Merge branch 'main' into yunkim/llmobs-context

.github/CODEOWNERS

@@ -110,6 +110,7 @@ benchmarks/base/aspects_benchmarks_generate.py @DataDog/asm-python
 ddtrace/appsec/                     @DataDog/asm-python
 ddtrace/settings/asm.py             @DataDog/asm-python
 ddtrace/contrib/subprocess/         @DataDog/asm-python
+ddtrace/contrib/internal/subprocess/         @DataDog/asm-python
 ddtrace/contrib/flask_login/        @DataDog/asm-python
 ddtrace/contrib/webbrowser          @DataDog/asm-python
 ddtrace/contrib/urllib              @DataDog/asm-python

.github/workflows/build_python_3.yml

@@ -132,6 +132,10 @@ jobs:
           CIBW_BEFORE_ALL_WINDOWS: rustup target add i686-pc-windows-msvc
           CIBW_BEFORE_ALL_MACOS: rustup target add aarch64-apple-darwin
           CIBW_ENVIRONMENT_LINUX: PATH=$HOME/.cargo/bin:$PATH CMAKE_BUILD_PARALLEL_LEVEL=24
+          # SYSTEM_VERSION_COMPAT is a workaround for versioning issue, a.k.a.
+          # `platform.mac_ver()` reports incorrect MacOS version at 11.0
+          # See: https://stackoverflow.com/a/65402241
+          CIBW_ENVIRONMENT_MACOS: CMAKE_BUILD_PARALLEL_LEVEL=24 SYSTEM_VERSION_COMPAT=0
           CIBW_REPAIR_WHEEL_COMMAND_LINUX: |
             mkdir ./tempwheelhouse &&
             unzip -l {wheel} | grep '\.so' &&

.riot/requirements/1053dce.txt

@@ -4,23 +4,23 @@
 #
 #    pip-compile --allow-unsafe --no-annotate .riot/requirements/1053dce.in
 #
-attrs==24.2.0
-coverage[toml]==7.6.1
-gevent==24.2.1
+attrs==24.3.0
+coverage[toml]==7.6.10
+gevent==24.11.1
 greenlet==3.1.1
 hypothesis==6.45.0
 iniconfig==2.0.0
 mock==5.1.0
 opentracing==2.4.0
-packaging==24.1
+packaging==24.2
 pluggy==1.5.0
-pytest==8.3.3
-pytest-cov==5.0.0
+pytest==8.3.4
+pytest-cov==6.0.0
 pytest-mock==3.14.0
-pytest-randomly==3.15.0
+pytest-randomly==3.16.0
 sortedcontainers==2.4.0
 zope-event==5.0
-zope-interface==7.0.3
+zope-interface==7.2
 
 # The following packages are considered to be unsafe in a requirements file:
-setuptools==75.1.0
+setuptools==75.7.0

.riot/requirements/1092157.txt

@@ -4,27 +4,27 @@
 #
 #    pip-compile --allow-unsafe --no-annotate .riot/requirements/1092157.in
 #
-attrs==23.2.0
-coverage[toml]==7.6.0
-gevent==24.2.1
-greenlet==3.0.3
+attrs==24.3.0
+coverage[toml]==7.6.10
+gevent==24.11.1
+greenlet==3.1.1
 httpretty==1.1.4
 hypothesis==6.45.0
 iniconfig==2.0.0
 mock==5.1.0
 opentracing==2.4.0
-packaging==24.1
+packaging==24.2
 pluggy==1.5.0
-pyfakefs==5.6.0
-pytest==8.3.1
+pyfakefs==5.7.3
+pytest==8.3.4
 pytest-asyncio==0.23.8
-pytest-cov==5.0.0
+pytest-cov==6.0.0
 pytest-mock==3.14.0
-pytest-randomly==3.15.0
+pytest-randomly==3.16.0
 python-json-logger==2.0.7
 sortedcontainers==2.4.0
 zope-event==5.0
-zope-interface==6.4.post2
+zope-interface==7.2
 
 # The following packages are considered to be unsafe in a requirements file:
-setuptools==71.1.0
+setuptools==75.7.0

.riot/requirements/125c1e6.txt

@@ -4,8 +4,8 @@
 #
 #    pip-compile --allow-unsafe --no-annotate .riot/requirements/125c1e6.in
 #
-attrs==24.2.0
-coverage[toml]==7.6.4
+attrs==24.3.0
+coverage[toml]==7.6.10
 exceptiongroup==1.2.2
 gevent==24.11.1
 greenlet==3.1.1
@@ -17,17 +17,17 @@ opentracing==2.4.0
 packaging==24.2
 pluggy==1.5.0
 py-cpuinfo==8.0.0
-pytest==8.3.3
+pytest==8.3.4
 pytest-asyncio==0.21.1
 pytest-benchmark==5.1.0
 pytest-cov==6.0.0
 pytest-mock==3.14.0
 pytest-randomly==3.16.0
 sortedcontainers==2.4.0
-tomli==2.0.2
+tomli==2.2.1
 uwsgi==2.0.28
 zope-event==5.0
-zope-interface==7.1.1
+zope-interface==7.2
 
