Datadog Agent

Summary

Agents are now built with Go 1.25.11.

Summary

CIS Docker rules now skip evaluation on Kubernetes nodes using non‑Docker runtimes (e.g., containerd, CRI‑O), eliminating false positives on GKE COS and similar platforms.

Summary

Updated the embedded Python runtime from 3.13.13 to 3.13.14.

Summary

Health Platform API changed: ReportIssue now requires an IssueReport struct and persistence files are version‑2, older files are logged as incompatible and dropped (breaking).

Summary

Updated containerd dependencies (v1.7.32, v2.0.9) to mitigate CVE‑2026‑46680.

Summary

Upgrade Prometheus library to v0.311.4, addressing CVE‑2026‑42151 and CVE‑2026‑42154.

Summary

macOS Agent now installs system‑wide as a LaunchDaemon under a dedicated dd‑agent user; existing per‑user installations must be removed and re‑installed (breaking change for macOS users).

Summary

Upgraded github.com/moby/spdystream to v0.5.1 to patch CVE‑2026‑35469, fixing unchecked memory allocations in SPDY/3 frame parsing.

Summary

Upgraded OpenTelemetry Go SDK to v1.43.0 to remediate CVE‑2026‑39883 (PATH hijacking on BSD/Solaris).

Summary

Added `datadog agent otel` command to install/remove DDOT from OCI packages

Summary

Updated embedded Python to 3.13.13 and rebuilt agents with Go 1.25.9

Summary

Added AWS‑based API key authentication, vertical pod resizing, a new KSM CRD configuration provider, and extensive dd‑procmgrd enhancements (CLI, gRPC, process ordering) plus automatic SBOM and CWS policy generation.

Summary

Fix: Cloud Network Monitoring now correctly resolves NAT'd cluster IPs when Cilium replaces kube-proxy.

Summary

Hide MacOS agent GUI by default for per‑user installs

Summary

Agents are now built with Go 1.25.8.

Summary

Added many new features: dd-procmgrd Rust daemon, CRD listener, logs pipeline failover, memory‑pressure metrics, Private Action Runner integration (including Windows service), Autodiscover template variables, and OTLP container‑tags v2 f...

Summary

Updated circl library to remediate CVE‑2026‑1229 and patched an out‑of‑bounds memory read/DoS vulnerability in the Windows kernel driver, adding extra overflow safety checks.

Summary

Fix: infra mode tag now correctly added to system.cpu.user on Windows when not in full mode, aligning behavior with Linux checks

Summary

Added ACL command obfuscation to APM span tags (security).

Summary

Added instance‑id filter for agent checks, a privateactionrunner binary for running actions, and health‑platform reporting of integration failures.

Summary

Updated agents to be built with Go 1.25.7.

Summary

Released Agent Prelude and Datadog Cluster Agent Prelude version 7.75.3, including updates to core checks.

Summary

Upgrade OpenJDK to 11.0.30, which may break TLS‑enabled JMX integrations

Summary

Updated agents to be built with Go 1.25.6.

Summary

Added many new capabilities: infrastructure mode for end‑user devices, Kafka Data Streams intake, APM edge mode, enhanced secret backend (Kubernetes, Docker, file secrets), system battery health checks, Azure IMDS version config, discove...

Summary

Fixed fatal concurrent map access errors in system probe when evaluating SSH monitoring security rules.

Summary

Critical Netflow bug in 7.74.0 (missing flushConfig) can cause 2‑30× flush frequency and billing spikes; upgrade to 7.75.1+.

Summary

Fixed diskv2 check LVM device tagging to use friendly /dev/mapper names, aligning with Python psutil behavior and preserving existing dashboards.

Summary

Disk check now gracefully handles partition loading errors, continuing to collect metrics for successfully loaded partitions.

Summary

Released Agent Prelude and Cluster Agent Prelude version 7.73.1 on 2025‑12‑17

Summary

Introduced new core checks (raw Kubelet manifests, AWS ECS Managed Instances support) and enabled Remote Agent Management by default, plus many feature enhancements like OTLP exporter helper, Go disk/network checks, and improved APM trac...

