What's Changed

• chore(deps): bump rustls to 0.23.45 by @lucaspimentel in #1376
• test(bottlecap): fix clock race in increment metric tests by @lucaspimentel in #1368
• fix(deps): vuln protobufjs (patch → 7.6.6) [integration-tests/lambda/otlp-node/package.json] by @gh-worker-campaigns-3e9aa4[bot] in #1372
• Revert "chore(deps): bump rustls to 0.23.45" (#1376) by @lucaspimentel in #1389
• [SVLS-9800] fix(config): Support AWS Secrets Manager ARNs for dual-shipping additional endpoints by @shreyamalpani in #1391
• [SVLS-9767] build: embed the dependency tree in the binary with cargo auditable by @lym953 in #1377
• fix(stats): retry only retriable trace stats failures, with jittered backoff by @lucaspimentel in #1387
• [SVLS-9767] ci: scan bottlecap/Cargo.lock with Trivy, fix the advisory it finds, and re-point the alert by @lym953 in #1378
• chore(deps): pin aws-lc-rs <1.18 to retain AWS-LC-FIPS 3.x backend by @lucaspimentel in #1390
• [SLES-3021] Preserve timeout indication without runtime metrics by @litianningdatadog in #1400

New Contributors

• @gh-worker-campaigns-3e9aa4[bot] made their first contribution in #1372

Full Changelog: v100...v101

What's Changed

• [SLES-2961] fix(traces): extract Binary _datadog attribute from SQS records by @litianningdatadog in #1314
• [SVLS-9625] chore(ci): trigger a rebuild and re-sign of the CI image by @lym953 in #1322
• Publish images via dd-pkg publish-image instead of public-images trigger by @AliDatadog in #1323
• fix(deps): bump h2 to 0.4.18 to fix RUSTSEC-2026-0258 by @lym953 in #1335
• [SVLS-8070] Remove dormant GHCR publisher by @Lewis-E in #1330
• chore: add PR size guidance to AGENTS.md by @lym953 in #1331
• feat(dsm): Add support for automatic DSM context extraction inside the extension by @jeastham1993 in #1265
• feat(traces): use DD_SERVICE for inferred spans when integration service names are removed by @zarirhamza in #1343
• chore(deps): update libdatadog to 72fa8685 and serverless-components to 9daae40 by @lucaspimentel in #1332
• [SVLS-8582] feat(logs): change default of durable log buffer size from 0 to 5 by @lym953 in #1324
• fix(appsec): treat empty request/response bodies as absent by @DenzoNL in #1321
• [SLES-2971] fix(traces): only trust the X-Ray Sampled flag on Datadog-planted headers by @lym953 in #1325
• fix(ci): stop paging through every layer version to read the latest one by @lym953 in #1355
• [APMSVLS-485] fix(traces): bound trace stats cardinality and report collapsed keys by @lucaspimentel in #1338
• [APMSVLS-485] feat(traces): span-derived primary tags by @lucaspimentel in #1336
• [APMSVLS-469] feat(traces): add error sampler to keep/rescue traces with errors by @lucaspimentel in #1320
• [SLES-2997] fix: stitch split telemetry payloads instead of dropping the batch by @shreyamalpani in #1357
• chore(deps): update datadog-opentelemetry, libdatadog, serverless-components deps by @shreyamalpani in #1366
• [APMSVLS-501] refactor(bottlecap): preparatory work for a new "test-mode" binary by @lucaspimentel in #1344
• test(traces): dedupe test preamble in trace_processor tests by @lucaspimentel in #1364

New Contributors

• @AliDatadog made their first contribution in #1323
• @jeastham1993 made their first contribution in #1265
• @DenzoNL made their first contribution in #1321

Full Changelog: v99...v100

# AWS Commercial
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension:99
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-FIPS:99
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-ARM:99
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-ARM-FIPS:99

# AWS GovCloud
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension:99
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-FIPS:99
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-ARM:99
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-ARM-FIPS:99

