Bump datadog from 2.36.0 to 2.39.0

[dependabot]

Bumps datadog from 2.36.0 to 2.39.0.

Release notes

Sourced from datadog's releases.

2.39.0

Added

• Tracing: Integrations: Add database name and host to Sequel spans and infer peer.service so datastore dependencies appear in the service map. (#6072)

Fixed

• AppSec: Fix error in devise contrib for non-standard Warden session serialization. (#6064)
• Dynamic Instrumentation: Fix dynamic instrumentation line probes failing to install when dynamic instrumentation is enabled remotely after application startup. (#6050)
• Profiling: Fix crash when trying to sample during GC compaction (#6056)
• Tracing: Integrations: Fix an ArgumentError (and the resulting Kafka::BufferOverflow) raised by the Kafka producer integration on Ruby 2.5 and 2.6. (#6060)

2.38.0

Added

• Dynamic Instrumentation: Log probes now support capture expressions as an alternative to capturing the full local/argument scope (#5845)
• SSI: Add support for Ruby 4.0 runtime (#5981)
• SSI: Add support for Bundler 4.0 and RubyGems 4.0 (#5981)

Fixed

• AppSec: Fix Rack-based and Rails request body analysis when body parsing fails (#5993)
• Profiling: Add workaround for crash when collecting frame information (#6014)
• Profiling: Fix left-over state impacting samples when profiler gets stopped and started again (#5960)
• Profiling: Fix Ruby 4.0.6 support by bumping minimum version of datadog-ruby_core_source to 3.5.3 (#6047)
• Profiling: Disable live heap size profiling on Ruby 4.0 due to incompatibility (#6022)
• Profiling: Disallow heap profiling on Ruby 4.1+ (#6023)
• Tracing: Fix pg instrumentation which raised ArgumentError when calling exec_params, exec_prepared without a params argument, or their async_/sync_ variants (#6020)

2.37.0

Highlights

Dynamic Instrumentation can now be enabled directly from the Datadog UI without restarting your application, and the Symbol Database is automatically enabled when DI is active.

AppSec adds signup event tracking and normalized HTTP routes for API Security Testing, along with multiple fixes to improve schema extraction, WAF analysis, and remote configuration stability.

We’ve also reduced profiler overhead and fixed a potential crash when using experimental heap profiling on Ruby 4.0.

Added

• AppSec: Add sign-up event tracking to Datadog::Kit::AppSec::Events::V2 (#5973)
• AppSec: Integrations: Add normalized HTTP route for API Security Testing (#5834)

... (truncated)

Changelog

Sourced from datadog's changelog.

[2.39.0] - 2026-07-22

Added

• Tracing: Integrations: Add database name and host to Sequel spans and infer peer.service so datastore dependencies appear in the service map. (#6072[])

Fixed

• AppSec: Fix error in devise contrib for non-standard Warden session serialization. (#6064[])
• Dynamic Instrumentation: Fix dynamic instrumentation line probes failing to install when dynamic instrumentation is enabled remotely after application startup. (#6050[])
• Profiling: Fix crash when trying to sample during GC compaction (#6056[])
• Tracing: Integrations: Fix an ArgumentError (and the resulting Kafka::BufferOverflow) raised by the Kafka producer integration on Ruby 2.5 and 2.6. (#6060[])

[2.38.0] - 2026-07-16

Added

• Dynamic Instrumentation: Log probes now support capture expressions as an alternative to capturing the full local/argument scope (#5845[])
• SSI: Add support for Ruby 4.0 runtime (#5981[])
• SSI: Add support for Bundler 4.0 and RubyGems 4.0 (#5981[])

Fixed

• AppSec: Fix Rack-based and Rails request body analysis when body parsing fails (#5993[])
• Profiling: Add workaround for crash when collecting frame information (#6014[])
• Profiling: Fix left-over state impacting samples when profiler gets stopped and started again (#5960[])
• Profiling: Fix Ruby 4.0.6 support by bumping minimum version of datadog-ruby_core_source to 3.5.3 (#6047[])
• Profiling: Disable live heap size profiling on Ruby 4.0 due to incompatibility (#6022[])
• Profiling: Disallow heap profiling on Ruby 4.1+ (#6023[])
• Tracing: Fix pg instrumentation which raised ArgumentError when calling exec_params, exec_prepared without a params argument, or their async_/sync_ variants (#6020[])

[2.37.0] - 2026-07-06

Added

• AppSec: Add sign-up event tracking to Datadog::Kit::AppSec::Events::V2 (#5973[])
• AppSec: Integrations: Add normalized HTTP route for API Security Testing (#5834[])
• Dynamic Instrumentation: DI can now be enabled from the Datadog UI without setting DD_DYNAMIC_INSTRUMENTATION_ENABLED or restarting the application. Setting DD_DYNAMIC_INSTRUMENTATION_ENABLED=false explicitly still disables it and blocks UI-driven enablement (#5525[])

Changed

• Profiling: Reduce profiler overhead by sampling profiler-internal threads only once per minute (#5955[])
• Dynamic Instrumentation: Reject method probes that target Kernel#lambda, which cannot be safely instrumented (#5954[])
• Dynamic Instrumentation: Reject method probes that target classes or modules in the Datadog namespace (#5907[])
• Dynamic Instrumentation: Enable Symbol Database by default when Dynamic Instrumentation is enabled (#5828[])

Fixed

• AppSec: AI Guard: Fix endpoint configuration via DD_SITE environment variable (#5940[])
• AppSec: Fix API Security schema extraction timeout and telemetry (#5975[])

... (truncated)

Commits

• 119daea Bump to version 2.39.0 (#6080)
• be78c94 Merge pull request #6078 from DataDog/fix-flaky-di-code-tracker-orphaned-trac...
• 7640942 Fix flaky DI code_tracker_spec: stop code tracker before nilling global ref
• 14c036b Add database metadata and peer.service inference to Sequel spans (#6072)
• f43d86e Fix StandardRB Style/StringLiterals offenses on master (#6075)
• b7dc242 Merge pull request #5443 from DataDog/marcotc/type-core-env-utils
• a51bec3 Merge pull request #5451 from DataDog/marcotc/type-core-remote-telemetry
• 0398818 Merge pull request #6038 from DataDog/lloeki/rubocop-restore-string-enforcement
• 5e4953e Merge pull request #6064 from nsinenko/fix/appsec-devise-non-standard-session...
• aa09b10 Document RuboCop and Standard disabled-cop sync
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Looks like datadog is up-to-date now, so this is no longer needed.