chore: depend on ddsketch 3 (#8810)

This change upgrades the ddsketch dependency to one that doesn't depend
on protobuf. This aids the bugfix in
#8797 by completely removing
protobuf from the entire dependency tree.

## Checklist

- [x] Change(s) are motivated and described in the PR description
- [x] Testing strategy is described if automated tests are not included
in the PR
- [x] Risks are described (performance impact, potential for breakage,
maintainability)
- [x] Change is maintainable (easy to change, telemetry, documentation)
- [x] [Library release note
guidelines](https://ddtrace.readthedocs.io/en/stable/releasenotes.html)
are followed or label `changelog/no-changelog` is set
- [x] Documentation is included (in-code, generated user docs, [public
corp docs](https://github.com/DataDog/documentation/))
- [x] Backport labels are set (if
[applicable](https://ddtrace.readthedocs.io/en/latest/contributing.html#backporting))
- [x] If this PR changes the public interface, I've notified
`@DataDog/apm-tees`.
- [x] If change touches code that signs or publishes builds or packages,
or handles credentials of any kind, I've requested a review from
`@DataDog/security-design-and-guidance`.

## Reviewer Checklist

- [x] Title is accurate
- [x] All changes are related to the pull request's stated goal
- [x] Description motivates each change
- [x] Avoids breaking
[API](https://ddtrace.readthedocs.io/en/stable/versioning.html#interfaces)
changes
- [x] Testing strategy adequately addresses listed risks
- [x] Change is maintainable (easy to change, telemetry, documentation)
- [x] Release note makes sense to a user of the library
- [x] Author has acknowledged and discussed the performance implications
of this PR as reported in the benchmarks PR comment
- [x] Backport labels are set in a manner that is consistent with the
[release branch maintenance
policy](https://ddtrace.readthedocs.io/en/latest/contributing.html#backporting)

Author: emmettbutler

.riot/requirements/1580f89.txt renamed to .riot/requirements/1b57ac2.txt

@@ -2,7 +2,7 @@
 # This file is autogenerated by pip-compile with Python 3.11
 # by the following command:
 #
-#    pip-compile --no-annotate .riot/requirements/1580f89.in
+#    pip-compile --no-annotate .riot/requirements/1b57ac2.in
 #
 aiosqlite==0.17.0
 attrs==23.2.0
@@ -12,42 +12,42 @@ cattrs==22.2.0
 certifi==2024.2.2
 charset-normalizer==3.3.2
 click==8.1.7
-coverage[toml]==7.4.1
-ddsketch==2.0.4
+coverage[toml]==7.4.4
+ddsketch==3.0.1
 deprecated==1.2.14
 envier==0.5.1
 flask==3.0.2
 greenlet==3.0.3
 hypothesis==6.45.0
 idna==3.6
-importlib-metadata==6.11.0
+importlib-metadata==7.0.0
 iniconfig==2.0.0
 iso8601==1.1.0
 itsdangerous==2.1.2
 jinja2==3.1.3
 markupsafe==2.1.5
 mock==5.1.0
-opentelemetry-api==1.22.0
+opentelemetry-api==1.24.0
 opentracing==2.4.0
-packaging==23.2
+packaging==24.0
 peewee==3.17.1
 pluggy==1.4.0
 pony==0.7.17
-protobuf==4.25.2
+protobuf==5.26.1
 pypika-tortoise==0.1.6
-pytest==8.0.0
-pytest-cov==4.1.0
-pytest-mock==3.12.0
+pytest==8.1.1
+pytest-cov==5.0.0
+pytest-mock==3.14.0
 pytz==2024.1
 requests==2.31.0
 six==1.16.0
 sortedcontainers==2.4.0
-sqlalchemy==2.0.25
+sqlalchemy==2.0.29
 sqlparse==0.4.4
 tortoise-orm==0.20.0
-typing-extensions==4.9.0
-urllib3==2.2.0
+typing-extensions==4.10.0
+urllib3==2.2.1
 werkzeug==3.0.1
 wrapt==1.16.0
 xmltodict==0.13.0
-zipp==3.17.0
+zipp==3.18.1

hatch.toml

@@ -67,7 +67,7 @@ dev-mode = false
 python = "3.10"
 features = ["opentracing"]
 dependencies = [  # copied from library dependencies
-    "ddsketch>=2.0.1",
+    "ddsketch>=3.0.0",
     "protobuf>=3",
     "attrs>=20",
     "cattrs",
@@ -194,7 +194,7 @@ test = [
 
 # python 3.12 should replace 3.11 in this list, but installation is failing on 3.12
 # if you add or remove a version here, please also update the parallelism parameter
-# in .circleci/config.templ.yml 
+# in .circleci/config.templ.yml
 [[envs.appsec_threats_django.matrix]]
 python = ["3.7", "3.9"]
 django = ["~=2.2"]
@@ -238,7 +238,7 @@ test = [
 
 # python 3.12 should replace some 3.11 in this list, but installation is failing on 3.12
 # if you add or remove a version here, please also update the parallelism parameter
-# in .circleci/config.templ.yml 
+# in .circleci/config.templ.yml
 [[envs.appsec_threats_flask.matrix]]
 python = ["3.7", "3.9"]
 flask = ["~=1.1"]
@@ -279,7 +279,7 @@ test = [
 
 # python 3.12 should replace some 3.11 in this list, but installation is failing on 3.12
 # if you add or remove a version here, please also update the parallelism parameter
-# in .circleci/config.templ.yml 
+# in .circleci/config.templ.yml
 [[envs.appsec_threats_fastapi.matrix]]
 python = ["3.7", "3.9", "3.11"]
 fastapi = ["==0.86.0"]

pyproject.toml

@@ -30,7 +30,7 @@ dependencies = [
     "bytecode>=0.14.0; python_version~='3.11.0'",
     "bytecode>=0.13.0; python_version<'3.11'",
     "cattrs",
-    "ddsketch>=2.0.1",
+    "ddsketch>=3.0.0",
     "envier~=0.5",
     "importlib_metadata<=6.5.0; python_version<'3.8'",
     "opentelemetry-api>=1",

riotfile.py

@@ -192,7 +192,7 @@ def select_pys(min_version=MIN_PYTHON_VERSION, max_version=MAX_PYTHON_VERSION):
                 "six": ">=1.12.0",
                 "envier": "==0.5.1",
                 "cattrs": "<23.1.1",
-                "ddsketch": ">=2.0.1",
+                "ddsketch": ">=3.0.0",
                 "protobuf": ">=3",
                 "attrs": ">=20",
                 "typing_extensions": latest,