What's Changed

• ci: unique identifier per integration-suite attempt; configurable stack prefix by @jchrostek-dd in #1287
• ci: make integration-suite telemetry queries resilient to Datadog API 429s by @jchrostek-dd in #1288
• feat(http): share one TLS root config across init HTTP clients by @duncanista in #1276
• Add apm_integration_test.rs to CODEOWNERS by @lucaspimentel in #1289
• [SVLS-9373] fix(config): trim trailing slashes from DD URL env vars by @shreyamalpani in #1298
• [SVLS-9450] fix: set durable execution status on REPORT log in Managed Instance mode by @lym953 in #1299
• fix(traces): avoid panic on empty /v0.6/stats payload by @lucaspimentel in #1290
• [SVLS-8800] fix: hold back cold-start invocation metric until durable tag is known by @lym953 in #1301
• test(oom): bump python OOM function to 512 MB to fix flaky metric assertion by @lym953 in #1306
• [SLES-2907] chore(deps): bump dd-trace-rs to datadog-opentelemetry-v0.5.0 by @litianningdatadog in #1302
• docs: warn against adding logs inside the logs pipeline by @lym953 in #1307
• [SLES-2907] chore(deps): align libdatadog rev, dedupe libdd-* crates by @litianningdatadog in #1303
• [SVLS-9488] fix(secrets): recognize apiKey field in JSON Secrets Manager secrets by @litianningdatadog in #1305

Full Changelog: v98...v99

# AWS Commercial
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension:98
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-FIPS:98
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-ARM:98
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-ARM-FIPS:98

# AWS GovCloud
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension:98
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-FIPS:98
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-ARM:98
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-ARM-FIPS:98

What's Changed

• feat(traces): rename durable function span tags to aws.durable.* by @lym953 in #1235
• fix(logs): lower log level to DEBUG for a trace failure by @lym953 in #1240
• feat(metrics): Add tag exclusion for customer metrics enrichment by @jchrostek-dd in #1234
• feat(metrics): emit OOM metric on memory equality with per-request dedup by @lym953 in #1241
• fix(http): disable pooling on shared reqwest client (#1092) by @duncanista in #1248
• fix(traces): respect Datadog-Client-Computed-Stats header by @lucaspimentel in #1245
• fix(traces): fix cold start timeout spans by @duncanista in #1254
• fix(traces): try to pair universal instrumentation on request id for on-demand by @shreyamalpani in #1250
• feat(logs): add config param DD_LAMBDA_DURABLE_FUNCTION_LOG_BUFFER_SIZE by @lym953 in #1239
• fix(test): repair broken cold-start tests from #1254 by @lucaspimentel in #1255
• fix(trace stats): Configure span kind and peer tag for agent-side stats by @lucaspimentel in #1189
• fix(metrics): emit init duration metric on platform report as fallback by @shreyamalpani in #1253
• fix(traces): Fixing payload size by @jchrostek-dd in #1257
• feat(config): introduce extension config on top of shared datadog-agent-config by @duncanista in #1249
• refactor(config): replace bottlecap Config with upstream Config by @duncanista in #1251
• fix(logs): remove noisy per-PID trace logs from fd usage collection by @purple4reina in #1246

Full Changelog: v97...v98

# AWS Commercial
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension:97
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-FIPS:97
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-ARM:97
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-ARM-FIPS:97

# AWS GovCloud
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension:97
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-FIPS:97
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-ARM:97
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-ARM-FIPS:97

What's Changed

• fix: update Cargo.lock to fix cargo audit vulnerabilities by @lym953 in #1190
• fix: bump rustls-webpki to 0.103.13 to fix RUSTSEC-2026-0104 by @lym953 in #1209
• fix: disable DD_TRACE_STATS_COMPUTATION_ENABLED by default by @eunskin in #1186
• feat: set durable_function.execution_status on END platform logs by @lym953 in #1188
• fix(appsec): Go runtime _dd.appsec.enabled missing on aws.lambda by @RomainMuller in #1213
• fix(otel): Update Operation Name to Match Frontend Usage by @zarirhamza in #1033
• refactor(stats): take stats_url as a StatsFlusher::new parameter by @lucaspimentel in #1210
• chore(deps): bump libdatadog to db05e1f and adapt to HttpClientTrait API by @duncanista in #1218
• perf(deps): drop aws-lc-rs from non-FIPS builds, use ring backend by @duncanista in #1219
• fix(logs): bound retries on non-success HTTP status by @litianningdatadog in #1220

