Skip to content

Update byte-buddy dependency to 1.18.12 - #12325

Open
sarahchen6 wants to merge 1 commit into
masterfrom
sarahchen6/upgrade-byte-buddy
Open

Update byte-buddy dependency to 1.18.12#12325
sarahchen6 wants to merge 1 commit into
masterfrom
sarahchen6/upgrade-byte-buddy

Conversation

@sarahchen6

@sarahchen6 sarahchen6 commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

What Does This Do

Update byte-buddy dependency to latest version 1.18.12. This brings changes:

  • Add SBOM to published artifacts.
  • Check for traversable paths injected into class files as a rather hypothetical attack vector.
  • Automatically support Kotlin in Gradle plugin.
  • Add support for native attach on Windows for ARM64.
  • Correct JNA injector which accidentally created on based on Unsafe.

Motivation

Use latest dependencies

Additional Notes

byte-buddy release notes: https://github.com/raphw/byte-buddy/releases

Contributor Checklist

Jira ticket: [PROJ-IDENT]

@sarahchen6 sarahchen6 added type: feature Enhancements and improvements comp: core Tracer core tag: dependencies Dependencies related changes labels Aug 27, 2026
@datadog-prod-us1-5

datadog-prod-us1-5 Bot commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

🎯 Code Coverage (details)
Patch Coverage: 100.00%
Overall Coverage: 58.79% (-0.01%)

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: cbac7c8 | Docs | View more details | Give us feedback!

@dd-octo-sts

dd-octo-sts Bot commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

🟢 Java Benchmark SLOs — All performance SLOs passed

Suite Status
Startup 🟢 pass

SLO thresholds are defined here based on automatically generated metrics. A warning is raised when results are within 5% of the threshold.

PR vs. master results
Scenario Candidate master Δ (95% CI of mean)
startup:insecure-bank:iast:Agent 14.83 s 14.70 s [+0.1%; +1.7%] (maybe worse)
startup:insecure-bank:tracing:Agent 13.71 s 13.79 s [-1.6%; +0.4%] (no difference)
startup:petclinic:appsec:Agent 17.48 s 17.27 s [+0.4%; +2.0%] (maybe worse)
startup:petclinic:iast:Agent 17.59 s 17.61 s [-1.0%; +0.8%] (no difference)
startup:petclinic:profiling:Agent 17.37 s 17.41 s [-1.2%; +0.8%] (no difference)
startup:petclinic:sca:Agent 17.50 s 17.17 s [+0.7%; +3.0%] (maybe worse)
startup:petclinic:tracing:Agent 16.66 s 16.85 s [-2.1%; -0.1%] (maybe better)

Commit: cbac7c87 · CI Pipeline · Benchmarking Platform UI


Load and DaCapo benchmarks can be triggered manually in the GitLab pipeline. Results will appear in the Benchmarking Platform UI after completion.

@sarahchen6
sarahchen6 marked this pull request as ready for review August 27, 2026 19:45
@sarahchen6
sarahchen6 requested review from a team as code owners August 27, 2026 19:45
@sarahchen6
sarahchen6 requested review from dougqh, dromanol and jandro996 and removed request for a team August 27, 2026 19:45

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: cbac7c8768

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread gradle/libs.versions.toml

@datadog-prod-us1-5 datadog-prod-us1-5 Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Datadog Autotest: PASS

More details

The version catalog, build plugin, and affected test fixtures all use Byte Buddy 1.18.12. No dependency version conflict is present.

Was this helpful? React 👍 or 👎

Open Bits AI session

🤖 Datadog Autotest · Commit cbac7c8 · What is Autotest? · @DataDog review to ask questions · Any feedback? Reach out in #autotest

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

comp: core Tracer core tag: dependencies Dependencies related changes type: feature Enhancements and improvements

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant