Skip to content

Bump the gh-actions-packages group across 3 directories with 5 updates#7748

Merged
andrewlock merged 1 commit intomasterfrom
dependabot/github_actions/gh-actions-packages-1cad358c2f
Nov 3, 2025
Merged

Bump the gh-actions-packages group across 3 directories with 5 updates#7748
andrewlock merged 1 commit intomasterfrom
dependabot/github_actions/gh-actions-packages-1cad358c2f

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 1, 2025

Bumps the gh-actions-packages group with 3 updates in the / directory: github/codeql-action, softprops/action-gh-release and DataDog/datadog-static-analyzer-github-action.
Bumps the gh-actions-packages group with 1 update in the /.github/actions/deploy-aas-dev-apps directory: actions/create-github-app-token.
Bumps the gh-actions-packages group with 1 update in the /.github/actions/publish-debug-symbols directory: actions/setup-node.

Updates github/codeql-action from 3.30.5 to 4.31.2

Release notes

Sourced from github/codeql-action's releases.

v4.31.2

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.2 - 30 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.1

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.1 - 30 Oct 2025

  • The add-snippets input has been removed from the analyze action. This input has been deprecated since CodeQL Action 3.26.4 in August 2024 when this removal was announced.

See the full CHANGELOG.md for more information.

v4.31.0

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.0 - 24 Oct 2025

  • Bump minimum CodeQL bundle version to 2.17.6. #3223
  • When SARIF files are uploaded by the analyze or upload-sarif actions, the CodeQL Action automatically performs post-processing steps to prepare the data for the upload. Previously, these post-processing steps were only performed before an upload took place. We are now changing this so that the post-processing steps will always be performed, even when the SARIF files are not uploaded. This does not change anything for the upload-sarif action. For analyze, this may affect Advanced Setup for CodeQL users who specify a value other than always for the upload input. #3222

See the full CHANGELOG.md for more information.

v4.30.9

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.9 - 17 Oct 2025

  • Update default CodeQL bundle version to 2.23.3. #3205
  • Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #3204

See the full CHANGELOG.md for more information.

v4.30.8

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

... (truncated)

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.31.2 - 30 Oct 2025

No user facing changes.

4.31.1 - 30 Oct 2025

  • The add-snippets input has been removed from the analyze action. This input has been deprecated since CodeQL Action 3.26.4 in August 2024 when this removal was announced.

4.31.0 - 24 Oct 2025

  • Bump minimum CodeQL bundle version to 2.17.6. #3223
  • When SARIF files are uploaded by the analyze or upload-sarif actions, the CodeQL Action automatically performs post-processing steps to prepare the data for the upload. Previously, these post-processing steps were only performed before an upload took place. We are now changing this so that the post-processing steps will always be performed, even when the SARIF files are not uploaded. This does not change anything for the upload-sarif action. For analyze, this may affect Advanced Setup for CodeQL users who specify a value other than always for the upload input. #3222

4.30.9 - 17 Oct 2025

  • Update default CodeQL bundle version to 2.23.3. #3205
  • Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #3204

4.30.8 - 10 Oct 2025

No user facing changes.

4.30.7 - 06 Oct 2025

  • [v4+ only] The CodeQL Action now runs on Node.js v24. #3169

3.30.6 - 02 Oct 2025

  • Update default CodeQL bundle version to 2.23.2. #3168

3.30.5 - 26 Sep 2025

  • We fixed a bug that was introduced in 3.30.4 with upload-sarif which resulted in files without a .sarif extension not getting uploaded. #3160

3.30.4 - 25 Sep 2025

  • We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #3099 and #3100
  • We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #3107
  • You can now run the latest CodeQL nightly bundle by passing tools: nightly to the init action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #3130
  • Update default CodeQL bundle version to 2.23.1. #3118

3.30.3 - 10 Sep 2025

... (truncated)

Commits
  • 0499de3 Merge pull request #3261 from github/henrymercer/setup-python
  • 3b96745 Set up Python in mergeback workflow
  • 8a06050 Merge pull request #3259 from github/update-v4.31.2-9576b5cbe
  • 752a642 Update changelog for v4.31.2
  • 9576b5c Merge pull request #3258 from github/mbg/enablement-errors/case-insensitive
  • cc88437 Merge pull request #3257 from github/henrymercer/ubuntu-slim
  • f0e9bf0 Make isEnablementError case-insensitive
  • 2a3599c Run lightweight workflows on ubuntu-slim
  • 514ff4d Merge pull request #3256 from github/henrymercer/resolve-bad-merge
  • aab1c2f Merge pull request #3253 from github/mergeback/v4.31.1-to-main-5fe9434c
  • Additional commits viewable in compare view

Updates softprops/action-gh-release from 2.3.3 to 2.4.1

Release notes

Sourced from softprops/action-gh-release's releases.

v2.4.1

What's Changed

Other Changes 🔄

Full Changelog: softprops/action-gh-release@v2...v2.4.1

v2.4.0

What's Changed

Exciting New Features 🎉

Other Changes 🔄

Full Changelog: softprops/action-gh-release@v2.3.4...v2.4.0

v2.3.4

What's Changed

Bug fixes 🐛

Other Changes 🔄

Full Changelog: softprops/action-gh-release@v2...v2.3.4

Changelog

Sourced from softprops/action-gh-release's changelog.

