name: Download wheels to binaries directory
         uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
         with: