dependabot[bot] 0fab0fa0ae chore: bump github.com/DataDog/dd-trace-go/v2 from 2.0.0 to 2.8.1 (#27282)
Bumps
[github.com/DataDog/dd-trace-go/v2](https://github.com/DataDog/dd-trace-go)
from 2.0.0 to 2.8.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/DataDog/dd-trace-go/releases">github.com/DataDog/dd-trace-go/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.8.1</h2>
<!-- raw HTML omitted -->
<h3>Application Performance Monitoring (APM)</h3>
<ul>
<li>Revert &quot;fix(ddtrace/tracer): cache trace ID hex encoding (<a
href="https://redirect.github.com/DataDog/dd-trace-go/issues/4481">#4481</a>)&quot;
by <a href="https://github.com/darccio"><code>@​darccio</code></a></li>
<li>fix(tracer): enforce baggage item and byte limits on extraction by
<a href="https://github.com/mtoffl01"><code>@​mtoffl01</code></a> in <a
href="https://redirect.github.com/DataDog/dd-trace-go/issues/4720">#4720</a></li>
<li>fix(tracer): drop dd= list-entries over 256 bytes from incoming
tracestate by <a
href="https://github.com/mtoffl01"><code>@​mtoffl01</code></a> in <a
href="https://redirect.github.com/DataDog/dd-trace-go/issues/4721">#4721</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/DataDog/dd-trace-go/compare/v2.8.0...v2.8.1">https://github.com/DataDog/dd-trace-go/compare/v2.8.0...v2.8.1</a></p>
<h2>v2.8.0</h2>
<!-- raw HTML omitted -->
<h2>Summary</h2>
<p><strong>New integrations.</strong> Two new integrations land in this
release: Azure API Management (APIM) callout processor for security (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4620">#4620</a>),
and twmb/franz-go for Kafka (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4250">#4250</a>).</p>
<p><strong>Data Streams Monitoring.</strong> All three major Kafka
integrations — confluent-kafka-go (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4470">#4470</a>),
segmentio/kafka-go (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4477">#4477</a>),
and Sarama (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4560">#4560</a>)
— now attach <code>kafka_cluster_id</code> for cluster-level visibility.
<code>TrackDataStreamsTransaction</code> also gains span tagging and
custom timestamp support (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4499">#4499</a>).</p>
<p><strong>OpenTelemetry (OTel) and OTLP.</strong> The tracer can now
export traces directly via the OpenTelemetry Protocol (OTLP), bypassing
the Datadog Agent entirely (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4600">#4600</a>,
<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4583">#4583</a>).
OTel process context v2 (OTLP proto format) is supported (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4478">#4478</a>),
and the <code>parentbased_always_on</code> sampler works in OTLP mode
(<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4567">#4567</a>).</p>
<p><strong>Large Language Model (LLM) Observability.</strong> Prompt
tracking is now available for LLMObs spans (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4608">#4608</a>).
Experiment scope propagates from APM baggage into spans automatically
(<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4651">#4651</a>).</p>
<p><strong>Profiler.</strong> An experimental goroutine leak profile is
available as opt-in (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4420">#4420</a>).
The goroutine wait profile type has been removed — this is a breaking
change for anyone using it explicitly (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4589">#4589</a>).</p>
<p><strong>HTTP and tracing.</strong> A new environment variable
<code>DD_TRACE_HTTP_URL_QUERY_STRING_ALLOWLIST</code> lets you whitelist
query string parameters to keep unredacted (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4562">#4562</a>).
A new <code>tracer.StartSpanFromPropagatedContext</code> API simplifies
span creation from propagated contexts (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4492">#4492</a>).
AWS EventBridge max payload size is bumped to 1 MB (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4458">#4458</a>).
Envoy Service Extensions integration gains Unix Domain Socket (UDS)
support (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4463">#4463</a>).</p>
<p><strong>OpenFeature.</strong> Flag evaluation metrics now emit via
OTel Metrics (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4489">#4489</a>),
with allocation key tagging (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4515">#4515</a>)
and Remote Configuration (RC) integration via <code>FFE_FLAGS</code>
subscription at tracer startup (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4495">#4495</a>).</p>
<p><strong>Bug fixes.</strong> gorm now respects
<code>DD_TRACE_REMOVE_INTEGRATION_SERVICE_NAMES_ENABLED</code> (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4618">#4618</a>).
Redis and Valkey pipeline commands are joined with newlines, fixing
agent obfuscation (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4593">#4593</a>).
A race condition in HTTP client trace timings is resolved (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4591">#4591</a>).
AppSec block responses now include a correct <code>Content-Length</code>
header (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4496">#4496</a>),
and spurious Remote Configuration errors are silenced when RC is
disabled (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4612">#4612</a>).
<code>ContextWithSpan</code> no longer panics on nil context (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4313">#4313</a>).
The OTel bridge preserves keep/drop sampling decisions for unsampled
