chore(deps): update dependency dd-trace to v6.4.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
dd-trace	6.0.0 → 6.4.0

---

Release Notes

DataDog/dd-trace-js (dd-trace)

v6.4.0: 6.4.0

Compare Source

Features

• electron: Ship dd-trace-electron package with reduced dependencies #​8948
• General: Trace core-API HTTP/2 servers #​9138
• graphql: Trace Apollo Federation entity resolvers and skip the health-check #​9134
• Test Optimization: Add EFD retry count override #​9344
• Test Optimization: Diagnose and fix Jest suite skipping #​9339

Fixes

• aws-sdk: Record kinesis DSM checkpoint only when context ships #​9183
• graphql: Skip Apollo health checks in Mercurius #​9363
• LLM Observability: Replace Object.create(span) with delegating wrapper to preserve OTel span private-field access #​9152
• proxy: Retain feature modules across tracing reconfiguration #​9331
• Test Optimization: Isolate retry status by spec #​9340
• Test Optimization: Preserve zero EFD retry budgets #​9341
• Test Optimization: Prevent negative test durations #​9380
• Test Optimization: Resolve disabled git upload immediately #​9338
• Test Optimization: Support cucumber 13.1 results #​9370
• Test Optimization: Wait for all worker writers #​9349

Performance

• graphql: Reuse filtered variables across resolve spans #​9225

Internal (CI, Testing, Benchmarking)

• AppSec: Select mongodb version by Node.js runtime in plugin tests #​9322
• ci: Set 16 retries for dd-sts-action #​9374
• Dependencies: Bump bullmq #​9350
• Dependencies: Bump pnpm #​9365
• Dependencies: Bump protobufjs from 8.6.5 to 8.7.0 in /vendor in the vendor-minor-and-patch-dependencies group across 1 directory #​9325
• express: Exercise loopback public entry #​9291
• express: Trace middleware via layer prototype dispatch #​9067
• General: Make no-traces timeout test deterministic #​9372
• General: Prepare lint and Vitest for TypeScript 7 #​9345
• General: Preserve coverage from custom plugin jobs #​9386
• General: Reject when no matching trace arrives before the timeout #​9177
• General: Select latest unversioned dependency range #​9352
• LLM Observability: Centralize session_id injection in handleLLMObsInjection #​9353
• LLM Observability: Cover compatible SDK provider version matrix #​9332
• Test Optimization: Assert complete run payloads #​9358
• Test Optimization: Make STS API key fetch non-fatal #​9320
• undici: Force proxy tunnel in CONNECT regression test #​9271

v6.3.0: 6.3.0

Compare Source

Features

• @​modelcontextprotocol/sdk: Add tracing for MCP server requests and client operations #​8916
• General: Sample event loop delay per iteration on Node 26.5+ #​9273
• LLM Observability: Propagate session_id to following spans and across services MLOB-7756 #​9279

Fixes

• AppSec: Instrument cookie parseCookie for cookie >=1.1 #​9272
• AppSec: Log the error when the native WAF binding fails to load #​9288
• AppSec: Suppress informational responses after blocking requests #​9290
• azure: Enable Web Crypto on Node 18 #​9311
• azure-functions: Fix span links and missing telemetry for non-HTTP triggers #​9278
• General: Handle invalid programmatic option values #​9312
• graphql: Honor errorExtensions on the mercurius request span #​9284
• OpenTelemetry: Wire span processors passed to the provider constructor #​9285
• Test Optimization: Do not mark unchanged tests as impacted #​9314
• Test Optimization: Handle disabled tests in serial retries #​9313
• Test Optimization: Omit empty FTR capture containers #​9304

Internal (CI, Testing, Benchmarking)

• AppSec: Deflake api-security telemetry metrics integration tests #​9303
• General: Select version targets by Node.js runtime #​9306
• lint: Revert editorconfig checker from npm to docker #​9315
• OpenTelemetry: Deflake OTLP metrics HTTP export test with fake timers #​9287
• readme: Update eol column for v5 #​9267

v6.2.0: 6.2.0

Compare Source

Features

• graphql: Add mercurius support with a top-level graphql.request span #​9142

Fixes

• AppSec: Report request headers on Lambda spans when AppSec is enabled #​9257
• General: Avoid rewriter source map marker in source #​9212
• General: Skip loader hook registration when instrumentation bails out #​9242
• guardrails: Forward abort telemetry synchronously to avoid a hung exit #​9268
• instrumentations: Preserve asyncEnd wait with code-transformer 0.16 #​9256
• msgpack: Cap MsgpackChunk growth at the agent intake limit #​8672
• OpenTelemetry: Wrap sdk-trace TracerProvider for sdk-node 0.220+ #​9255
• ssi: Run ssi in current proposal branch #​9223
• Test Optimization: Stop propagating metadata to workers #​9261

Documentation

• Serverless: Add serverless integrations skill #​9188

Internal (CI, Testing, Benchmarking)

• benchmarks: Support BP_EXTERNAL_S3_URL override #​9155
• guardrails: Skip node 24 initialize runtime checks #​9283
• init: Skip node 22 loader guardrails #​9277
• Test Optimization: Cover msw preload regression #​9262
• Test Optimization: Stabilize atf final status assertion #​9253
• Test Optimization: Stabilize request error tag reporting #​9254

v6.1.0: 6.1.0

Compare Source

Features

• claude-agent-sdk: Add support for @anthropic-ai/claude-agent-sdk #​9202
• graphql: Support collapse, depth, variables, and error extensions via env #​9111
• LLM Observability: Support vercel ai sdk v7 #​8949
• mongodb: Open a parent span for Collection#bulkWrite #​9109
• Test Optimization: Tag failure screenshot upload result #​9232
• Test Optimization: Upload failure screenshots to the v2 media endpoint #​8981

Fixes

• AppSec: Support apollo v5 blocking #​9007
• aws-durable-execution-sdk-js: SVLS-8588 set span type to serverless #​9162
• child_process: Stabilize promisified exec spans #​9180
• Crash Tracking: Resolve frames out-of-process on Linux #​9237
• fastify: Bound avvio's boot re-drive and stop swallowing async hook rejections #​9118
• graphql: Make the resolve span the active scope inside resolvers #​8208
• OpenTelemetry: Apply global/resource tags to OTel-bridged spans #​9229
• Profiling: Abort profile upload on socket timeout #​9217
• Test Optimization: Changed DD_MAJOR guards to greater than or equal #​9199
• Test Optimization: Ignore intermediate retry failures in aggregate status #​9231
• Test Optimization: Instrument build index module loads #​9211
• Test Optimization: Propagate no-worker request error tags #​9189
• Test Optimization: Report tests from custom environments #​9194
• Test Optimization: Stabilize failed test replay waits #​9193
• Test Optimization: Support concurrent Vitest tests #​8412
• Test Optimization: Support test.concurrent #​9209

Internal (CI, Testing, Benchmarking)

• AI Guard: Rework aiguard integrations #​9185
• AppSec: Remove dead code and fix stale comments in nosql mongodb analyzer #​9168
• coverage: Collect integration coverage with native V8 instead of istanbul #​9091
• Dependencies: Bump import-in-the-middle to 3.3.1 #​9235
• Dependencies: Bump npm #​9205
• General: Reject non-string version ranges in withVersions #​9187
• plugin-env: Read apm-integrations.yml after workflow rename #​9224
• Test Optimization: Stabilize Playwright retry tagging flake #​9216

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.