2.4.1

What's Changed

Other Changes 🔄

2.4.0

What's Changed

Exciting New Features 🎉

2.3.4

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates

2.3.3

What's Changed

Exciting New Features 🎉

Other Changes 🔄

  • dependency updates

2.3.2

  • fix: revert fs readableWebStream change

2.3.1

Bug fixes 🐛

... (truncated)

Commits
  • 6da8fa9 release 2.4.1
  • f38efde fix: gracefully fallback to body when body_path cannot be read (#671)
  • cec1a11 fix(util): support brace expansion globs containing commas in parseInputFiles...
  • aec2ec5 release 2.4.0
  • 4db716b feat: respect working_directory for files globs; add input and tests (#667)
  • 14820f2 chore(deps): bump the npm group with 2 updates (#668)
  • 62c96d0 release 2.3.4
  • 7dc9b8a fix(action): handle 422 already_exists race condition (#665)
  • 0f0e0b9 chore(deps): bump the npm group with 3 updates (#666)
  • 97d42c1 chore(deps): bump the npm group across 1 directory with 2 updates (#662)
  • Additional commits viewable in compare view

Updates DataDog/datadog-static-analyzer-github-action from 1.2.3 to 2.0.0

Release notes

Sourced from DataDog/datadog-static-analyzer-github-action's releases.

v2.0.0

What's Changed

The Datadog Static Code Analysis action now supports only the push event. Using other triggers (e.g. pull_request) may cause issues. See the docs for details.

To avoid the breaking changes, pin the action to an older version: Pinning to a commit: uses: DataDog/datadog-static-analyzer-github-action@<release-commit-sha-here>

Pinning to a tag (less secure): uses: DataDog/datadog-static-analyzer-github-action@v1

Full Changelog: DataDog/datadog-static-analyzer-github-action@v1...v2.0.0

v1.2.4

What's Changed

New Contributors

Full Changelog: DataDog/datadog-static-analyzer-github-action@v1...v1.2.4

Commits

Updates actions/create-github-app-token from 2.1.1 to 2.1.4

Release notes

Sourced from actions/create-github-app-token's releases.

v2.1.4

2.1.4 (2025-09-13)

Bug Fixes

  • deps: bump @​octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)

v2.1.3

2.1.3 (2025-09-13)

Bug Fixes

  • deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#254) (f3d5ec2)

v2.1.2

2.1.2 (2025-09-12)

Bug Fixes

  • deps: bump @​octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)
Commits
  • 6701853 build(release): 2.1.4 [skip ci]
  • bef1eaf fix(deps): bump @​octokit/auth-app from 7.2.1 to 8.0.1 (#257)
  • 1526738 build(release): 2.1.3 [skip ci]
  • f3d5ec2 fix(deps): bump undici from 7.8.0 to 7.10.0 in the production-dependencies gr...
  • def152b build(release): 2.1.2 [skip ci]
  • 5d7307b fix(deps): bump @​octokit/request from 9.2.3 to 10.0.2 (#256)
  • 525760a build(deps): bump stefanzweifel/git-auto-commit-action from 5.2.0 to 6.0.1 (#...
  • 8ab05a8 Add beta branch support for releases (#282)
  • d00315e build(deps): bump actions/checkout from 4 to 5 (#279)
  • fcc6c28 build(deps-dev): bump dotenv from 16.5.0 to 17.2.1 (#269)
  • Additional commits viewable in compare view

Updates actions/setup-node from 5.0.0 to 6.0.0

Release notes

Sourced from actions/setup-node's releases.

v6.0.0

What's Changed

Breaking Changes

Dependency Upgrades

Full Changelog: actions/setup-node@v5...v6.0.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the gh-actions-packages group across 3 directories with 5 updates
635aa04 
Bumps the gh-actions-packages group with 3 updates in the / directory: [github/codeql-action](https://github.com/github/codeql-action), [softprops/action-gh-release](https://github.com/softprops/action-gh-release) and [DataDog/datadog-static-analyzer-github-action](https://github.com/datadog/datadog-static-analyzer-github-action).
Bumps the gh-actions-packages group with 1 update in the /.github/actions/deploy-aas-dev-apps directory: [actions/create-github-app-token](https://github.com/actions/create-github-app-token).
Bumps the gh-actions-packages group with 1 update in the /.github/actions/publish-debug-symbols directory: [actions/setup-node](https://github.com/actions/setup-node).


Updates `github/codeql-action` from 3.30.5 to 4.31.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@3599b3b...0499de3)

Updates `softprops/action-gh-release` from 2.3.3 to 2.4.1
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@6cbd405...6da8fa9)

Updates `DataDog/datadog-static-analyzer-github-action` from 1.2.3 to 2.0.0
- [Release notes](https://github.com/datadog/datadog-static-analyzer-github-action/releases)
- [Commits](DataDog/datadog-static-analyzer-github-action@2707598...2cc0e06)

Updates `actions/create-github-app-token` from 2.1.1 to 2.1.4
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](actions/create-github-app-token@a8d6161...6701853)

Updates `actions/setup-node` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@a0853c2...2028fbc)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: softprops/action-gh-release
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: DataDog/datadog-static-analyzer-github-action
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: actions/create-github-app-token
  dependency-version: 2.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: actions/setup-node
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 1, 2025
@dependabot dependabot bot requested a review from a team as a code owner November 1, 2025 16:18
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 1, 2025
@github-actions github-actions bot added the area:builds project files, build scripts, pipelines, versioning, releases, packages label Nov 1, 2025
@pr-commenter
Copy link

pr-commenter bot commented Nov 1, 2025

Benchmarks

Benchmarks Report for benchmark platform 🐌

Benchmarks for #7748 compared to master:

  • 1 benchmarks are slower, with geometric mean 1.132
  • 6 benchmarks have fewer allocations
  • 7 benchmarks have more allocations

The following thresholds were used for comparing the benchmark speeds:

  • Mann–Whitney U test with statistical test for significance of 5%
  • Only results indicating a difference greater than 10% and 0.3 ns are considered.

Allocation changes below 0.5% are ignored.

Benchmark details

Benchmarks.Trace.ActivityBenchmark - Same speed ✔️ Fewer allocations 🎉

Fewer allocations 🎉 in #7748

Benchmark Base Allocated Diff Allocated Change Change %
Benchmarks.Trace.ActivityBenchmark.StartStopWithChild‑net6.0 5.52 KB 5.49 KB -33 B -0.60%

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master StartStopWithChild net6.0 10.5μs 57.5ns 335ns 0 0 0 5.52 KB
master StartStopWithChild netcoreapp3.1 13.6μs 67.9ns 311ns 0 0 0 5.7 KB
master StartStopWithChild net472 21.7μs 118ns 690ns 0.893 0.223 0 6.07 KB
#7748 StartStopWithChild net6.0 10.9μs 38.8ns 150ns 0 0 0 5.49 KB
#7748 StartStopWithChild netcoreapp3.1 13.4μs 67.9ns 304ns 0 0 0 5.72 KB
#7748 StartStopWithChild net472 21.9μs 122ns 730ns 0.962 0.214 0 6.09 KB
Benchmarks.Trace.AgentWriterBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master WriteAndFlushEnrichedTraces net6.0 934μs 194ns 727ns 0 0 0 2.71 KB
master WriteAndFlushEnrichedTraces netcoreapp3.1 1.02ms 112ns 405ns 0 0 0 2.7 KB
master WriteAndFlushEnrichedTraces net472 1.21ms 72.7ns 282ns 0 0 0 3.35 KB
#7748 WriteAndFlushEnrichedTraces net6.0 936μs 60.7ns 210ns 0 0 0 2.71 KB
#7748 WriteAndFlushEnrichedTraces netcoreapp3.1 1.02ms 162ns 629ns 0 0 0 2.7 KB
#7748 WriteAndFlushEnrichedTraces net472 1.2ms 45.8ns 171ns 0 0 0 3.35 KB
Benchmarks.Trace.Asm.AppSecBodyBenchmark - Slower ⚠️ Same allocations ✔️

Slower ⚠️ in #7748

Benchmark diff/base Base Median (ns) Diff Median (ns) Modality
Benchmarks.Trace.Asm.AppSecBodyBenchmark.ObjectExtractorMoreComplexBody‑net472 1.132 6,633.50 7,509.32