 # The following packages are considered to be unsafe in a requirements file:
-setuptools==75.3.0
+setuptools==75.7.0

.riot/requirements/12a25de.txt

@@ -4,31 +4,31 @@
 #
 #    pip-compile --allow-unsafe --no-annotate .riot/requirements/12a25de.in
 #
-attrs==23.2.0
-certifi==2024.7.4
-charset-normalizer==3.3.2
-coverage[toml]==7.6.0
+attrs==24.3.0
+certifi==2024.12.14
+charset-normalizer==3.4.1
+coverage[toml]==7.6.10
 exceptiongroup==1.2.2
-gevent==24.2.1
-greenlet==3.0.3
-gunicorn==22.0.0
+gevent==24.11.1
+greenlet==3.1.1
+gunicorn==23.0.0
 hypothesis==6.45.0
-idna==3.7
+idna==3.10
 iniconfig==2.0.0
 mock==5.1.0
 opentracing==2.4.0
-packaging==24.1
+packaging==24.2
 pluggy==1.5.0
-pytest==8.3.1
-pytest-cov==5.0.0
+pytest==8.3.4
+pytest-cov==6.0.0
 pytest-mock==3.14.0
-pytest-randomly==3.15.0
+pytest-randomly==3.16.0
 requests==2.32.3
 sortedcontainers==2.4.0
-tomli==2.0.1
-urllib3==2.2.2
+tomli==2.2.1
+urllib3==2.3.0
 zope-event==5.0
-zope-interface==6.4.post2
+zope-interface==7.2
 
 # The following packages are considered to be unsafe in a requirements file:
-setuptools==71.1.0
+setuptools==75.7.0

.riot/requirements/12a4316.txt

@@ -4,8 +4,8 @@
 #
 #    pip-compile --allow-unsafe --no-annotate .riot/requirements/12a4316.in
 #
-attrs==24.2.0
-coverage[toml]==7.6.4
+attrs==24.3.0
+coverage[toml]==7.6.10
 gevent==24.11.1
 greenlet==3.1.1
 hypothesis==6.45.0
@@ -14,13 +14,13 @@ mock==5.1.0
 opentracing==2.4.0
 packaging==24.2
 pluggy==1.5.0
-pytest==8.3.3
+pytest==8.3.4
 pytest-cov==6.0.0
 pytest-mock==3.14.0
 pytest-randomly==3.16.0
 sortedcontainers==2.4.0
 zope-event==5.0
-zope-interface==7.1.1
+zope-interface==7.2
 
 # The following packages are considered to be unsafe in a requirements file:
-setuptools==75.3.0
+setuptools==75.7.0

.riot/requirements/1359ebb.txt

@@ -4,8 +4,8 @@
 #
 #    pip-compile --allow-unsafe --no-annotate .riot/requirements/1359ebb.in
 #
-attrs==24.2.0
-coverage[toml]==7.6.4
+attrs==24.3.0
+coverage[toml]==7.6.10
 exceptiongroup==1.2.2
 gevent==24.11.1
 greenlet==3.1.1
@@ -18,18 +18,18 @@ opentracing==2.4.0
 packaging==24.2
 pluggy==1.5.0
 py-cpuinfo==8.0.0
-pytest==8.3.3
+pytest==8.3.4
 pytest-asyncio==0.21.1
 pytest-benchmark==5.1.0
 pytest-cov==6.0.0
 pytest-cpp==2.6.0
 pytest-mock==3.14.0
 pytest-randomly==3.16.0
 sortedcontainers==2.4.0
-tomli==2.1.0
+tomli==2.2.1
 uwsgi==2.0.28
 zope-event==5.0
-zope-interface==7.1.1
+zope-interface==7.2
 
 # The following packages are considered to be unsafe in a requirements file:
-setuptools==75.4.0
+setuptools==75.7.0

.riot/requirements/137098c.txt

@@ -4,11 +4,11 @@
 #
 #    pip-compile --allow-unsafe --config=pyproject.toml --no-annotate --resolver=backtracking .riot/requirements/137098c.in
 #
-attrs==23.2.0
+attrs==24.2.0
 coverage[toml]==7.2.7
 exceptiongroup==1.2.2
 gevent==22.10.2
-greenlet==3.0.3
+greenlet==3.1.1
 httpretty==1.1.4
 hypothesis==6.45.0
 importlib-metadata==6.7.0
@@ -17,7 +17,7 @@ mock==5.1.0
 opentracing==2.4.0
 packaging==24.0
 pluggy==1.2.0
-pyfakefs==5.6.0
+pyfakefs==5.7.3
 pytest==7.4.4
 pytest-asyncio==0.21.2
 pytest-cov==4.1.0