Summary

Updated Cluster Agent to use the latest schema for the DatadogPodAutoscaler CRD.

Summary

Removed unused span trace loader binary from the Heroku build to reduce package size.

Summary

Fix GPU metrics bug where gpu.sm_active and related metrics emitted values lower than expected.

Summary

Updated the WDK version used by ddprocmon.

Summary

Updated embedded Python to 3.13.7 and built the Agent with Go 1.24.9; added new features such as kube distribution tags, extra Kubernetes metrics, Windows OpenTelemetry service, network path support, and fine‑grained secret‑scope controls.

Summary

Imported from changelog source; review and generate a concise summary before publishing.

Summary

Fix configuration parsing for extended container metric collection in the container core check.

Summary

Added eBPF support for the prctl syscall, new Kubernetes metrics (terminating duration, deployment rollout), RUM support in OpenTelemetry mapping, and low‑port binding via AmbientCapabilities in the Agent.

Summary

Added new scrubbers for numerous API keys and auth tokens in HTTP headers and YAML files, enhancing secret redaction.

Summary

Released Datadog Agent Prelude version 7.70.1 on 2025-09-10, updating core checks and pinning to the datadog‑agent v7.70.1 tag.

Summary

Added GPU metadata autodiscovery (enabled by default) with a new `gpu.enabled` flag, renamed GPU metrics, and improved GPU monitoring for Docker containers and Deeplearning4j programs.

Summary

Released Agent Prelude (v7.69.4) on 2025‑08‑27

Summary

Updated agents to be compiled with Go 1.24.6 and upgraded JMXFetch to 0.50.0, mitigating CVE‑2025‑52999.

Summary

Upgraded libxml2 dependency to version 2.14.5

Summary

Added pre‑update validation for custom Agent passwords on Windows domain‑joined hosts, preventing failed updates that could leave agents uninstalled.

Summary

Core Agent: cilium conntracker enabled by default (requires /host/sys/fs/bpf mount); new JMXFetch JVM options, ephemerals container collection, GPU host tag now default, secret backends (AWS SSM/Secrets, Vault, Azure), Data Streams Kafka...

Summary

Upgrade JMXFetch to 0.49.9, reverting a change that broke Java 7 support.

Summary

Fixed pre‑install script bug that unintentionally removed integrations during Agent upgrades.

Summary

Released Agent Prelude (v7.68.1) with updated Core Checks and security notes

Summary

Bumped core runtimes: Python upgraded to 3.12.11, Go to 1.24.4, and introduced unified attribute precedence across span and resource attributes.

Summary

Agent binary now compiled with Go 1.23.10.

Summary

Upgrade core components: Python 3.12.11, Go 1.23.9, JMXFetch 0.49.7 with YAML 1.2 support, and default log compression switched to ZSTD.

Summary

Fix parsing pod list from kubelet when InPlacePodVerticalScaling feature gate is enabled

Summary

Incompatible with Kubernetes 1.33+ due to InPlacePodVerticalScaling; upgrade to 7.66.1 for compatibility

Summary

Ensure post‑install script always rebuilds fipsmodule.cnf for the Datadog FIPS agent, fixing FIPS‑related issues

Summary

Restored compatibility with the deprecated v1 auto‑instrumentation webhook, preventing forced migration to v2.

Summary

Added Windows Agent MSI support for .NET APM instrumentation with IIS auto‑configuration, introduced auto multi‑line detection for logs, and a new OpenLineage proxy endpoint; container‑based primary tags are now enabled by default.

Summary

Agents are now built with Go 1.23.8.

Summary

Fix: Process Agent files are now added to the flare archive instead of showing "no session token provided" error.

Summary

Fixed Python package dependency issue that blocked integrations on Windows

Summary

Enabled IMDSv2 by default on EC2 hosts, turned on ECS task collection, added GPU tagging and built agents with Go 1.23.6.

Summary

Disable the X25519Kyber768Draft00 key exchange to prevent firewall compatibility issues (e.g., AWS Network Firewall, Suricata).