New Contributors

• @eunskin made their first contribution in #1186

Full Changelog: v96...v97

# AWS Commercial
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension:96
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-FIPS:96
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-ARM:96
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-ARM-FIPS:96

# AWS GovCloud
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension:96
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-FIPS:96
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-ARM:96
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-ARM-FIPS:96

What's Changed

• feat(logs): Hold logs and add durable context to durable function logs by @lym953 in #1053
• feat(logs): add aws_lambda.durable_function.first_invocation to START/END/REPORT logs by @lym953 in #1158
• feat(auth): add AWS delegated authentication support by @jchrostek-dd in #1112
• fix(lifecycle): prune sorted_reparenting_info on context release to stop warning flood by @litianningdatadog in #1161
• fix(tags): Fix SnapStart cold_start tag using restore_time by @jchrostek-dd in #1139
• feat(traces): reintroduce base_service for Service Remapping by @zarirhamza in #1157
• fix(logging): Lower log level for some span deduper logs to debug by @lym953 in #1124
• revert(traces): revert Datadog-Client-Computed-Stats header support by @duncanista in #1176

New Contributors

• @chouetz made their first contribution in #1128
• @kathiehuang made their first contribution in #1144
• @happynancee made their first contribution in #1160

Full Changelog: v95...v96

# AWS Commercial
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension:95
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-FIPS:95
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-ARM:95
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-ARM-FIPS:95

# AWS GovCloud
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension:95
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-FIPS:95
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-ARM:95
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-ARM-FIPS:95

What's Changed

• fix(deps): update Cargo.lock to resolve cargo audit vulnerabilities by @lym953 in #1122
• [SVLS-8741] fix: Improve log messages and add retries for proxy flusher by @lym953 in #1123
• feat(otlp): add gRPC protocol support for trace ingestion by @jchrostek-dd in #1105
• feat(triggers): handle MSK events by @joeyzhao2018 in #1066
• feat(traces): [SVLS-8734] respect Datadog-Client-Computed-Stats header by @lym953 in #1118
• feat(traces): migrate trace propagation to dd-trace-rs by @duncanista in #1089
• chore: consolidate agent code for otlp by @duncanista in #1132
• fix(tests): remove stale _dd.compute_stats:1 assertion from logs integration test by @litianningdatadog in #1136

New Contributors

• @chouetz made their first contribution in #1128
• @kathiehuang made their first contribution in #1144

Full Changelog: v94...v95

# AWS Commercial
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension:94
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-FIPS:94
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-ARM:94
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-ARM-FIPS:94

# AWS GovCloud
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension:94
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-FIPS:94
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-ARM:94
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-ARM-FIPS:94

What's Changed

• fix(lifecycle): raise axum body limit to 6 MB for large Lambda payloads by @litianningdatadog in #1044
• fix(traces): downgrade handle_proxy body-read failure from ERROR to WARN by @litianningdatadog in #1046
• [SVLS-8581] feat: Add durable_function:true tag to enhanced metrics by @lym953 in #1048
• fix(logs): update level to status on datadog owned logs by @duncanista in #1055
• chore(dogstatsd): use pre built client by @duncanista in #1061
• fix(http): consolidate clients by @duncanista in #1062
• feat(http): allow skip ssl validation by @duncanista in #1064
• fix: handle_end_invocation race condition when extracting payload by @pablomartinezbernardo in #1024
• fix(lifecycle): release invocation context after platform report to prevent memory leak by @litianningdatadog in #1050
• feat: [SVLS-8390] drop sampled-out traces from backend when compute_trace_stats_on_extension is enabled by @lym953 in #1060
• fix: oversize payload causing universal instrumentation failures by @joeyzhao2018 in #1067
• fix(otlp): allow json payloads by @jchrostek-dd in #1069
• fix(traces): update payload size after dropping traces by @lym953 in #1091
• fix(http): disable connection pooling to prevent stale connections in Lambda by @jchrostek-dd in #1094
• fix(otlp): accept flexible timestamp formats in JSON payloads by @jchrostek-dd in #1108
• fix(traces): add retry strategy by @duncanista in #1116