.riot/requirements/1413039.txt

@@ -4,7 +4,7 @@
 #
 #    pip-compile --allow-unsafe --no-annotate .riot/requirements/1413039.in
 #
-attrs==24.2.0
+attrs==24.3.0
 coverage[toml]==7.6.1
 exceptiongroup==1.2.2
 gevent==24.2.1
@@ -16,15 +16,15 @@ mock==5.1.0
 opentracing==2.4.0
 packaging==24.2
 pluggy==1.5.0
-pytest==8.3.3
+pytest==8.3.4
 pytest-cov==5.0.0
 pytest-mock==3.14.0
 pytest-randomly==3.15.0
 sortedcontainers==2.4.0
-tomli==2.0.2
+tomli==2.2.1
 zipp==3.20.2
 zope-event==5.0
-zope-interface==7.1.1
+zope-interface==7.2
 
 # The following packages are considered to be unsafe in a requirements file:
 setuptools==75.3.0

.riot/requirements/1438a95.txt

@@ -4,47 +4,47 @@
 #
 #    pip-compile --allow-unsafe --no-annotate .riot/requirements/1438a95.in
 #
-attrs==23.2.0
-certifi==2024.7.4
+attrs==24.3.0
+certifi==2024.12.14
 charset-normalizer==2.1.1
-click==8.1.7
-coverage[toml]==7.6.0
-deprecated==1.2.14
+click==8.1.8
+coverage[toml]==7.6.10
+deprecated==1.2.15
 exceptiongroup==1.2.2
 flask==2.1.3
-gevent==24.2.1
-greenlet==3.0.3
+gevent==24.11.1
+greenlet==3.1.1
 hypothesis==6.45.0
-idna==3.7
-importlib-metadata==8.0.0
+idna==3.10
+importlib-metadata==8.5.0
 iniconfig==2.0.0
 itsdangerous==2.2.0
-jinja2==3.1.4
+jinja2==3.1.5
 markupsafe==2.0.1
 mock==5.1.0
-opentelemetry-api==1.26.0
-opentelemetry-instrumentation==0.47b0
-opentelemetry-instrumentation-flask==0.47b0
-opentelemetry-instrumentation-wsgi==0.47b0
-opentelemetry-semantic-conventions==0.47b0
-opentelemetry-util-http==0.47b0
+opentelemetry-api==1.29.0
+opentelemetry-instrumentation==0.50b0
+opentelemetry-instrumentation-flask==0.50b0
+opentelemetry-instrumentation-wsgi==0.50b0
+opentelemetry-semantic-conventions==0.50b0
+opentelemetry-util-http==0.50b0
 opentracing==2.4.0
-packaging==24.1
+packaging==24.2
 pluggy==1.5.0
-pytest==8.3.2
+pytest==8.3.4
 pytest-asyncio==0.21.1
-pytest-cov==5.0.0
+pytest-cov==6.0.0
 pytest-mock==3.14.0
-pytest-randomly==3.15.0
+pytest-randomly==3.16.0
 requests==2.28.1
 sortedcontainers==2.4.0
-tomli==2.0.1
-urllib3==1.26.19
+tomli==2.2.1
+urllib3==1.26.20
 werkzeug==2.1.2
-wrapt==1.16.0
-zipp==3.19.2
+wrapt==1.17.0
+zipp==3.21.0
 zope-event==5.0
-zope-interface==6.4.post2
+zope-interface==7.2
 
 # The following packages are considered to be unsafe in a requirements file:
-setuptools==71.1.0
+setuptools==75.7.0

.riot/requirements/148bd89.txt

@@ -4,27 +4,27 @@
 #
 #    pip-compile --allow-unsafe --no-annotate .riot/requirements/148bd89.in
 #
-attrs==23.2.0
-coverage[toml]==7.6.0
+attrs==24.3.0
+coverage[toml]==7.6.10
 exceptiongroup==1.2.2
-gevent==24.2.1
-greenlet==3.0.3
+gevent==24.11.1
+greenlet==3.1.1
 hypothesis==6.45.0
-importlib-metadata==8.2.0
+importlib-metadata==8.5.0
 iniconfig==2.0.0
 mock==5.1.0
 opentracing==2.4.0
-packaging==24.1
+packaging==24.2
 pluggy==1.5.0
-pytest==8.3.1
-pytest-cov==5.0.0
+pytest==8.3.4
+pytest-cov==6.0.0
 pytest-mock==3.14.0
-pytest-randomly==3.15.0
+pytest-randomly==3.16.0
 sortedcontainers==2.4.0
-tomli==2.0.1
-zipp==3.19.2
+tomli==2.2.1
+zipp==3.21.0
 zope-event==5.0
-zope-interface==6.4.post2
+zope-interface==7.2
 
 # The following packages are considered to be unsafe in a requirements file:
-setuptools==71.1.0
+setuptools==75.7.0