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master AllCycleSimpleBody net6.0 N/A N/A N/A NaN NaN NaN 0 b
master AllCycleSimpleBody netcoreapp3.1 N/A N/A N/A NaN NaN NaN 0 b
master AllCycleSimpleBody net472 N/A N/A N/A NaN NaN NaN 0 b
master AllCycleMoreComplexBody net6.0 N/A N/A N/A NaN NaN NaN 0 b
master AllCycleMoreComplexBody netcoreapp3.1 N/A N/A N/A NaN NaN NaN 0 b
master AllCycleMoreComplexBody net472 N/A N/A N/A NaN NaN NaN 0 b
master ObjectExtractorSimpleBody net6.0 321ns 0.197ns 0.762ns 0 0 0 280 B
master ObjectExtractorSimpleBody netcoreapp3.1 395ns 2.18ns 12.9ns 0 0 0 272 B
master ObjectExtractorSimpleBody net472 299ns 0.0247ns 0.0923ns 0.0433 0 0 281 B
master ObjectExtractorMoreComplexBody net6.0 6.21μs 32.8ns 177ns 0 0 0 3.78 KB
master ObjectExtractorMoreComplexBody netcoreapp3.1 7.75μs 34.2ns 128ns 0 0 0 3.69 KB
master ObjectExtractorMoreComplexBody net472 6.64μs 1.91ns 7.41ns 0.596 0 0 3.8 KB
#7748 AllCycleSimpleBody net6.0 N/A N/A N/A NaN NaN NaN 0 b
#7748 AllCycleSimpleBody netcoreapp3.1 N/A N/A N/A NaN NaN NaN 0 b
#7748 AllCycleSimpleBody net472 N/A N/A N/A NaN NaN NaN 0 b
#7748 AllCycleMoreComplexBody net6.0 N/A N/A N/A NaN NaN NaN 0 b
#7748 AllCycleMoreComplexBody netcoreapp3.1 N/A N/A N/A NaN NaN NaN 0 b
#7748 AllCycleMoreComplexBody net472 N/A N/A N/A NaN NaN NaN 0 b
#7748 ObjectExtractorSimpleBody net6.0 319ns 1.69ns 9.12ns 0 0 0 280 B
#7748 ObjectExtractorSimpleBody netcoreapp3.1 403ns 1.93ns 8.17ns 0 0 0 272 B
#7748 ObjectExtractorSimpleBody net472 296ns 0.0247ns 0.0892ns 0.0446 0 0 281 B
#7748 ObjectExtractorMoreComplexBody net6.0 6.45μs 28.3ns 109ns 0 0 0 3.78 KB
#7748 ObjectExtractorMoreComplexBody netcoreapp3.1 7.74μs 39.2ns 175ns 0 0 0 3.69 KB
#7748 ObjectExtractorMoreComplexBody net472 7.5μs 11.2ns 43.2ns 0.595 0 0 3.8 KB
Benchmarks.Trace.Asm.AppSecEncoderBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master EncodeArgs net6.0 75.9μs 243ns 942ns 0 0 0 32.4 KB
master EncodeArgs netcoreapp3.1 97.7μs 188ns 728ns 0 0 0 32.4 KB
master EncodeArgs net472 112μs 18.2ns 70.4ns 5.09 0 0 32.5 KB
master EncodeLegacyArgs net6.0 146μs 54.2ns 210ns 0 0 0 2.15 KB
master EncodeLegacyArgs netcoreapp3.1 198μs 223ns 835ns 0 0 0 2.14 KB
master EncodeLegacyArgs net472 264μs 33.2ns 120ns 0 0 0 2.16 KB
#7748 EncodeArgs net6.0 77.3μs 37.2ns 139ns 0 0 0 32.4 KB
#7748 EncodeArgs netcoreapp3.1 96.5μs 285ns 1.1μs 0 0 0 32.4 KB
#7748 EncodeArgs net472 112μs 84.5ns 327ns 5.05 0 0 32.51 KB
#7748 EncodeLegacyArgs net6.0 143μs 34.4ns 129ns 0 0 0 2.14 KB
#7748 EncodeLegacyArgs netcoreapp3.1 198μs 276ns 1.07μs 0 0 0 2.14 KB
#7748 EncodeLegacyArgs net472 264μs 70ns 262ns 0 0 0 2.16 KB
Benchmarks.Trace.Asm.AppSecWafBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master RunWafRealisticBenchmark net6.0 394μs 86.2ns 323ns 0 0 0 4.55 KB
master RunWafRealisticBenchmark netcoreapp3.1 415μs 99.4ns 372ns 0 0 0 4.48 KB
master RunWafRealisticBenchmark net472 430μs 49.6ns 192ns 0 0 0 4.66 KB
master RunWafRealisticBenchmarkWithAttack net6.0 284μs 38ns 142ns 0 0 0 2.24 KB
master RunWafRealisticBenchmarkWithAttack netcoreapp3.1 302μs 70.8ns 265ns 0 0 0 2.22 KB
master RunWafRealisticBenchmarkWithAttack net472 311μs 32ns 124ns 0 0 0 2.29 KB
#7748 RunWafRealisticBenchmark net6.0 390μs 26.1ns 101ns 0 0 0 4.55 KB
#7748 RunWafRealisticBenchmark netcoreapp3.1 411μs 72.9ns 283ns 0 0 0 4.48 KB
#7748 RunWafRealisticBenchmark net472 427μs 38.9ns 151ns 0 0 0 4.66 KB
#7748 RunWafRealisticBenchmarkWithAttack net6.0 284μs 50.3ns 188ns 0 0 0 2.24 KB
#7748 RunWafRealisticBenchmarkWithAttack netcoreapp3.1 296μs 28.2ns 109ns 0 0 0 2.22 KB
#7748 RunWafRealisticBenchmarkWithAttack net472 309μs 40.1ns 150ns 0 0 0 2.29 KB
Benchmarks.Trace.AspNetCoreBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master SendRequest net6.0 60.6μs 40.9ns 159ns 0 0 0 14.52 KB
master SendRequest netcoreapp3.1 71.7μs 155ns 580ns 0 0 0 17.42 KB
master SendRequest net472 0.0037ns 0.00137ns 0.00532ns 0 0 0 0 b
#7748 SendRequest net6.0 62.2μs 107ns 385ns 0 0 0 14.52 KB
#7748 SendRequest netcoreapp3.1 72.8μs 325ns 1.69μs 0 0 0 17.42 KB
#7748 SendRequest net472 0.00708ns 0.00252ns 0.00978ns 0 0 0 0 b
Benchmarks.Trace.CharSliceBenchmark - Same speed ✔️ More allocations ⚠️

