Merge branch '4.0-breaking-changes' into taegyunkim/remove-stack-v2-enabled

Author: emmettbutler

.github/CODEOWNERS

@@ -126,6 +126,7 @@ tests/appsec/                       @DataDog/asm-python
 tests/contrib/subprocess            @DataDog/asm-python
 tests/snapshots/tests*appsec*.json  @DataDog/asm-python
 tests/contrib/*/test*appsec*.py     @DataDog/asm-python
+tests/contrib/*/test*iast*.py  @DataDog/asm-python
 scripts/iast/*                      @DataDog/asm-python
 
 # Profiling

.github/workflows/generate-package-versions.yml

@@ -49,6 +49,11 @@ jobs:
         with:
           python-version: "3.13"
 
+      - name: Setup Python 3.14
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        with:
+          python-version: "3.14"
+
       - name: Set up QEMU
         uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
 
@@ -82,6 +87,8 @@ jobs:
           pip install riot==0.20.1
           pip install PyYAML
           pip install ddtrace
+          # Install latest pip-tools from main branch for Python 3.14 compatibility
+          pip install --upgrade git+https://github.com/jazzband/pip-tools.git@934b46a8795554f994b984ac743957f8458a29d6
 
       - name: Run regenerate-riot-latest
         run: scripts/regenerate-riot-latest.sh

.github/workflows/profiling-native.yml

@@ -21,6 +21,7 @@ jobs:
       matrix:
         os: [ubuntu-24.04]
         python-version: ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13"]
+        memcpy-mode: ["default", "fast"]
         sanitizer: ["safety", "thread", "valgrind"]
 
     steps:
@@ -49,4 +50,10 @@ jobs:
           # DEV: We currently have tests in dd_wrapper and stack_v2, setting
           # stack_v2 here will also run tests in dd_wrapper. Revisit this when
           # that changes.
+          if [ "${{matrix.memcpy-mode}}" == "fast" ]; then
+            export ECHION_USE_FAST_COPY_MEMORY=1
+          else
+            export ECHION_USE_FAST_COPY_MEMORY=0
+          fi
+
           ./ddtrace/internal/datadog/profiling/build_standalone.sh --${{matrix.sanitizer}} RelWithDebInfo stack_v2_test

.github/workflows/requirements-locks.yml

@@ -28,7 +28,8 @@ jobs:
         run: pyenv global 3.10 3.8 3.9 3.11 3.12 3.13 3.14
 
       - name: Install Dependencies
-        run: pip install --upgrade pip && pip install riot==0.20.1 && pip install toml==0.10.2
+        # Keep pip at <25.3 until https://github.com/jazzband/pip-tools/issues/2252 is resolved
+        run: pip install --upgrade "pip<25.3" && pip install riot==0.20.1 && pip install toml==0.10.2
 
       - name: Generate riot locks
         run: scripts/compile-and-prune-test-requirements

.github/workflows/system-tests.yml

@@ -45,7 +45,7 @@ jobs:
           persist-credentials: false
           repository: 'DataDog/system-tests'
           # Automatically managed, use scripts/update-system-tests-version to update
-          ref: '173e1e83468e28274bc4631f1ee2afc4c2620c4e'
+          ref: 'f980721788378102f7ae7caef156a53b20feb093'
 
       - name: Download wheels to binaries directory
         uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
@@ -90,7 +90,7 @@ jobs:
           persist-credentials: false
           repository: 'DataDog/system-tests'
           # Automatically managed, use scripts/update-system-tests-version to update
-          ref: '173e1e83468e28274bc4631f1ee2afc4c2620c4e'
+          ref: 'f980721788378102f7ae7caef156a53b20feb093'
 
       - name: Build runner
         uses: ./.github/actions/install_runner
@@ -275,7 +275,7 @@ jobs:
           persist-credentials: false
           repository: 'DataDog/system-tests'
           # Automatically managed, use scripts/update-system-tests-version to update
-          ref: '173e1e83468e28274bc4631f1ee2afc4c2620c4e'
+          ref: 'f980721788378102f7ae7caef156a53b20feb093'
       - name: Download wheels to binaries directory
         uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:

.gitlab-ci.yml

@@ -14,7 +14,7 @@ variables:
   DD_VPA_TEMPLATE: "vpa-template-cpu-p70-10percent-2x-oom-min-cap"
   # CI_DEBUG_SERVICES: "true"
   # Automatically managed, use scripts/update-system-tests-version to update
-  SYSTEM_TESTS_REF: "173e1e83468e28274bc4631f1ee2afc4c2620c4e"
+  SYSTEM_TESTS_REF: "f980721788378102f7ae7caef156a53b20feb093"
 
 default:
   interruptible: true

.gitlab/package.yml

@@ -85,8 +85,6 @@ publish-wheels-to-s3:
   tags: ["arch:amd64"]
   image: registry.ddbuild.io/images/mirror/amazon/aws-cli:2.4.29
   stage: package
-  rules:
-    - when: always
   needs:
     - job: download_ddtrace_artifacts
       artifacts: true

.readthedocs.yml

@@ -7,8 +7,6 @@ build:
   commands:
     - cargo install --force --root /home/docs/.asdf --git https://github.com/DataDog/libdatadog --bin dedup_headers tools
     - git fetch --unshallow || true
-    - curl -L https://github.com/pypa/hatch/releases/download/hatch-v1.12.0/hatch-x86_64-unknown-linux-gnu.tar.gz | tar zx
-    - install -t $HOME/.asdf/bin hatch
-    - hatch -q
-    - hatch -v run docs:sphinx-build -W -b html docs docs/_build/html
+    - pip install riot
+    - riot -v run --pass-env build_docs
     - mv docs/_build $READTHEDOCS_OUTPUT

.riot/requirements/10ba61c.txt

@@ -2,35 +2,35 @@
 # This file is autogenerated by pip-compile with Python 3.10
 # by the following command:
 #
-#    pip-compile --allow-unsafe --no-annotate .riot/requirements/8d9a826.in
+#    pip-compile --allow-unsafe --no-annotate .riot/requirements/10ded6c.in
 #
-attrs==25.3.0
-coverage[toml]==7.8.2
+attrs==25.4.0
+coverage[toml]==7.11.0
 exceptiongroup==1.3.0
-gevent==25.5.1
-greenlet==3.2.2
+gevent==25.9.1
+greenlet==3.2.4
 gunicorn[gevent]==23.0.0
 hypothesis==6.45.0
-iniconfig==2.1.0
-lz4==4.4.4
+iniconfig==2.3.0
 mock==5.2.0
 opentracing==2.4.0
 packaging==25.0
 pluggy==1.6.0
 py-cpuinfo==8.0.0
-pygments==2.19.1
-pytest==8.4.0
+pygments==2.19.2
+pytest==8.4.2
 pytest-asyncio==0.21.1
-pytest-benchmark==5.1.0
-pytest-cov==6.1.1
-pytest-mock==3.14.1
-pytest-randomly==3.16.0
+pytest-benchmark==5.2.1
+pytest-cov==7.0.0
+pytest-mock==3.15.1
+pytest-randomly==4.0.1
 sortedcontainers==2.4.0
-tomli==2.2.1
-typing-extensions==4.14.0
-uwsgi==2.0.30
-zope-event==5.0
-zope-interface==7.2
+tomli==2.3.0
+typing-extensions==4.15.0
+uwsgi==2.0.31
+zope-event==6.0
+zope-interface==8.0.1
+zstandard==0.25.0
 
 # The following packages are considered to be unsafe in a requirements file:
 setuptools==80.9.0