Bump datadog from 2.36.0 to 2.38.0

[dependabot]

Bumps datadog from 2.36.0 to 2.38.0.

Release notes

Sourced from datadog's releases.

2.38.0

Added

• Dynamic Instrumentation: Log probes now support capture expressions as an alternative to capturing the full local/argument scope (#5845)
• SSI: Add support for Ruby 4.0 runtime (#5981)
• SSI: Add support for Bundler 4.0 and RubyGems 4.0 (#5981)

Fixed

• AppSec: Fix Rack-based and Rails request body analysis when body parsing fails (#5993)
• Profiling: Add workaround for crash when collecting frame information (#6014)
• Profiling: Fix left-over state impacting samples when profiler gets stopped and started again (#5960)
• Profiling: Fix Ruby 4.0.6 support by bumping minimum version of datadog-ruby_core_source to 3.5.3 (#6047)
• Profiling: Disable live heap size profiling on Ruby 4.0 due to incompatibility (#6022)
• Profiling: Disallow heap profiling on Ruby 4.1+ (#6023)
• Tracing: Fix pg instrumentation which raised ArgumentError when calling exec_params, exec_prepared without a params argument, or their async_/sync_ variants (#6020)

2.37.0

Highlights

Dynamic Instrumentation can now be enabled directly from the Datadog UI without restarting your application, and the Symbol Database is automatically enabled when DI is active.

AppSec adds signup event tracking and normalized HTTP routes for API Security Testing, along with multiple fixes to improve schema extraction, WAF analysis, and remote configuration stability.

We’ve also reduced profiler overhead and fixed a potential crash when using experimental heap profiling on Ruby 4.0.

Added

• AppSec: Add sign-up event tracking to Datadog::Kit::AppSec::Events::V2 (#5973)
• AppSec: Integrations: Add normalized HTTP route for API Security Testing (#5834)
• Dynamic Instrumentation: DI can now be enabled from the Datadog UI without setting DD_DYNAMIC_INSTRUMENTATION_ENABLED or restarting the application. Setting DD_DYNAMIC_INSTRUMENTATION_ENABLED=false explicitly still disables it and blocks UI-driven enablement (#5525)

Changed

• Profiling: Reduce profiler overhead by sampling profiler-internal threads only once per minute (#5955)
• Dynamic Instrumentation: Reject method probes that target Kernel#lambda, which cannot be safely instrumented (#5954)
• Dynamic Instrumentation: Reject method probes that target classes or modules in the Datadog namespace (#5907)
• Dynamic Instrumentation: Enable Symbol Database by default when Dynamic Instrumentation is enabled (#5828)

Fixed

• AppSec: AI Guard: Fix endpoint configuration via DD_SITE environment variable (#5940)
• AppSec: Fix API Security schema extraction timeout and telemetry (#5975)
• AppSec: Fix remote configuration errors when the ruleset name changes (#5970)

... (truncated)

Changelog

Sourced from datadog's changelog.

[2.38.0] - 2026-07-16

Added

• Dynamic Instrumentation: Log probes now support capture expressions as an alternative to capturing the full local/argument scope (#5845[])
• SSI: Add support for Ruby 4.0 runtime (#5981[])
• SSI: Add support for Bundler 4.0 and RubyGems 4.0 (#5981[])

Fixed

• AppSec: Fix Rack-based and Rails request body analysis when body parsing fails (#5993[])
• Profiling: Add workaround for crash when collecting frame information (#6014[])
• Profiling: Fix left-over state impacting samples when profiler gets stopped and started again (#5960[])
• Profiling: Fix Ruby 4.0.6 support by bumping minimum version of datadog-ruby_core_source to 3.5.3 (#6047[])
• Profiling: Disable live heap size profiling on Ruby 4.0 due to incompatibility (#6022[])
• Profiling: Disallow heap profiling on Ruby 4.1+ (#6023[])
• Tracing: Fix pg instrumentation which raised ArgumentError when calling exec_params, exec_prepared without a params argument, or their async_/sync_ variants (#6020[])

[2.37.0] - 2026-07-06

Added

• AppSec: Add sign-up event tracking to Datadog::Kit::AppSec::Events::V2 (#5973[])
• AppSec: Integrations: Add normalized HTTP route for API Security Testing (#5834[])
• Dynamic Instrumentation: DI can now be enabled from the Datadog UI without setting DD_DYNAMIC_INSTRUMENTATION_ENABLED or restarting the application. Setting DD_DYNAMIC_INSTRUMENTATION_ENABLED=false explicitly still disables it and blocks UI-driven enablement (#5525[])

Changed

• Profiling: Reduce profiler overhead by sampling profiler-internal threads only once per minute (#5955[])
• Dynamic Instrumentation: Reject method probes that target Kernel#lambda, which cannot be safely instrumented (#5954[])
• Dynamic Instrumentation: Reject method probes that target classes or modules in the Datadog namespace (#5907[])
• Dynamic Instrumentation: Enable Symbol Database by default when Dynamic Instrumentation is enabled (#5828[])

Fixed

• AppSec: AI Guard: Fix endpoint configuration via DD_SITE environment variable (#5940[])
• AppSec: Fix API Security schema extraction timeout and telemetry (#5975[])
• AppSec: Fix remote configuration errors when the ruleset name changes (#5970[])
• AppSec: Integrations: Add configurable size limit for downstream HTTP request and response body analysis (#5990[])
• AppSec: Integrations: Fix WAF analysis for requests with cached or parsed bodies in Rack and Sinatra (#5991[])
• AppSec: Integrations: Fix an exception for unauthorized requests when using Devise with Rails. (#5987[])
• Tracing: Fix a SIGSEGV crash that could happen with experimental heap profiling enabled on Ruby 4.0 (#5938[]) ([@​navidemad][])
• Dynamic Instrumentation: Normalize Rack CGI header prefix (HTTP_<HEADER>) in redactor so snapshot captures redact sensitive headers like their bare names (#5911[])
• Dynamic Instrumentation: Symbol Database and DI background threads no longer stop when application code raises a non-StandardError during introspection (#5945[])

Commits

• 48cf202 Merge pull request #6052 from DataDog/bump_to_version_2.38.0
• 83b2633 Bump to version 2.38.0
• 382717d Merge pull request #6047 from DataDog/ivoanjo/prof-15412-ruby4_0_6-support
• 56d3a9e [PROF-15412] Bump minimum version of datadog-ruby_core_source to 3.5.3
• 97cc6f6 Merge pull request #5845 from DataDog/di-capture-expressions
• 60e8c77 Merge branch 'master' into di-capture-expressions
• 4e01cc7 Merge pull request #6029 from DataDog/leo.romanovsky/open-feature-agents-cust...
• b632c43 Merge pull request #6020 from DataDog/tonycthsu/repro-pg-exec-prepared-arity
• 8574949 Merge branch 'master' into tonycthsu/repro-pg-exec-prepared-arity
• c19b846 DI RBS: use any alias for diff-added arbitrary-value untyped
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #854.