v5.99.0 proposal

.github/CODEOWNERS

@@ -201,6 +201,9 @@
 /packages/dd-trace/test/tracer.spec.js @DataDog/apm-sdk-capabilities-js
 
 /scripts/generate-config-types.js @DataDog/apm-sdk-capabilities-js
+/scripts/generate-supported-integrations.js @DataDog/apm-sdk-capabilities-js
+/supported_versions_output.json @DataDog/apm-sdk-capabilities-js
+/supported_versions_table.csv @DataDog/apm-sdk-capabilities-js
 
 # Feature Flagging
 /integration-tests/openfeature/ @DataDog/feature-flagging-and-experimentation-sdk
@@ -210,12 +213,14 @@
 # CI
 /.github/actions/dd-sts-app-key/action.yml @Datadog/lang-platform-js
 /.github/actions/dd-sts-api-key/action.yml @Datadog/lang-platform-js
+/.github/actions/push_to_test_optimization/ @DataDog/ci-app-libraries
 /.github/chainguard @DataDog/sdlc-security
 /.github/workflows/apm-capabilities.yml @DataDog/apm-sdk-capabilities-js
 /.github/workflows/apm-integrations.yml @DataDog/apm-idm-js
 /.github/workflows/aiguard.yml @DataDog/asm-js
 /.github/workflows/appsec.yml @DataDog/asm-js
 /.github/workflows/debugger.yml @DataDog/debugger-nodejs
+/.github/workflows/instrumentation.yml @DataDog/apm-idm-js
 /.github/workflows/serverless.yml @DataDog/serverless-aws @DataDog/apm-serverless
 /.github/workflows/llmobs.yml @DataDog/ml-observability
 /.github/workflows/profiling.yml @DataDog/profiling-js
@@ -255,6 +260,7 @@
 /packages/dd-trace/test/iitm.spec.js @DataDog/lang-platform-js
 /packages/dd-trace/test/log.spec.js @DataDog/lang-platform-js
 /packages/dd-trace/test/msgpack/ @DataDog/lang-platform-js
+/packages/dd-trace/test/mocha-hooks.spec.js @DataDog/lang-platform-js
 /packages/dd-trace/test/noop.spec.js @DataDog/lang-platform-js
 /packages/dd-trace/test/pkg.spec.js @DataDog/lang-platform-js
 /packages/dd-trace/test/plugin_manager.spec.js @DataDog/lang-platform-js

.github/actions/install/action.yml

@@ -9,7 +9,7 @@ runs:
   using: composite
   steps:
     - id: yarn-cache
-      uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
       with:
         key: yarn-cache-${{ github.workflow }}-${{ github.job }}-${{ hashFiles('yarn.lock') }}-v2
         path: node_modules.tar
@@ -19,7 +19,7 @@ runs:
       if: inputs.cache == 'true' && steps.yarn-cache.outputs.cache-hit == 'true'
       # Retry in case of server error from registry.
       # Wait 60 seconds to give the registry server time to heal.
-    - run: bun install --trust || sleep 60 && bun install --trust
+    - run: bun install --linker=hoisted --trust || sleep 60 && bun install --linker=hoisted --trust
       shell: bash
       env:
         _DD_IGNORE_ENGINES: 'true'

.github/actions/install/branch-diff/action.yml

@@ -7,7 +7,7 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+    - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
       with:
         path: ~/.npm
         key: ${{ github.workflow }}-branch-diff-3.1.1

.github/actions/node/action.yml

@@ -24,17 +24,16 @@ runs:
 
     # Cache a tiny file containing the exact Node.js version resolved by a previous run.
     # Key rotates every 20 minutes (epoch / 1200) so patches are picked up regularly.
-    # On cache hit, we pass the exact version to setup-node and skip the HTTP manifest lookup.
+    # On cache hit, install the cached patch and skip the manifest lookup.
     - name: Compute cache key
       id: cache-key
       shell: bash
       run: echo "block=$(( $(date -u +%s) / 1200 ))" >> "$GITHUB_OUTPUT"
-    - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+    - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
       id: node-version-cache
       with:
         path: /tmp/.node-resolved-version-${{ steps.node-version.outputs.version }}
         key: node-resolved-${{ runner.os }}-${{ runner.arch }}-v${{ steps.node-version.outputs.version }}-${{ steps.cache-key.outputs.block }}
-        restore-keys: node-resolved-${{ runner.os }}-${{ runner.arch }}-v${{ steps.node-version.outputs.version }}-
     - name: Read cached version
       id: cached
       shell: bash
@@ -43,11 +42,11 @@ runs:
           echo "version=$(cat /tmp/.node-resolved-version-${{ steps.node-version.outputs.version }})" >> "$GITHUB_OUTPUT"
         fi
 
