build(deps): bump newrelic_rpm from 9.19.0 to 9.21.0 #218

Closed

dependabot[bot] wants to merge 1 commit from dependabot/bundler/newrelic_rpm-9.21.0 into dev

dependabot[bot] commented

2025-08-28 19:27:21 +00:00

(Migrated from github.com)

Bumps newrelic_rpm from 9.19.0 to 9.21.0.

Changelog

Sourced from newrelic_rpm's changelog.

v9.21.0

Feature: In Serverless APM mode, use event source name as transaction name prefix

The agent will now use the event source name as a prefix for the transaction name in Serverless APM mode. This will help to better identify the source of the transaction in the New Relic UI. PR#3245

Bugfix: Revert changed logic for how we track the thread the span starts in

This change restores the previous behavior of tracking the thread the span starts in, addressing issues that arose from the updated logic. Thank you @david-zw-liu for bringing this to our attention. PR#3248

v9.20.0

Feature: Add ECS Docker ID for Fargate

Previously, the Ruby agent did not record the Docker ID when running in an AWS ECS Fargate environment. The Docker ID will now be recorded correctly. PR#3172

Feature: Add NewRelic::Helper.version_satisfied?

The agent has a new helper method to simplify version comparison. NewRelic::Helper.version_satisfied? accepts three arguments: a left-side version number, the comparison operator as a string, and a right-side version number. Our thanks go to @kekke-n for this contribution. PR#3182

Feature: Add code.stacktrace attribute on datastore spans when duration exceeds configured threshold

The agent will now add the code.stacktrace attribute to datastore spans when the duration exceeds the configured threshold. The threshold is configured using the transaction_tracer.stack_trace_threshold configuration option. PR#3220

Feature: Consolidate "Unknown" constant values

All references to the various capitalization styles for "Unknown" have been consolidated into two constants: NewRelic::UNKNOWN and NewRelic::UNKNOWN_LOWER. Thank you, @tsubasa1122, for your contribution! PR#3185

Bugfix: Fix Brewfile source links

Previously, the multiverse README's links to the Brewfile were broken. Our thanks go to @emmanuel-ferdman for submitting a PR to fix them! PR#3191

Bugfix: Fix error when using HTTPX 1.5.0

The agent previously encountered an error when using the new HTTPX version 1.5.0. This was due to a change in the way HTTPX stores the response. The agent has been updated to handle this change correctly, and no longer encounters an error when using HTTPX 1.5.0. PR#3203

Bugfix: Bugfixes and improvements to debug level agent logs

Improves the information logged at the debug level by the agent when the agent reads in a configuration source. PR#3221

Bugfix: Fix risk of server-side forgery for Slack workflow script

Internally, we keep track of gems that are released using a GitHub actions workflow that posts updates on Slack. [@odaysec] identified a way we could reduce the risk of server-side forgery for this workflow. Thank you! PR#3184

Bugfix: Replace JSON.load calls with JSON.parse

Generally, JSON.parse is seen as safer than JSON.load. Thank you, @odaysec, for bringing this to our attention! PR#3183 PR#3230