spans (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4631">#4631</a>).
User-provided DogStatsD addresses now correctly take priority over
defaults (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4575">#4575</a>).</p>
<p><strong>Performance.</strong> Trace ID hex encoding is cached (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4481">#4481</a>),
the span metadata map is preallocated (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4541">#4541</a>),
and locking is removed from both sampling priority access (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4546">#4546</a>)
and the internal logger (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4547">#4547</a>)
— reducing allocations and contention on hot paths.</p>
<p><strong>CI Visibility.</strong> Bazel offline cache and payload-file
modes are supported (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4503">#4503</a>).
Known test pagination is implemented for large test suites (<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4509">#4509</a>).</p>
<h2>What's Changed</h2>
<h3>Application Performance Monitoring (APM)</h3>
<ul>
<li>feat: collect service override source by <a
href="https://github.com/raphaelgavache"><code>@​raphaelgavache</code></a>
in <a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4500">DataDog/dd-trace-go#4500</a></li>
<li>feat: support service source for 19 integrations by <a
href="https://github.com/raphaelgavache"><code>@​raphaelgavache</code></a>
in <a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4526">DataDog/dd-trace-go#4526</a></li>
<li>feat: support service source for 13integrations by <a
href="https://github.com/raphaelgavache"><code>@​raphaelgavache</code></a>
in <a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4534">DataDog/dd-trace-go#4534</a></li>
<li>feat: add service source on 10 integrations by <a
href="https://github.com/raphaelgavache"><code>@​raphaelgavache</code></a>
in <a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4540">DataDog/dd-trace-go#4540</a></li>
<li>feat: force usage of ServiceWithSource in contrib by <a
href="https://github.com/raphaelgavache"><code>@​raphaelgavache</code></a>
in <a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4549">DataDog/dd-trace-go#4549</a></li>
<li>fix(eventbridge): update max payload size to 1m by <a
href="https://github.com/Dogbu-cyber"><code>@​Dogbu-cyber</code></a> in
<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4458">DataDog/dd-trace-go#4458</a></li>
<li>feat(telemetry): add stable session identifier headers by <a
href="https://github.com/khanayan123"><code>@​khanayan123</code></a> in
<a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4574">DataDog/dd-trace-go#4574</a></li>
<li>feat: collect service source in client stats by <a
href="https://github.com/raphaelgavache"><code>@​raphaelgavache</code></a>
in <a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4519">DataDog/dd-trace-go#4519</a></li>
<li>feat: OTel process context v2 (otlp proto) by <a
href="https://github.com/nsavoire"><code>@​nsavoire</code></a> in <a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4478">DataDog/dd-trace-go#4478</a></li>
<li>fix: join redis and valkey pipeline commands with newlines for
correct agent obfuscation by <a
href="https://github.com/rarguelloF"><code>@​rarguelloF</code></a> in <a
href="https://redirect.github.com/DataDog/dd-trace-go/pull/4593">DataDog/dd-trace-go#4593</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/DataDog/dd-trace-go/commit/2b2b2c2c9c420dcc5df24165681ed11c3f1c8438"><code>2b2b2c2</code></a>
chore: make fix-modules &amp;&amp; make generate</li>
<li><a
href="https://github.com/DataDog/dd-trace-go/commit/21438ed81625961b1393806128b142fa7e3829d7"><code>21438ed</code></a>
internal/version: v2.8.1</li>
<li><a
href="https://github.com/DataDog/dd-trace-go/commit/0bc11f30cc930602a07c90a3b106b72bca13ecc0"><code>0bc11f3</code></a>
internal/orchestrion/_integration: v2.8.1-rc.2</li>
<li><a
href="https://github.com/DataDog/dd-trace-go/commit/f17a712cf0ef081a42e1e972da5cb7d0d09fb1b5"><code>f17a712</code></a>
orchestrion/all: v2.8.1-rc.2</li>
<li><a
href="https://github.com/DataDog/dd-trace-go/commit/1b8d8e59ef212bae8097c7025e13fcbb99a0e554"><code>1b8d8e5</code></a>
internal/traceprof/traceproftest: v2.8.1-rc.2</li>
<li><a
href="https://github.com/DataDog/dd-trace-go/commit/7b30b1f0aec1bfd1f7f4a38edaccccd9c691c8fb"><code>7b30b1f</code></a>
contrib/aws/datadog-lambda-go/test/integration_tests/error:
v2.8.1-rc.2</li>
<li><a
href="https://github.com/DataDog/dd-trace-go/commit/96cc2a4c04453a99cba785cafe17ffb6e9a316a9"><code>96cc2a4</code></a>
contrib/aws/datadog-lambda-go/test/integration_tests/hello:
v2.8.1-rc.2</li>
<li><a
href="https://github.com/DataDog/dd-trace-go/commit/f3013b5aed4b2051a3da540cafeedbb05d4b89f9"><code>f3013b5</code></a>
instrumentation/internal/validationtest: v2.8.1-rc.2</li>
<li><a
href="https://github.com/DataDog/dd-trace-go/commit/c9f98439255531363157d4f1b312c594c5ec10e6"><code>c9f9843</code></a>
contrib/labstack/echo.v4: v2.8.1-rc.2</li>
<li><a
href="https://github.com/DataDog/dd-trace-go/commit/e07b30bb083cb5e2aba59f083319f921118d174a"><code>e07b30b</code></a>
contrib/valyala/fasthttp: v2.8.1-rc.2</li>
<li>Additional commits viewable in <a
href="https://github.com/DataDog/dd-trace-go/compare/v2.0.0...v2.8.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/DataDog/dd-trace-go/v2&package-manager=go_modules&previous-version=2.0.0&new-version=2.8.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/coder/coder/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 23:40:09 +00:00
2026-06-16 14:43:54 -06:00
…
2026-07-15 14:57:23 +01:00
…

