🍒 9318 - Do not follow symlinks by default when building repository index #9322

nikita-tkachenko-datadog · 2025-08-06T11:56:03Z

Backport #9318 to release/v1.52.x

(cherry picked from commit 21661c2)

(cherry picked from commit c427509)

PerfectSlayer

Reporting approval to the backport

datadog-official · 2025-08-06T12:17:30Z

Code coverage: total 57.08%, patch 22.22% (view details)

_{This comment will be updated automatically if new data arrives.

🔗 Commit SHA: 56f3210 | Docs | Was this helpful? Give us feedback!}

pr-commenter · 2025-08-06T12:31:58Z

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	nikita.tkachenko/backport-pr-9318
git_commit_date	1754481044	1754481358
git_commit_sha	`9de0da8`	`56f3210`
release_version	1.53.0-SNAPSHOT~9de0da8e64	1.53.0-SNAPSHOT~56f32103b2

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1754483246	1754483246
ci_job_id	1066640680	1066640680
ci_pipeline_id	72835111	72835111
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-2-xqxmbbqa 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-2-xqxmbbqa 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module	Agent	Agent
parent	None	None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 48 metrics, 11 unstable metrics.

Startup time reports for insecure-bank

gantt
    title insecure-bank - global startup overhead: candidate=1.53.0-SNAPSHOT~56f32103b2, baseline=1.53.0-SNAPSHOT~9de0da8e64

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.046 s) : 0, 1045873
Total [baseline] (8.61 s) : 0, 8610107
Agent [candidate] (1.047 s) : 0, 1047480
Total [candidate] (8.593 s) : 0, 8592946
section iast
Agent [baseline] (1.175 s) : 0, 1175436
Total [baseline] (9.349 s) : 0, 9349084
Agent [candidate] (1.176 s) : 0, 1175538
Total [candidate] (9.284 s) : 0, 9284077

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.046 s	-
Agent	iast	1.175 s	129.564 ms (12.4%)
Total	tracing	8.61 s	-
Total	iast	9.349 s	738.977 ms (8.6%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.047 s	-
Agent	iast	1.176 s	128.059 ms (12.2%)
Total	tracing	8.593 s	-
Total	iast	9.284 s	691.131 ms (8.0%)

gantt
    title insecure-bank - break down per module: candidate=1.53.0-SNAPSHOT~56f32103b2, baseline=1.53.0-SNAPSHOT~9de0da8e64

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.431 ms) : 0, 1431
crashtracking [candidate] (1.431 ms) : 0, 1431
BytebuddyAgent [baseline] (731.6 ms) : 0, 731600
BytebuddyAgent [candidate] (732.12 ms) : 0, 732120
GlobalTracer [baseline] (242.357 ms) : 0, 242357
GlobalTracer [candidate] (243.179 ms) : 0, 243179
AppSec [baseline] (30.114 ms) : 0, 30114
AppSec [candidate] (30.29 ms) : 0, 30290
Debugger [baseline] (6.044 ms) : 0, 6044
Debugger [candidate] (6.07 ms) : 0, 6070
Remote Config [baseline] (649.133 µs) : 0, 649
Remote Config [candidate] (654.373 µs) : 0, 654
Telemetry [baseline] (12.676 ms) : 0, 12676
Telemetry [candidate] (12.715 ms) : 0, 12715
section iast
crashtracking [baseline] (1.427 ms) : 0, 1427
crashtracking [candidate] (1.443 ms) : 0, 1443
BytebuddyAgent [baseline] (847.938 ms) : 0, 847938
BytebuddyAgent [candidate] (848.943 ms) : 0, 848943
GlobalTracer [baseline] (232.171 ms) : 0, 232171
GlobalTracer [candidate] (232.166 ms) : 0, 232166
AppSec [baseline] (27.274 ms) : 0, 27274
AppSec [candidate] (26.891 ms) : 0, 26891
Debugger [baseline] (8.475 ms) : 0, 8475
Debugger [candidate] (6.709 ms) : 0, 6709
Remote Config [baseline] (595.507 µs) : 0, 596
Remote Config [candidate] (591.07 µs) : 0, 591
Telemetry [baseline] (8.258 ms) : 0, 8258
Telemetry [candidate] (8.065 ms) : 0, 8065
IAST [baseline] (28.287 ms) : 0, 28287
IAST [candidate] (29.828 ms) : 0, 29828

Startup time reports for petclinic

gantt
    title petclinic - global startup overhead: candidate=1.53.0-SNAPSHOT~56f32103b2, baseline=1.53.0-SNAPSHOT~9de0da8e64

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.045 s) : 0, 1045133
Total [baseline] (10.707 s) : 0, 10706600
Agent [candidate] (1.043 s) : 0, 1043190
Total [candidate] (10.789 s) : 0, 10789055
section appsec
Agent [baseline] (1.221 s) : 0, 1221277
Total [baseline] (10.828 s) : 0, 10827829
Agent [candidate] (1.22 s) : 0, 1220435
Total [candidate] (10.712 s) : 0, 10712191
section iast
Agent [baseline] (1.178 s) : 0, 1178178
Total [baseline] (10.857 s) : 0, 10857015
Agent [candidate] (1.176 s) : 0, 1175539
Total [candidate] (10.893 s) : 0, 10893068
section profiling
Agent [baseline] (1.202 s) : 0, 1202065
Total [baseline] (10.928 s) : 0, 10927740
Agent [candidate] (1.191 s) : 0, 1191119
Total [candidate] (10.839 s) : 0, 10838660

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.045 s	-
Agent	appsec	1.221 s	176.144 ms (16.9%)
Agent	iast	1.178 s	133.045 ms (12.7%)
Agent	profiling	1.202 s	156.932 ms (15.0%)
Total	tracing	10.707 s	-
Total	appsec	10.828 s	121.229 ms (1.1%)
Total	iast	10.857 s	150.415 ms (1.4%)
Total	profiling	10.928 s	221.14 ms (2.1%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.043 s	-
Agent	appsec	1.22 s	177.245 ms (17.0%)
Agent	iast	1.176 s	132.349 ms (12.7%)
Agent	profiling	1.191 s	147.929 ms (14.2%)
Total	tracing	10.789 s	-
Total	appsec	10.712 s	-76.865 ms (-0.7%)
Total	iast	10.893 s	104.013 ms (1.0%)
Total	profiling	10.839 s	49.605 ms (0.5%)

gantt
    title petclinic - break down per module: candidate=1.53.0-SNAPSHOT~56f32103b2, baseline=1.53.0-SNAPSHOT~9de0da8e64

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.429 ms) : 0, 1429
crashtracking [candidate] (1.434 ms) : 0, 1434
BytebuddyAgent [baseline] (732.044 ms) : 0, 732044
BytebuddyAgent [candidate] (731.277 ms) : 0, 731277
GlobalTracer [baseline] (241.739 ms) : 0, 241739
GlobalTracer [candidate] (241.597 ms) : 0, 241597
AppSec [baseline] (30.013 ms) : 0, 30013
AppSec [candidate] (29.997 ms) : 0, 29997
Debugger [baseline] (6.041 ms) : 0, 6041
Debugger [candidate] (6.059 ms) : 0, 6059
Remote Config [baseline] (649.462 µs) : 0, 649
Remote Config [candidate] (651.879 µs) : 0, 652
Telemetry [baseline] (12.126 ms) : 0, 12126
Telemetry [candidate] (11.134 ms) : 0, 11134
section appsec
crashtracking [baseline] (1.442 ms) : 0, 1442
crashtracking [candidate] (1.428 ms) : 0, 1428
BytebuddyAgent [baseline] (753.537 ms) : 0, 753537
BytebuddyAgent [candidate] (753.946 ms) : 0, 753946
GlobalTracer [baseline] (235.442 ms) : 0, 235442
GlobalTracer [candidate] (235.129 ms) : 0, 235129
AppSec [baseline] (169.023 ms) : 0, 169023
AppSec [candidate] (168.582 ms) : 0, 168582
Debugger [baseline] (7.992 ms) : 0, 7992
Debugger [candidate] (7.867 ms) : 0, 7867
Remote Config [baseline] (619.586 µs) : 0, 620
Remote Config [candidate] (615.628 µs) : 0, 616
Telemetry [baseline] (8.469 ms) : 0, 8469
Telemetry [candidate] (8.202 ms) : 0, 8202
IAST [baseline] (23.583 ms) : 0, 23583
IAST [candidate] (23.595 ms) : 0, 23595
section iast
crashtracking [baseline] (1.436 ms) : 0, 1436
crashtracking [candidate] (1.43 ms) : 0, 1430
BytebuddyAgent [baseline] (850.952 ms) : 0, 850952
BytebuddyAgent [candidate] (848.869 ms) : 0, 848869
GlobalTracer [baseline] (231.818 ms) : 0, 231818
GlobalTracer [candidate] (231.793 ms) : 0, 231793
AppSec [baseline] (29.766 ms) : 0, 29766
AppSec [candidate] (27.209 ms) : 0, 27209
Debugger [baseline] (5.84 ms) : 0, 5840
Debugger [candidate] (6.695 ms) : 0, 6695
Remote Config [baseline] (595.963 µs) : 0, 596
Remote Config [candidate] (600.691 µs) : 0, 601
Telemetry [baseline] (8.291 ms) : 0, 8291
Telemetry [candidate] (8.256 ms) : 0, 8256
IAST [baseline] (28.425 ms) : 0, 28425
IAST [candidate] (29.599 ms) : 0, 29599
section profiling
ProfilingAgent [baseline] (108.653 ms) : 0, 108653
ProfilingAgent [candidate] (107.722 ms) : 0, 107722
crashtracking [baseline] (1.411 ms) : 0, 1411
crashtracking [candidate] (1.395 ms) : 0, 1395
BytebuddyAgent [baseline] (765.72 ms) : 0, 765720
BytebuddyAgent [candidate] (759.029 ms) : 0, 759029
GlobalTracer [baseline] (222.909 ms) : 0, 222909
GlobalTracer [candidate] (220.812 ms) : 0, 220812
AppSec [baseline] (30.319 ms) : 0, 30319
AppSec [candidate] (29.948 ms) : 0, 29948
Debugger [baseline] (6.404 ms) : 0, 6404
Debugger [candidate] (6.255 ms) : 0, 6255
Remote Config [baseline] (718.316 µs) : 0, 718
Remote Config [candidate] (694.929 µs) : 0, 695
Telemetry [baseline] (16.134 ms) : 0, 16134
Telemetry [candidate] (15.883 ms) : 0, 15883
Profiling [baseline] (109.285 ms) : 0, 109285
Profiling [candidate] (108.374 ms) : 0, 108374

Load

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	nikita.tkachenko/backport-pr-9318
git_commit_date	1754481044	1754481358
git_commit_sha	`9de0da8`	`56f3210`
release_version	1.53.0-SNAPSHOT~9de0da8e64	1.53.0-SNAPSHOT~56f32103b2

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1754482890	1754482890
ci_job_id	1066640681	1066640681
ci_pipeline_id	72835111	72835111
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-2-90462cvf 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-2-90462cvf 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 1 performance improvements and 4 performance regressions! Performance is the same for 7 metrics, 12 unstable metrics.

