chore(deps): update dependency dd-trace to v6.3.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
dd-trace	6.0.0 → 6.3.0

---

Release Notes

DataDog/dd-trace-js (dd-trace)

v6.3.0: 6.3.0

Compare Source

Features

• @​modelcontextprotocol/sdk: Add tracing for MCP server requests and client operations #​8916
• General: Sample event loop delay per iteration on Node 26.5+ #​9273
• LLM Observability: Propagate session_id to following spans and across services MLOB-7756 #​9279

Fixes

• AppSec: Instrument cookie parseCookie for cookie >=1.1 #​9272
• AppSec: Log the error when the native WAF binding fails to load #​9288
• AppSec: Suppress informational responses after blocking requests #​9290
• azure: Enable Web Crypto on Node 18 #​9311
• azure-functions: Fix span links and missing telemetry for non-HTTP triggers #​9278
• General: Handle invalid programmatic option values #​9312
• graphql: Honor errorExtensions on the mercurius request span #​9284
• OpenTelemetry: Wire span processors passed to the provider constructor #​9285
• Test Optimization: Do not mark unchanged tests as impacted #​9314
• Test Optimization: Handle disabled tests in serial retries #​9313
• Test Optimization: Omit empty FTR capture containers #​9304

Internal (CI, Testing, Benchmarking)

• AppSec: Deflake api-security telemetry metrics integration tests #​9303
• General: Select version targets by Node.js runtime #​9306
• lint: Revert editorconfig checker from npm to docker #​9315
• OpenTelemetry: Deflake OTLP metrics HTTP export test with fake timers #​9287
• readme: Update eol column for v5 #​9267

v6.2.0: 6.2.0

Compare Source

Features

• graphql: Add mercurius support with a top-level graphql.request span #​9142

Fixes

• AppSec: Report request headers on Lambda spans when AppSec is enabled #​9257
• General: Avoid rewriter source map marker in source #​9212
• General: Skip loader hook registration when instrumentation bails out #​9242
• guardrails: Forward abort telemetry synchronously to avoid a hung exit #​9268
• instrumentations: Preserve asyncEnd wait with code-transformer 0.16 #​9256
• msgpack: Cap MsgpackChunk growth at the agent intake limit #​8672
• OpenTelemetry: Wrap sdk-trace TracerProvider for sdk-node 0.220+ #​9255
• ssi: Run ssi in current proposal branch #​9223
• Test Optimization: Stop propagating metadata to workers #​9261

Documentation

• Serverless: Add serverless integrations skill #​9188

Internal (CI, Testing, Benchmarking)

• benchmarks: Support BP_EXTERNAL_S3_URL override #​9155
• guardrails: Skip node 24 initialize runtime checks #​9283
• init: Skip node 22 loader guardrails #​9277
• Test Optimization: Cover msw preload regression #​9262
• Test Optimization: Stabilize atf final status assertion #​9253
• Test Optimization: Stabilize request error tag reporting #​9254

v6.1.0: 6.1.0

Compare Source

Features

• claude-agent-sdk: Add support for @anthropic-ai/claude-agent-sdk #​9202
• graphql: Support collapse, depth, variables, and error extensions via env #​9111
• LLM Observability: Support vercel ai sdk v7 #​8949
• mongodb: Open a parent span for Collection#bulkWrite #​9109
• Test Optimization: Tag failure screenshot upload result #​9232
• Test Optimization: Upload failure screenshots to the v2 media endpoint #​8981

Fixes

• AppSec: Support apollo v5 blocking #​9007
• aws-durable-execution-sdk-js: SVLS-8588 set span type to serverless #​9162
• child_process: Stabilize promisified exec spans #​9180
• Crash Tracking: Resolve frames out-of-process on Linux #​9237
• fastify: Bound avvio's boot re-drive and stop swallowing async hook rejections #​9118
• graphql: Make the resolve span the active scope inside resolvers #​8208
• OpenTelemetry: Apply global/resource tags to OTel-bridged spans #​9229
• Profiling: Abort profile upload on socket timeout #​9217
• Test Optimization: Changed DD_MAJOR guards to greater than or equal #​9199
• Test Optimization: Ignore intermediate retry failures in aggregate status #​9231
• Test Optimization: Instrument build index module loads #​9211
• Test Optimization: Propagate no-worker request error tags #​9189
• Test Optimization: Report tests from custom environments #​9194
• Test Optimization: Stabilize failed test replay waits #​9193
• Test Optimization: Support concurrent Vitest tests #​8412
• Test Optimization: Support test.concurrent #​9209

Internal (CI, Testing, Benchmarking)

• AI Guard: Rework aiguard integrations #​9185
• AppSec: Remove dead code and fix stale comments in nosql mongodb analyzer #​9168
• coverage: Collect integration coverage with native V8 instead of istanbul #​9091
• Dependencies: Bump import-in-the-middle to 3.3.1 #​9235
• Dependencies: Bump npm #​9205
• General: Reject non-string version ranges in withVersions #​9187
• plugin-env: Read apm-integrations.yml after workflow rename #​9224
• Test Optimization: Stabilize Playwright retry tagging flake #​9216

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.