[dependabot]

Bumps the security group with 1 update in the /examples/datadog/flask/lambda-asset/src directory: ddtrace.

Updates ddtrace from 4.8.2 to 4.15.6

Release notes

Sourced from ddtrace's releases.

4.15.6

Security Issues

• tracing: Fixes a security vulnerability, as described in GHSA-3633-r77q-h3v3.

4.15.5

Bug Fixes

• Code Security (IAST): fixes an issue where taint tracking could abort the Python process when old-style % string formatting handled tainted text containing a lone surrogate character.

4.15.4

Bug Fixes

• internal: Fixes an issue on macOS where starting a subprocess can deadlock while a hostname lookup is in progress.
• tracing: Fixes a native memory leak on Linux when DD_TRACE_OTEL_CTX_ENABLED is set to true and a thread exits while an OpenTelemetry thread context is still attached.

4.15.3

Bug Fixes

• LLM Observability:
  • Resolves an issue where a streamed Bedrock InvokeModelWithResponseStream request that ended in an error or was cancelled part-way produced a span with no output annotation. The text received before the failure is now tagged on the span.
  • Resolves an issue where a streamed Bedrock ConverseStream request that ended in an error or was cancelled part-way produced a span that was not marked as an error, making an interrupted request indistinguishable from a successful one.
  • This fix resolves an issue where cancelled or failed OpenAI streamed requests produced no LLM Observability span at all. These requests now produce an LLM span carrying the input messages, whatever output arrived before the stream ended, and estimated token metrics.
• internal:
  • Fixes incorrect telemetry being collected when hitting cardinality limits during stats computation.
• tracing:
  • Fixes an issue where the Python garbage collector stops and memory grows without limit when DD_RUNTIME_METRICS_ENABLED is true.
• Profiling:
  • A crash that could occur in applications that use signal handlers to recover from crashes has been fixed.

4.15.2

Upgrade Notes

• tracing: DD_TRACE_OTEL_CTX_ENABLED now defaults to false until a Linux-native memory leak caused by setting it to true is fixed.

Bug Fixes

• LLM Observability: Fixes an issue where abandoned or disconnected streamed LLM requests can leave spans unfinished, causing memory to grow in long-running web workers.
• CI Visibility: Fixes an issue where Auto Test Retries do not retry tests that use pytest-timeout thread mode and terminate a pytest-xdist worker.

4.15.1

Bug Fixes

• LLM Observability
  • Resolves an issue where gen_ai.* attributes were added to APM spans when LLM Observability was disabled. These attributes are now only emitted when LLM Observability is enabled.

4.15.0

Estimated end-of-life date, accurate to within three months: 05-2027

See the support level definitions for more information.

... (truncated)

Commits

• 83ea398 fix(tracing): prevent quadratic query string obfuscation [backport 4.15] (#20...
• 4ae3a7f chore: bump version to 4.15.6 (#20863)
• 479a759 ci: update one-pipeline to 1.6.0 [4.15] (#20842)
• 8da5bb7 chore: bump version to 4.15.5 (#20833)
• ace9724 fix(iast): avoid process abort in modulo_aspect on lone surrogates [backpor...
• b97ac67 upgrade pyproject.toml version (#20715)
• 27e417f chore(native): bump libdatadog v43.0.1 → v43.0.2 (#20711)
• 45e21d6 fix(runtime): avoid macOS subprocess fork deadlock [backport 4.15] (#20678)
• 3c2beeb chore: bump version to 4.15.3 (#20630)
• 779fd48 fix(runtime-metrics): prevent gc stopping due to deadlock in gc monitor (#20624)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.