More allocations ⚠️ in #7748

Benchmark Base Allocated Diff Allocated Change Change %
Benchmarks.Trace.CharSliceBenchmark.OptimizedCharSlice‑net472 0 b 73 B 73 B ∞
Benchmarks.Trace.CharSliceBenchmark.OptimizedCharSliceWithPool‑net472 0 b 47 B 47 B ∞
Benchmarks.Trace.CharSliceBenchmark.OptimizedCharSliceWithPool‑net6.0 1 B 3 B 2 B 200.00%
Benchmarks.Trace.CharSliceBenchmark.OptimizedCharSlice‑net6.0 4 B 7 B 3 B 75.00%

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master OriginalCharSlice net6.0 1.92ms 5.06μs 19.6μs 0 0 0 640.01 KB
master OriginalCharSlice netcoreapp3.1 2.14ms 7.23μs 28μs 0 0 0 640 KB
master OriginalCharSlice net472 2.67ms 183ns 710ns 100 0 0 641.95 KB
master OptimizedCharSlice net6.0 1.34ms 94.9ns 368ns 0 0 0 4 B
master OptimizedCharSlice netcoreapp3.1 1.8ms 302ns 1.17μs 0 0 0 1 B
master OptimizedCharSlice net472 2.1ms 298ns 1.15μs 0 0 0 0 b
master OptimizedCharSliceWithPool net6.0 800μs 58.4ns 226ns 0 0 0 1 B
master OptimizedCharSliceWithPool netcoreapp3.1 821μs 60.9ns 228ns 0 0 0 1 B
master OptimizedCharSliceWithPool net472 1.16ms 134ns 518ns 0 0 0 0 b
#7748 OriginalCharSlice net6.0 1.9ms 571ns 2.21μs 0 0 0 640.01 KB
#7748 OriginalCharSlice netcoreapp3.1 2.11ms 3.9μs 14.6μs 0 0 0 640 KB
#7748 OriginalCharSlice net472 2.62ms 106ns 381ns 100 0 0 641.95 KB
#7748 OptimizedCharSlice net6.0 1.35ms 457ns 1.77μs 0 0 0 7 B
#7748 OptimizedCharSlice netcoreapp3.1 1.69ms 294ns 1.14μs 0 0 0 1 B
#7748 OptimizedCharSlice net472 1.95ms 218ns 843ns 0 0 0 73 B
#7748 OptimizedCharSliceWithPool net6.0 838μs 12.1ns 43.8ns 0 0 0 3 B
#7748 OptimizedCharSliceWithPool netcoreapp3.1 841μs 71.7ns 278ns 0 0 0 1 B
#7748 OptimizedCharSliceWithPool net472 1.15ms 75.9ns 294ns 0 0 0 47 B
Benchmarks.Trace.CIVisibilityProtocolWriterBenchmark - Same speed ✔️ More allocations ⚠️

More allocations ⚠️ in #7748

Benchmark Base Allocated Diff Allocated Change Change %
Benchmarks.Trace.CIVisibilityProtocolWriterBenchmark.WriteAndFlushEnrichedTraces‑net6.0 41.78 KB 42.02 KB 236 B 0.56%

Fewer allocations 🎉 in #7748

Benchmark Base Allocated Diff Allocated Change Change %
Benchmarks.Trace.CIVisibilityProtocolWriterBenchmark.WriteAndFlushEnrichedTraces‑net472 56.83 KB 56.04 KB -795 B -1.40%