Coder Logo Light Coder Logo Dark

Self-Hosted Cloud Development Environments and AI Agents

Coder Banner Light Coder Banner Dark

Quickstart | Docs | Why Coder | Premium

discord release godoc Go Report Card OpenSSF Best Practices OpenSSF Scorecard license

Coder is a self-hosted platform for cloud development environments and AI coding agents. Workspaces are defined with Terraform, connected through a secure Wireguard® tunnel, and automatically shut down when not used. Coder Agents runs a native AI coding agent whose loop executes in the control plane on your infrastructure, with no API keys in workspaces.

  • Define cloud development environments in Terraform
    • EC2 VMs, Kubernetes Pods, Docker Containers, etc.
  • Automatically shutdown idle resources to save on costs
  • Onboard developers in seconds instead of days
  • Delegate coding work to AI agents on your infrastructure
    • Bring any model (Anthropic, OpenAI, Google, Bedrock, self-hosted)
    • No LLM credentials in workspaces, user identity on every action
    • Centralized model governance, cost tracking, and audit logging

Coder platform showing templates and a running workspace

Quickstart

The most convenient way to try Coder is to install it on your local machine and experiment with provisioning cloud development environments using Docker (works on Linux, macOS, and Windows).

# First, install Coder
curl -L https://coder.com/install.sh | sh

# Start the Coder server (caches data in ~/.cache/coder)
coder server

# Navigate to http://localhost:3000 to create your initial user,
# create a Docker template and provision a workspace

Install

The easiest way to install Coder is to use the install script for Linux and macOS. For Windows, use the latest ..._installer.exe file from GitHub Releases.

curl -L https://coder.com/install.sh | sh

You can run the install script with --dry-run to see the commands that will be used to install without executing them. Run the install script with --help for additional flags.

See install for additional methods.

Once installed, you can start a production deployment with a single command:

# Automatically sets up an external access URL on *.try.coder.app
coder server

# Requires a PostgreSQL instance (version 13 or higher) and external access URL
coder server --postgres-url <url> --access-url <url>

Use coder --help to get a list of flags and environment variables. See the install guides for a complete tutorial.

Documentation

Browse the documentation or visit a specific section below:

  • Workspaces: Workspaces contain the IDEs, dependencies, and configuration information needed for software development
  • Templates: Templates are written in Terraform and describe the infrastructure for workspaces
  • Coder Agents: Delegate coding work to AI agents running on your self-hosted infrastructure
  • Administration: Learn how to operate Coder
  • Premium: Learn about paid features built for large teams
  • IDEs: Connect your existing editor to a workspace

Support

Feel free to open an issue if you have questions, run into bugs, or have a feature request.

Join our Discord to provide feedback on in-progress features and chat with the community using Coder!

Integrations

New integrations are always in progress. Open an issue to request one. Contributions are welcome in any official or community repository.

Official

Community

Contributing

New contributors are always welcome. If you are new to the Coder codebase, see the contribution guide to get started.

Hiring

Apply on the careers page if you are interested in joining the team.

S
Description
Provision remote development environments via Terraform
Readme AGPL-3.0
1 GiB
Languages
Go 74.9%
TypeScript 23.1%
Shell 0.8%
HCL 0.3%
PLpgSQL 0.3%
Other 0.4%