-    - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+    - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
       with:
-        # Use the exact cached version when available, otherwise fall back to the requested version.
+        # Cache hit installs the cached patch directly. Otherwise pass the major; the cached
+        # patch is a semver-exact spec, so check-latest would not upgrade it.
         node-version: ${{ steps.cached.outputs.version || steps.node-version.outputs.version }}
-        # Resolve the latest patch on master when no cached version exists.
         check-latest: ${{ steps.cached.outputs.version == '' }}
         registry-url: ${{ inputs.registry-url || 'https://registry.npmjs.org' }}
 
@@ -56,44 +55,6 @@ runs:
       if: steps.node-version-cache.outputs.cache-hit != 'true'
       shell: bash
       run: node -v | tr -d 'v' > /tmp/.node-resolved-version-${{ steps.node-version.outputs.version }}
-    # Avoid GitHub REST API tag lookups (api.github.com/.../git/refs/tags) which can hit installation rate limits
-    # in large orgs / high-parallelism workflows. Instead, use a direct release asset URL.
-    #
-    # Note: setup-bun's `bun-download-url` skips its own AVX2 detection, so we do a minimal check ourselves for
-    # Linux x64 (fallback to baseline build when AVX2 isn't present).
-    - id: bun-download-url
-      run: |
-        set -euo pipefail
-
-        BUN_VERSION="1.3.1"
-
-        case "${RUNNER_OS}:${RUNNER_ARCH}" in
-          Linux:X64)
-            ASSET="bun-linux-x64.zip"
-            if ! grep -qiE '(^|\\s)avx2(\\s|$)' /proc/cpuinfo; then
-              ASSET="bun-linux-x64-baseline.zip"
-            fi
-            ;;
-          Linux:ARM64)
-            ASSET="bun-linux-aarch64.zip"
-            ;;
-          macOS:X64)
-            ASSET="bun-darwin-x64.zip"
-            ;;
-          macOS:ARM64)
-            ASSET="bun-darwin-aarch64.zip"
-            ;;
-          Windows:X64)
-            ASSET="bun-windows-x64.zip"
-            ;;
-          *)
-            echo "Unsupported runner: ${RUNNER_OS}/${RUNNER_ARCH}" >&2
-            exit 1
-            ;;
-        esac
-
-        echo "url=https://github.com/oven-sh/bun/releases/download/bun-v${BUN_VERSION}/${ASSET}" >> "$GITHUB_OUTPUT"
-      shell: bash
     - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
       with:
-        bun-download-url: ${{ steps.bun-download-url.outputs.url }}
+        bun-version: 1.3.1

.github/actions/plugins/test-and-upstream/action.yml

@@ -1,12 +1,19 @@
 name: Plugin and Upstream Tests
 description: Run plugin tests and upstream test suite
+inputs:
+  node-floor:
+    description: 'Lower Node alias: oldest-maintenance-lts or newest-maintenance-lts.'
+    required: false
+    default: oldest-maintenance-lts
 runs:
   using: composite
   steps:
     - uses: ./.github/actions/dd-sts-api-key
       id: dd-sts
-    - uses: ./.github/actions/testagent/start
-    - uses: ./.github/actions/node/oldest-maintenance-lts
+    - if: ${{ inputs.node-floor == 'oldest-maintenance-lts' }}
+      uses: ./.github/actions/node/oldest-maintenance-lts
+    - if: ${{ inputs.node-floor == 'newest-maintenance-lts' }}
+      uses: ./.github/actions/node/newest-maintenance-lts
     - uses: ./.github/actions/install
     - run: yarn test:plugins:ci
       shell: bash
@@ -21,10 +28,6 @@ runs:
       with:
         flags: plugins-test-and-upstream-${{ github.job }}
         dd_api_key: ${{ steps.dd-sts.outputs.api_key }}
-    - if: always()
-      uses: ./.github/actions/testagent/logs
-      with:
-        suffix: test-and-upstream-${{ github.job }}
     - uses: ./.github/actions/push_to_test_optimization
       if: "!cancelled()"
       with:

.github/actions/plugins/test/action.yml

@@ -1,12 +1,19 @@
 name: Plugin Tests
 description: Run plugin tests
+inputs:
+  node-floor:
+    description: 'Lower Node alias: oldest-maintenance-lts or newest-maintenance-lts.'
+    required: false
+    default: oldest-maintenance-lts
 runs:
   using: composite
   steps:
     - uses: ./.github/actions/dd-sts-api-key
       id: dd-sts
-    - uses: ./.github/actions/testagent/start
-    - uses: ./.github/actions/node/oldest-maintenance-lts
+    - if: ${{ inputs.node-floor == 'oldest-maintenance-lts' }}
+      uses: ./.github/actions/node/oldest-maintenance-lts
+    - if: ${{ inputs.node-floor == 'newest-maintenance-lts' }}
+      uses: ./.github/actions/node/newest-maintenance-lts
     - uses: ./.github/actions/install
     - run: yarn test:plugins:ci
       shell: bash
@@ -17,10 +24,6 @@ runs:
       with:
         flags: plugins-${{ github.job }}
         dd_api_key: ${{ steps.dd-sts.outputs.api_key }}
-    - if: always()
-      uses: ./.github/actions/testagent/logs
-      with:
-        suffix: test-${{ github.job }}
     - uses: ./.github/actions/push_to_test_optimization
       if: "!cancelled()"
       with:

.github/actions/plugins/upstream/action.yml

@@ -1,12 +1,19 @@
 name: Plugin Upstream Tests
 description: Run upstream test suite
+inputs:
+  node-floor:
+    description: 'Lower Node alias: oldest-maintenance-lts or newest-maintenance-lts.'
+    required: false
+    default: oldest-maintenance-lts
 runs:
   using: composite
   steps:
     - uses: ./.github/actions/dd-sts-api-key
       id: dd-sts
-    - uses: ./.github/actions/testagent/start
-    - uses: ./.github/actions/node/oldest-maintenance-lts
+    - if: ${{ inputs.node-floor == 'oldest-maintenance-lts' }}
+      uses: ./.github/actions/node/oldest-maintenance-lts
+    - if: ${{ inputs.node-floor == 'newest-maintenance-lts' }}
+      uses: ./.github/actions/node/newest-maintenance-lts
     - uses: ./.github/actions/install
     - run: yarn test:plugins:upstream
       shell: bash
@@ -17,10 +24,6 @@ runs:
       with:
         flags: plugins-upstream-${{ github.job }}
         dd_api_key: ${{ steps.dd-sts.outputs.api_key }}
-    - if: always()
-      uses: ./.github/actions/testagent/logs
-      with:
-        suffix: upstream-${{ github.job }}
     - uses: ./.github/actions/push_to_test_optimization
       if: "!cancelled()"
       with:

.github/actions/push_to_test_optimization/action.yml

@@ -14,7 +14,22 @@ runs:
       # >  from a forked repository, and are also subject to these restrictions.
       #
       # Which means they do not have access to secrets.
-      uses: DataDog/junit-upload-github-action@24449d01fc01e721fa36ccd2caa3caae6922f0e8 # v3.0.0
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
       with:
-        api_key: ${{ inputs.dd_api_key }}
-        service: dd-trace-js-tests
+        path: ${{ github.action_path }}/node_modules
+        key: push-to-test-optimization-${{ hashFiles('.github/actions/push_to_test_optimization/package.json') }}
+    - if: github.actor != 'dependabot[bot]'
+      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      with:
+        node-version: '20'
+    - if: github.actor != 'dependabot[bot]'
+      shell: bash
+      run: |
+        yarn install --no-lockfile
+        echo "$(pwd)/node_modules/.bin" >> $GITHUB_PATH
+      working-directory: ${{ github.action_path }}
+    - if: github.actor != 'dependabot[bot]'
+      shell: bash
+      run: datadog-ci junit upload --service dd-trace-js-tests .
+      env:
+        DD_API_KEY: ${{ inputs.dd_api_key }}

.github/actions/push_to_test_optimization/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "push-to-test-optimization",
+  "version": "1.0.0",
+  "private": true,
+  "dependencies": {
+    "@datadog/datadog-ci": "5.15.0"
+  }
+}

.github/actions/testagent/logs/action.yml

@@ -12,13 +12,12 @@ runs:
   steps:
     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
     - name: Create Artifacts Directories
-      run: |
-        mkdir -p "./artifacts/logs"
-        mkdir -p "./artifacts/supported-integrations"
+      if: runner.debug == '1'
+      run: mkdir -p "./artifacts/logs"
       shell: bash
     - name: Save Test Agent Logs
       id: save_logs
-      if:  runner.debug == '1' # only create test agent log artifacts if the github action has been re-run with debug mode
+      if: runner.debug == '1'
       run: |
         if [ -n "${{inputs.container-id}}" ]; then
           docker logs "${{inputs.container-id}}" > "artifacts/logs/test_agent_logs_${{ inputs.suffix }}.txt"
@@ -27,28 +26,8 @@ runs:
         fi
       shell: bash
     - name: Archive Test Agent Logs
-      if:  runner.debug == '1' # only create test agent log artifacts if the github action has been re-run with debug mode
+      if: runner.debug == '1'
       uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
       with:
         name: "test_agent_logs_${{ inputs.suffix }}"
         path: "./artifacts/logs"
-    - name: Get Tested Integrations from Test Agent
-      run: |
-        # make temporary files to save response data to
-        response=$(mktemp) && headers=$(mktemp)
-
-        # get tested integrations
-        curl -o "$response" -D "$headers" http://127.0.0.1:9126/test/integrations/tested_versions
-
-        # get filename representing the name of the tested integration from headers
-        filename=$(awk -F': ' '/file-name/{print $2}' "$headers" | tr -d '\r\n')
-
-        # copy data to final file and remove temp files
-        mv "$response" "artifacts/supported-integrations/${filename}_supported_versions.csv"
-        rm "$headers"
-      shell: bash
-    - name: Archive Test Agent Tested Versions Artifacts
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
-      with:
-        name: supported-integrations-${{ inputs.suffix }}
-        path: ./artifacts

.github/chainguard/supported-integrations.sts.yaml

@@ -0,0 +1,11 @@
+issuer: https://token.actions.githubusercontent.com
+
+subject: repo:DataDog/dd-trace-js:pull_request
+
+claim_pattern:
+  event_name: pull_request
+  ref: refs/pull/[0-9]+/merge
+  job_workflow_ref: DataDog/dd-trace-js/\.github/workflows/project.yml@refs/pull/[0-9]+/merge
+
+permissions:
+  contents: write

.github/dependabot.yml

@@ -34,6 +34,7 @@ updates:
     directories:
       - "/"
       - "/docs"
+      - "/.github/actions/push_to_test_optimization"
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 100
@@ -126,6 +127,9 @@ updates:
       - dependency-name: "meriyah"
         # 7.0.0 onwards only supports Node.js 20 and above
         update-types: ["version-update:semver-major"]
+      - dependency-name: "@rspack/*"
+        # 2.0.0 onwards only supports Node.js 20 and above
+        update-types: ["version-update:semver-major"]
     groups:
       vendor-minor-and-patch-dependencies:
         dependency-type: "production"

.github/workflows/aiguard.yml

@@ -8,8 +8,8 @@ on:
     - cron: 0 4 * * *
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.ref || github.run_id }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}
+  group: ${{ github.workflow }}-${{ github.ref == 'refs/heads/master' && github.run_id || github.ref }}
+  cancel-in-progress: true
 
 env:
   MOCHA_OPTIONS: ${{ github.ref == 'refs/heads/master' && '--retries 1' || '' }}

.github/workflows/all-green.yml

@@ -8,8 +8,8 @@ on:
     - cron: 0 4 * * *
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.ref || github.run_id }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}
+  group: ${{ github.workflow }}-${{ github.ref == 'refs/heads/master' && github.run_id || github.ref }}
+  cancel-in-progress: true
 
 jobs:
   all-green:
@@ -31,7 +31,7 @@ jobs:
       - run: yarn add @actions/core @actions/github octokit
       - run: node scripts/all-green.mjs
         env:
-          DELAY: ${{ github.run_attempt == 1 && '7' || '0' }} # 7 minutes on first attempt, no delay on reruns
+          DELAY: ${{ github.run_attempt == 1 && '5' || '0' }} # 5 minutes on first attempt, no delay on reruns
           GITHUB_PR_NUMBER: ${{ github.event.pull_request.number }}
           GITHUB_TOKEN: ${{ github.token }}
           POLLING_INTERVAL: 1