[dependabot]

Bumps ddtrace from 4.16.1 to 4.16.3.

Release notes

Sourced from ddtrace's releases.

4.16.3

Estimated end-of-life date, accurate to within three months: 05-2027 See the support level definitions for more information.

Bug Fixes

• CI Visibility: Fixes repeated Git history fetches that slow down successive pytest commands in the same shallow checkout. Fetches are retried when the checked-out commit or shallow history changes.

• CI Visibility: skip the git fetch --shallow-since unshallow on shallow clones when the backend already knows all local commits and the pull request merge-base is not needed or user-supplied (DD_GIT_PULL_REQUEST_BASE_BRANCH_SHA); shallow-graph merge-bases are untrusted and recomputed.

4.16.2

Estimated end-of-life date, accurate to within three months: 05-2027 See the support level definitions for more information.

Bug Fixes

• remote_config
  • Fixes an issue where updating or deleting one remote configuration for a service discards the tracing settings, such as sampling rules, tags, and log injection, applied by the other remote configurations that still target it.
  • Fixes an issue where forked worker processes, or processes that enable LLM Observability in agentless mode, keep applying a remote configuration that was removed while they were starting.
• falcon
  • Fixes an issue where creating a falcon.asgi.App failed with a TypeError or CompatibilityError when the falcon integration was enabled, for example under ddtrace-run. ASGI applications now start normally but are not traced by the falcon integration; wrap them with ddtrace.contrib.asgi.TraceMiddleware to trace them.
  • Fixes an issue where creating a falcon.App failed when middleware was None, a single component, a tuple, or passed positionally, and where falcon.API applications on Falcon 3 produced duplicate falcon.request spans.
• dynamic instrumentation
  • Fixes an AttributeError that prevented the Symbol Database from loading on Python versions earlier than 3.9.8.

Commits

• 3ff8355 bump version to 4.16.3 (#21503)
• 2463aa3 fix(ci_visibility): skip unshallow when a previous session already ran it [ba...
• 4dec0f6 fix(ci_visibility): skip git unshallow when backend has all commits [backport...
• 824a3b2 test(dfr): flaky test_djangorest_request_body_urlencoded [backport 4.16] (#21...
• af653b8 fix(remoteconfig): retain unchanged APM_TRACING records across updates [backp...
• 049c702 chore: bump version to 4.16.2 (#21420)
• dddc9f3 fix(compat): singledispatchmethod.register raises for CPython <3.9.8 [backp...
• 3337482 fix(falcon): support asgi apps [backport 4.16] (#21387)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Warning

Your comment is too long (maximum is 65536 characters), so the coverage report was not added. See the job log for how to reduce it.

[all-hands-bot]

🤖 OpenHands is fixing the failing CI on this dependabot version bump.

Head commit: 6c5f38c602d092e7dcce8cabbbd5e937cfb4e97e
View the conversation: https://oss-agent-canvas-backup.ngrok.dev/conversations/67285b97-12fa-41cd-90b3-300923406fe6

This comment was posted by an AI agent (OpenHands).

[all-hands-bot]

✅ Auto-approved by OpenHands: CI is green and the diff only touches dependency manifests and lockfiles.

This comment was posted by an AI agent (OpenHands).