Commits

86e0de8 Merge pull request #3250 from newrelic/prerelease_updates_9.21.0-pre
aa93dc6 Merge pull request #3249 from newrelic/pin_karafka-rdkafka_version
0c838f6 bump version
dac2c10 Merge pull request #3248 from newrelic/bugfix_thread_starting_span_logic
039ea63 pin karafka-rdkafka version
dc584b1 add changelog entry
bdde8e1 Merge pull request #3247 from newrelic/fix_intermittently_failing_test_server...
5546188 move txn harvest to setup so its always empty to start with
2ea9879 add back check for nil being separate
e58cd45 Merge pull request #3245 from newrelic/lambda_txn_name_event_source
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [newrelic_rpm](https://github.com/newrelic/newrelic-ruby-agent) from 9.19.0 to 9.21.0. <details> <summary>Changelog</summary> Sourced from <a href="https://github.com/newrelic/newrelic-ruby-agent/blob/dev/CHANGELOG.md">newrelic_rpm's changelog</a>. <blockquote> <h2>v9.21.0</h2> <ul> <li> Feature: In Serverless APM mode, use event source name as transaction name prefix The agent will now use the event source name as a prefix for the transaction name in Serverless APM mode. This will help to better identify the source of the transaction in the New Relic UI. <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3245">PR#3245</a> </li> <li> Bugfix: Revert changed logic for how we track the thread the span starts in This change restores the previous behavior of tracking the thread the span starts in, addressing issues that arose from the updated logic. Thank you <a href="https://github.com/david-zw-liu"><code>@david-zw-liu</code></a> for bringing this to our attention. <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3248">PR#3248</a> </li> </ul> <h2>v9.20.0</h2> <ul> <li> Feature: Add ECS Docker ID for Fargate Previously, the Ruby agent did not record the Docker ID when running in an AWS ECS Fargate environment. The Docker ID will now be recorded correctly. <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3172">PR#3172</a> </li> <li> Feature: Add NewRelic::Helper.version_satisfied? The agent has a new helper method to simplify version comparison. <code>NewRelic::Helper.version_satisfied?</code> accepts three arguments: a left-side version number, the comparison operator as a string, and a right-side version number. Our thanks go to <a href="https://github.com/kekke-n"><code>@kekke-n</code></a> for this contribution. <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3182">PR#3182</a> </li> <li> Feature: Add code.stacktrace attribute on datastore spans when duration exceeds configured threshold The agent will now add the <code>code.stacktrace</code> attribute to datastore spans when the duration exceeds the configured threshold. The threshold is configured using the <code>transaction_tracer.stack_trace_threshold</code> configuration option. <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3220">PR#3220</a> </li> <li> Feature: Consolidate "Unknown" constant values All references to the various capitalization styles for "Unknown" have been consolidated into two constants: <code>NewRelic::UNKNOWN</code> and <code>NewRelic::UNKNOWN_LOWER</code>. Thank you, <a href="https://github.com/@tsubasa1122"><code>@tsubasa1122</code></a>, for your contribution! <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3185">PR#3185</a> </li> <li> Bugfix: Fix Brewfile source links Previously, the multiverse README's links to the Brewfile were broken. Our thanks go to <a href="https://github.com/emmanuel-ferdman"><code>@emmanuel-ferdman</code></a> for submitting a PR to fix them! <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3191">PR#3191</a> </li> <li> Bugfix: Fix error when using HTTPX 1.5.0 The agent previously encountered an error when using the new HTTPX version 1.5.0. This was due to a change in the way HTTPX stores the response. The agent has been updated to handle this change correctly, and no longer encounters an error when using HTTPX 1.5.0. <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3203">PR#3203</a> </li> <li> Bugfix: Bugfixes and improvements to debug level agent logs Improves the information logged at the debug level by the agent when the agent reads in a configuration source. <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3221">PR#3221</a> </li> <li> Bugfix: Fix risk of server-side forgery for Slack workflow script Internally, we keep track of gems that are released using a GitHub actions workflow that posts updates on Slack. [<a href="https://github.com/odaysec"><code>@odaysec</code></a>] identified a way we could reduce the risk of server-side forgery for this workflow. Thank you! <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3184">PR#3184</a> </li> <li> Bugfix: Replace JSON.load calls with JSON.parse Generally, JSON.parse is seen as safer than JSON.load. Thank you, <a href="https://github.com/odaysec"><code>@odaysec</code></a>, for bringing this to our attention! <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3183">PR#3183</a> <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3230">PR#3230</a> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/86e0de8d464d99a879f6023f17eeaabf6bc509c4"><code>86e0de8</code></a> Merge pull request <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/issues/3250">#3250</a> from newrelic/prerelease_updates_9.21.0-pre</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/aa93dc62f19fd29b2a95b9276ed6198f8a6d93bf"><code>aa93dc6</code></a> Merge pull request <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/issues/3249">#3249</a> from newrelic/pin_karafka-rdkafka_version</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/0c838f608c724f678c0300c5adfb42575f27967e"><code>0c838f6</code></a> bump version</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/dac2c1013994d0f048d4d1c00e06af0bc8b70543"><code>dac2c10</code></a> Merge pull request <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/issues/3248">#3248</a> from newrelic/bugfix_thread_starting_span_logic</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/039ea63ef0954884bcf7773cdd3e532ccf947f66"><code>039ea63</code></a> pin karafka-rdkafka version</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/dc584b133fa7b5924397bd14f65a32e4b5730442"><code>dc584b1</code></a> add changelog entry</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/bdde8e1833028dabf2dda91ff7c9704ec788df15"><code>bdde8e1</code></a> Merge pull request <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/issues/3247">#3247</a> from newrelic/fix_intermittently_failing_test_server...</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/55461880d620f63f99b274197d619974d3a1f1fb"><code>5546188</code></a> move txn harvest to setup so its always empty to start with</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/2ea98795e8a3a3576c6eb1bc958532da779b1637"><code>2ea9879</code></a> add back check for nil being separate</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/e58cd45e57ee3b199edc07fccf0b91bac1f93876"><code>e58cd45</code></a> Merge pull request <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/issues/3245">#3245</a> from newrelic/lambda_txn_name_event_source</li> <li>Additional commits viewable in <a href="https://github.com/newrelic/newrelic-ruby-agent/compare/9.19.0...9.21.0">compare view</a></li> </ul> </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=newrelic_rpm&package-manager=bundler&previous-version=9.19.0&new-version=9.21.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

dependabot[bot] commented

2025-09-07 15:05:43 +00:00

(Migrated from github.com)

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting `@dependabot ignore this major version` or `@dependabot ignore this minor version`. You can also ignore all major, minor, or patch releases for a dependency by adding an [`ignore` condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore) with the desired `update_types` to your config file. If you change your mind, just re-open this PR and I'll resolve any conflicts on it.