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master WriteAndFlushEnrichedTraces net6.0 713μs 1.48μs 5.74μs 0 0 0 41.78 KB
master WriteAndFlushEnrichedTraces netcoreapp3.1 682μs 3.42μs 15.7μs 0 0 0 42 KB
master WriteAndFlushEnrichedTraces net472 1.02ms 4.01μs 15.5μs 8.93 0 0 56.83 KB
#7748 WriteAndFlushEnrichedTraces net6.0 724μs 4.19μs 37μs 0 0 0 42.02 KB
#7748 WriteAndFlushEnrichedTraces netcoreapp3.1 693μs 830ns 3.21μs 0 0 0 42.09 KB
#7748 WriteAndFlushEnrichedTraces net472 914μs 3.16μs 11.4μs 4.46 0 0 56.04 KB
Benchmarks.Trace.DbCommandBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master ExecuteNonQuery net6.0 1.9μs 4.22ns 16.3ns 0 0 0 1.02 KB
master ExecuteNonQuery netcoreapp3.1 2.65μs 8.23ns 31.9ns 0 0 0 1.02 KB
master ExecuteNonQuery net472 2.87μs 1.32ns 5.1ns 0.143 0.0143 0 987 B
#7748 ExecuteNonQuery net6.0 1.92μs 3.97ns 15.4ns 0 0 0 1.02 KB
#7748 ExecuteNonQuery netcoreapp3.1 2.58μs 11.2ns 43.2ns 0 0 0 1.02 KB
#7748 ExecuteNonQuery net472 2.89μs 3.93ns 15.2ns 0.144 0.0144 0 987 B
Benchmarks.Trace.ElasticsearchBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master CallElasticsearch net6.0 1.69μs 8.04ns 33.1ns 0 0 0 1.03 KB
master CallElasticsearch netcoreapp3.1 2.23μs 11ns 48ns 0 0 0 1.03 KB
master CallElasticsearch net472 3.66μs 3.71ns 14.4ns 0.165 0 0 1.04 KB
master CallElasticsearchAsync net6.0 1.86μs 2.97ns 11.5ns 0 0 0 1.01 KB
master CallElasticsearchAsync netcoreapp3.1 2.41μs 5.21ns 20.2ns 0 0 0 1.08 KB
master CallElasticsearchAsync net472 3.83μs 2.9ns 10.9ns 0.17 0 0 1.1 KB
#7748 CallElasticsearch net6.0 1.76μs 5.4ns 20.9ns 0 0 0 1.03 KB
#7748 CallElasticsearch netcoreapp3.1 2.25μs 9.89ns 38.3ns 0 0 0 1.03 KB
#7748 CallElasticsearch net472 3.58μs 2.59ns 9.68ns 0.162 0 0 1.04 KB
#7748 CallElasticsearchAsync net6.0 1.88μs 9.12ns 39.7ns 0 0 0 1.01 KB
#7748 CallElasticsearchAsync netcoreapp3.1 2.43μs 9.4ns 36.4ns 0 0 0 1.08 KB
#7748 CallElasticsearchAsync net472 3.62μs 3.55ns 13.7ns 0.162 0 0 1.1 KB
Benchmarks.Trace.GraphQLBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master ExecuteAsync net6.0 1.85μs 1.86ns 6.97ns 0 0 0 952 B
master ExecuteAsync netcoreapp3.1 2.45μs 11.2ns 43.5ns 0 0 0 952 B
master ExecuteAsync net472 2.54μs 1.61ns 6.03ns 0.142 0 0 915 B
#7748 ExecuteAsync net6.0 1.91μs 6.45ns 25ns 0 0 0 952 B
#7748 ExecuteAsync netcoreapp3.1 2.44μs 6.87ns 26.6ns 0 0 0 952 B
#7748 ExecuteAsync net472 2.53μs 1.96ns 7.61ns 0.14 0 0 915 B
Benchmarks.Trace.HttpClientBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master SendAsync net6.0 6.78μs 5.56ns 21.5ns 0 0 0 2.36 KB
master SendAsync netcoreapp3.1 8.52μs 31ns 120ns 0 0 0 2.9 KB
master SendAsync net472 12.3μs 9.01ns 34.9ns 0.488 0 0 3.18 KB
#7748 SendAsync net6.0 6.89μs 13.4ns 51.7ns 0 0 0 2.36 KB
#7748 SendAsync netcoreapp3.1 8.68μs 12.9ns 49.9ns 0 0 0 2.9 KB
#7748 SendAsync net472 12.2μs 6.5ns 24.3ns 0.483 0 0 3.18 KB
Benchmarks.Trace.Iast.StringAspectsBenchmark - Same speed ✔️ More allocations ⚠️