Summary

TLS change may prevent Agent communication with backend when using AWS Network Firewalls

Summary

Introduces a TLS change that may disrupt Agent communication when used behind AWS Network Firewalls, prompting users to downgrade to v7.61 or wait for v7.63.3

Summary

Security updates include OpenSSL 3.3.3 fixing CVE-2024-12797 and tighter Windows named-pipe access controls.

Summary

TLS change introduced in v7.62.3 can prevent the Agent from communicating with Datadog backend when used behind AWS Network Firewalls.

Summary

TLS change may block Agent communication through AWS Network Firewalls; downgrade to v7.61 or upgrade to v7.63.3 when available.

Summary

TLS change may block Agent communication through AWS Network Firewalls; recommended downgrade to v7.61 or upgrade to v7.63.3 when available.

Summary

Added TLS metric tags, new system.cpu.* metrics, external data resolution for APM, and a Logs Agent "analyze" subcommand; extended telemetry with histogram +Inf bucket, p75/p95/p99 values, HTTP zstd compression, and Go 1.23.3 build.

Summary

Agents rebuilt with Go 1.21.11 and container images (agent and cluster agent) switched to Ubuntu 24.04 (noble) base.

Summary

Imported from changelog source; review and generate a concise summary before publishing.

Summary

Updated golang.org/x/crypto to address CVE-2024-45337

Summary

Introduced several new features: Aurora cluster DB monitoring autodiscovery, ECS orchestrator check, OTLP top‑level span computation flag, host‑benchmarks enabled by default, network‑policy collection, and default credit‑card obfuscation...

Summary

Enabled peer tags aggregation and compute‑stats‑by‑span‑kind by default, adding trace metrics for inferred services and a new check‑tag‑cardinality option.

Summary

Added a dedicated temporary directory for JMXFetch, reusing the Agent's temp location

Summary

Added ability to run process/container collection on the core Agent (Linux) and introduced new sqllexer flag, GPU vendor tag, and file log collection from rootless Podman containers.

Summary

Reverted the cloud‑provided hostname default for the Agent in AKS (added in 7.56.0).

Summary

Removed noisy log statement from Network Path logs.

Summary

Network Path timeout semantics changed to per‑hop with a default of 1000 ms and traceroute now uses UDP port 33434, affecting existing behavior.

Summary

Updated agents to be compiled with Go 1.22.7.

Summary

APM trace agent now logs UDS listener creation errors instead of crashing

Summary

Added JSON output for `agent diagnose`, device metadata integration, configurable securityContext for auto‑instrumentation, kube runtime class tags, host‑tag API for Python checks, static Kubernetes events allowlist, reverse‑DNS enrichme...

Summary

Release Agent and Cluster Agent version 7.56.2

Summary

Imported from changelog source; review and generate a concise summary before publishing.

Summary

Add support for multiple configuration files (‑E flag) and new config options for Kubernetes events, Docker/Kubernetes event bundling, and source detection.

Summary

Agents are now built with Go 1.21.12.

Summary

Fixed CVE‑2024‑6257 vulnerability in core checks

Summary

Fixed regression that prevented the agent from starting on SysVinit systems.

Summary

Added multiple new features: Data Jobs Monitoring flag, configurable Lambda Logs API buffering, Linux‑only service‑discovery check, Kubernetes namespace‑annotation tagging, experimental SBOM on Windows, and OTLP span conversion.

Summary

Released Datadog Agent Prelude version 7.54.1 on 2024-06-18.

Summary

Added many new features: Probabilistic sampler for APM, Windows CWS write/delete/chdir/mount/umount events, DogStatsD pipeline autoadjust strategies, OTLP ingestion aligned with v0.97.0, Cisco SD‑WAN integration, Podman SQLite backend, a...

Summary

Added Aurora cluster DB monitoring autodiscovery, new ECS core check, and OTLP top‑level span flag for richer APM data.

Summary

Added a Windows installer check to verify the caller's membership before installing the Agent.

Summary

Added security and tracing features: Windows agent now supports CWS process and network threat detection, file‑integrity monitoring, chdir event for container escape, data scrubbing, and span‑links in the trace agent; APM stats include G...

Summary

Added chdir event type to CWS in Core Checks.