New Contributors

• @pablomartinezbernardo made their first contribution in #1024
• @juliendoutre made their first contribution in #1104

Full Changelog: v93...v94

# AWS Commercial
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension:93
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-FIPS:93
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-ARM:93
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-ARM-FIPS:93

# AWS GovCloud
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension:93
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-FIPS:93
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-ARM:93
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-ARM-FIPS:93

What's Changed

Major Features

• feat: Add ap-east-2 and ap-southeast-6 to release config by @lym953 in #1001
• feat: add check to extract trace context present within event.request.headers by @Dogbu-cyber in #1011

Major Fixes

• fix: lowercase DD_SERVICE on processors by @duncanista in #1013
• avoid setting cold start on managed instances mode by @duncanista in #1008
• fix(config): ensure logs intake URL is correctly prefixed by @shreyamalpani in #1021
• publish image to correct repos by @jchrostek-dd in #1022
• fix(vuln): cargo update by @duncanista in #1014
• fix(logs): format log level into correct status by @duncanista in #1036
• fix(deps): upgrade libdatadog by @duncanista in #1039
• fix: pin rustls-native-certs to <0.8.3 by @duncanista in #1047

Minor Fixes

• chore: Fix cargo-audit error by @lym953 in #992
• docs: remove reference to code and docs being in different repos by @egracer in #1017
• chore(flushing): refactor flushing by @duncanista in #1016
• chore(flushing): standardize code with refactoring on some flushers and retries by @duncanista in #1018
• chore(deps): upgrade dogstatsd by @duncanista in #1020
• chore(deps): upgrade rust to v1.93.1 by @duncanista in #1034
• upgrade time@0.3.47 by @duncanista in #1035
• fix(logs): stop logging payload on debug by @duncanista in #1037
• perf(logger): replace serde_json::json! with zero-allocation write! in logger by @litianningdatadog in #1042
• perf(deps): bump opentelemetry-proto to 0.30.0 and tonic-types to 0.13 by @litianningdatadog in #1043

New Contributors

• @campaigner-prod[bot] made their first contribution in #1002
• @egracer made their first contribution in #1017
• @Dogbu-cyber made their first contribution in #1011

Full Changelog: v92...v93

# AWS Commercial
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension:92
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-FIPS:92
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-ARM:92
arn:aws:lambda:<AWS_REGION>:464622532012:layer:Datadog-Extension-ARM-FIPS:92

# AWS GovCloud
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension:92
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-FIPS:92
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-ARM:92
arn:aws-us-gov:lambda:us-gov-<AWS_REGION>:002406178527:layer:Datadog-Extension-ARM-FIPS:92

What's Changed

Major Features:

• Support TLS certificate for logs/proxy flusher by @lym953 in #979
• Support TLS certificate for dogstatsd metrics flusher by @lym953 in #984

Major fixes:

• Fix AWS API Gateway endpoints correlation HTTP span tags by @e-n-0 in #967
• Fix OTLP response format by @jchrostek-dd in #969
• Fix log requestId for LMI by @jchrostek-dd in #973
• Add stats flusher to continuous mode by @litianningdatadog in #977

Minor fixes:

• Add debug log for flush strategy by @jchrostek-dd in #974
• Add timeout for requests to span_dedup_service by @lym953 in #986

New Contributors

• @e-n-0 made their first contribution in #967
• @Lewis-E made their first contribution in #993

Full Changelog: v91...v92