More allocations ⚠️ in #7748

Benchmark Base Allocated Diff Allocated Change Change %
Benchmarks.Trace.Iast.StringAspectsBenchmark.StringConcatAspectBenchmark‑net472 278.53 KB 294.91 KB 16.38 KB 5.88%
Benchmarks.Trace.Iast.StringAspectsBenchmark.StringConcatBenchmark‑netcoreapp3.1 42.64 KB 44.04 KB 1.4 KB 3.28%

Fewer allocations 🎉 in #7748

Benchmark Base Allocated Diff Allocated Change Change %
Benchmarks.Trace.Iast.StringAspectsBenchmark.StringConcatBenchmark‑net6.0 44.47 KB 43.54 KB -936 B -2.10%
Benchmarks.Trace.Iast.StringAspectsBenchmark.StringConcatAspectBenchmark‑net6.0 279.56 KB 259.89 KB -19.67 KB -7.04%
Benchmarks.Trace.Iast.StringAspectsBenchmark.StringConcatAspectBenchmark‑netcoreapp3.1 276.07 KB 247.05 KB -29.02 KB -10.51%
Benchmarks.Trace.Iast.StringAspectsBenchmark.StringConcatBenchmark‑net472 65.54 KB 57.34 KB -8.19 KB -12.50%

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master StringConcatBenchmark net6.0 45.2μs 267ns 2.54μs 0 0 0 44.47 KB
master StringConcatBenchmark netcoreapp3.1 46.8μs 263ns 1.75μs 0 0 0 42.64 KB
master StringConcatBenchmark net472 58.3μs 201ns 752ns 0 0 0 65.54 KB
master StringConcatAspectBenchmark net6.0 494μs 1.24μs 4.47μs 0 0 0 279.56 KB
master StringConcatAspectBenchmark netcoreapp3.1 535μs 2.54μs 10.5μs 0 0 0 276.07 KB
master StringConcatAspectBenchmark net472 402μs 2.07μs 10.4μs 0 0 0 278.53 KB
#7748 StringConcatBenchmark net6.0 45μs 203ns 1.33μs 0 0 0 43.54 KB
#7748 StringConcatBenchmark netcoreapp3.1 46.7μs 204ns 763ns 0 0 0 44.04 KB
#7748 StringConcatBenchmark net472 56.6μs 279ns 1.15μs 0 0 0 57.34 KB
#7748 StringConcatAspectBenchmark net6.0 462μs 1.73μs 5.98μs 0 0 0 259.89 KB
#7748 StringConcatAspectBenchmark netcoreapp3.1 501μs 2.44μs 10.6μs 0 0 0 247.05 KB
#7748 StringConcatAspectBenchmark net472 402μs 1.95μs 8.29μs 0 0 0 294.91 KB
Benchmarks.Trace.ILoggerBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master EnrichedLog net6.0 2.64μs 11.8ns 45.5ns 0 0 0 1.7 KB
master EnrichedLog netcoreapp3.1 3.65μs 16.9ns 67.4ns 0 0 0 1.7 KB
master EnrichedLog net472 4.02μs 5.91ns 22.9ns 0.258 0 0 1.64 KB
#7748 EnrichedLog net6.0 2.68μs 1.79ns 6.7ns 0 0 0 1.7 KB
#7748 EnrichedLog netcoreapp3.1 3.58μs 15.5ns 59.9ns 0 0 0 1.7 KB
#7748 EnrichedLog net472 4.02μs 6.87ns 26.6ns 0.241 0 0 1.64 KB
Benchmarks.Trace.Log4netBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master EnrichedLog net6.0 125μs 156ns 542ns 0 0 0 4.31 KB
master EnrichedLog netcoreapp3.1 129μs 160ns 577ns 0 0 0 4.31 KB
master EnrichedLog net472 167μs 37.4ns 140ns 0 0 0 4.52 KB
#7748 EnrichedLog net6.0 124μs 153ns 572ns 0 0 0 4.31 KB
#7748 EnrichedLog netcoreapp3.1 128μs 145ns 544ns 0 0 0 4.31 KB
#7748 EnrichedLog net472 170μs 180ns 696ns 0 0 0 4.52 KB
Benchmarks.Trace.NLogBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master EnrichedLog net6.0 5.07μs 23.6ns 94.3ns 0 0 0 2.26 KB
master EnrichedLog netcoreapp3.1 6.85μs 16.8ns 65.2ns 0 0 0 2.26 KB
master EnrichedLog net472 7.54μs 6.54ns 25.3ns 0.3 0 0 2.08 KB
#7748 EnrichedLog net6.0 5.11μs 13.4ns 48.5ns 0 0 0 2.26 KB
#7748 EnrichedLog netcoreapp3.1 6.7μs 14.1ns 52.6ns 0 0 0 2.26 KB
#7748 EnrichedLog net472 7.63μs 8.42ns 32.6ns 0.305 0 0 2.08 KB
Benchmarks.Trace.RedisBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master SendReceive net6.0 1.98μs 10.5ns 54.3ns 0 0 0 1.2 KB
master SendReceive netcoreapp3.1 2.68μs 1.43ns 5.52ns 0 0 0 1.2 KB
master SendReceive net472 3.07μs 2.62ns 10.1ns 0.183 0 0 1.2 KB
#7748 SendReceive net6.0 1.96μs 9ns 36ns 0 0 0 1.2 KB
#7748 SendReceive netcoreapp3.1 2.69μs 3.2ns 12.4ns 0 0 0 1.2 KB
#7748 SendReceive net472 3.03μs 2.58ns 10ns 0.182 0 0 1.2 KB
Benchmarks.Trace.SerilogBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master EnrichedLog net6.0 4.39μs 12.5ns 48.6ns 0 0 0 1.58 KB
master EnrichedLog netcoreapp3.1 5.89μs 6.99ns 27.1ns 0 0 0 1.63 KB
master EnrichedLog net472 6.44μs 4.81ns 18.6ns 0.32 0 0 2.03 KB
#7748 EnrichedLog net6.0 4.41μs 4.01ns 15.5ns 0 0 0 1.58 KB
#7748 EnrichedLog netcoreapp3.1 5.61μs 11.3ns 42.3ns 0 0 0 1.63 KB
#7748 EnrichedLog net472 6.63μs 9.8ns 38ns 0.296 0 0 2.03 KB
Benchmarks.Trace.SpanBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master StartFinishSpan net6.0 779ns 3.55ns 13.8ns 0 0 0 576 B
master StartFinishSpan netcoreapp3.1 955ns 5.25ns 30.6ns 0 0 0 576 B
master StartFinishSpan net472 925ns 0.545ns 2.11ns 0.0885 0 0 578 B
master StartFinishScope net6.0 939ns 0.2ns 0.748ns 0 0 0 696 B
master StartFinishScope netcoreapp3.1 1.19μs 5.83ns 24.1ns 0 0 0 696 B
master StartFinishScope net472 1.12μs 0.687ns 2.48ns 0.101 0 0 658 B
#7748 StartFinishSpan net6.0 761ns 4.01ns 20.4ns 0 0 0 576 B
#7748 StartFinishSpan netcoreapp3.1 957ns 4.62ns 17.9ns 0 0 0 576 B
#7748 StartFinishSpan net472 920ns 0.693ns 2.68ns 0.0884 0 0 578 B
#7748 StartFinishScope net6.0 925ns 4.81ns 22.6ns 0 0 0 696 B
#7748 StartFinishScope netcoreapp3.1 1.22μs 6.15ns 26.8ns 0 0 0 696 B
#7748 StartFinishScope net472 1.12μs 0.607ns 2.27ns 0.1 0 0 658 B
Benchmarks.Trace.TraceAnnotationsBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch Method Toolchain Mean StdError StdDev Gen 0 Gen 1 Gen 2 Allocated
master RunOnMethodBegin net6.0 1.06μs 5.88ns 34.8ns 0 0 0 696 B
master RunOnMethodBegin netcoreapp3.1 1.43μs 7.02ns 29ns 0 0 0 696 B
master RunOnMethodBegin net472 1.5μs 1.05ns 3.92ns 0.104 0 0 658 B
#7748 RunOnMethodBegin net6.0 1.08μs 5.06ns 20.9ns 0 0 0 696 B
#7748 RunOnMethodBegin netcoreapp3.1 1.41μs 6.72ns 26ns 0 0 0 696 B
#7748 RunOnMethodBegin net472 1.47μs 0.878ns 3.4ns 0.103 0 0 658 B

andrewlock
andrewlock approved these changes Nov 3, 2025
View reviewed changes
.github/workflows/datadog-static-analysis.yml
- name: Check code meets quality standards
id: datadog-static-analysis
uses: DataDog/datadog-static-analyzer-github-action@2707598b1182dce1d1792186477b5b4132338e1c # v1.2.3
uses: DataDog/datadog-static-analyzer-github-action@2cc0e0621ea2863272b29d9aea230d9aad238086 # v2.0.0
Copy link
Member

@andrewlock andrewlock Nov 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We're already using [push] so the breaking change here should be ok

@andrewlock andrewlock merged commit 586e0e1 into master Nov 3, 2025
102 of 105 checks passed
@andrewlock andrewlock deleted the dependabot/github_actions/gh-actions-packages-1cad358c2f branch November 3, 2025 13:24
@github-actions github-actions bot added this to the vNext-v3 milestone Nov 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@andrewlock andrewlock andrewlock approved these changes

Assignees

No one assigned

Labels

area:builds project files, build scripts, pipelines, versioning, releases, packages dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

3.31.0

Development

Successfully merging this pull request may close these issues.

1 participant

@andrewlock