scenario	Δ mean http_req_duration	Δ mean throughput	candidate mean http_req_duration	candidate mean throughput	baseline mean http_req_duration	baseline mean throughput
scenario:load:insecure-bank:iast:high_load	worse [+340.577µs; +680.450µs] or [+3.762%; +7.517%]	unstable [-85.339op/s; +31.339op/s] or [-16.647%; +6.113%]	9.563ms	485.625op/s	9.052ms	512.625op/s
scenario:load:insecure-bank:no_agent:high_load	worse [+136.890µs; +244.923µs] or [+3.262%; +5.836%]	unstable [-160.072op/s; +66.322op/s] or [-14.650%; +6.070%]	4.388ms	1045.781op/s	4.197ms	1092.656op/s
scenario:load:petclinic:tracing:high_load	better [-2.172ms; -1.397ms] or [-4.891%; -3.145%]	unstable [-3.466op/s; +12.141op/s] or [-3.289%; +11.520%]	42.621ms	109.725op/s	44.405ms	105.388op/s
scenario:load:petclinic:no_agent:high_load	worse [+1.469ms; +2.111ms] or [+4.042%; +5.808%]	unstable [-14.870op/s; +2.945op/s] or [-11.566%; +2.290%]	38.141ms	122.600op/s	36.351ms	128.562op/s
scenario:load:petclinic:code_origins:high_load	worse [+2.116ms; +2.931ms] or [+4.888%; +6.771%]	unstable [-13.546op/s; +1.746op/s] or [-12.537%; +1.616%]	45.809ms	102.150op/s	43.286ms	108.050op/s

Request duration reports for insecure-bank

gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.53.0-SNAPSHOT~56f32103b2, baseline=1.53.0-SNAPSHOT~9de0da8e64
    dateFormat X
    axisFormat %s
section baseline
no_agent (4.197 ms) : 4146, 4248
.   : milestone, 4197,
iast (9.052 ms) : 8907, 9198
.   : milestone, 9052,
iast_FULL (14.069 ms) : 13789, 14350
.   : milestone, 14069,
iast_GLOBAL (10.179 ms) : 10002, 10355
.   : milestone, 10179,
profiling (8.981 ms) : 8829, 9133
.   : milestone, 8981,
tracing (7.477 ms) : 7375, 7580
.   : milestone, 7477,
section candidate
no_agent (4.388 ms) : 4338, 4438
.   : milestone, 4388,
iast (9.563 ms) : 9393, 9732
.   : milestone, 9563,
iast_FULL (13.998 ms) : 13717, 14279
.   : milestone, 13998,
iast_GLOBAL (10.177 ms) : 10000, 10353
.   : milestone, 10177,
profiling (8.747 ms) : 8608, 8885
.   : milestone, 8747,
tracing (7.377 ms) : 7276, 7478
.   : milestone, 7377,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	4.197 ms [4.146 ms, 4.248 ms]	-
iast	9.052 ms [8.907 ms, 9.198 ms]	4.855 ms (115.7%)
iast_FULL	14.069 ms [13.789 ms, 14.35 ms]	9.872 ms (235.2%)
iast_GLOBAL	10.179 ms [10.002 ms, 10.355 ms]	5.982 ms (142.5%)
profiling	8.981 ms [8.829 ms, 9.133 ms]	4.784 ms (114.0%)
tracing	7.477 ms [7.375 ms, 7.58 ms]	3.28 ms (78.2%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	4.388 ms [4.338 ms, 4.438 ms]	-
iast	9.563 ms [9.393 ms, 9.732 ms]	5.175 ms (117.9%)
iast_FULL	13.998 ms [13.717 ms, 14.279 ms]	9.61 ms (219.0%)
iast_GLOBAL	10.177 ms [10.0 ms, 10.353 ms]	5.789 ms (131.9%)
profiling	8.747 ms [8.608 ms, 8.885 ms]	4.359 ms (99.3%)
tracing	7.377 ms [7.276 ms, 7.478 ms]	2.989 ms (68.1%)

Request duration reports for petclinic

gantt
    title petclinic - request duration [CI 0.99] : candidate=1.53.0-SNAPSHOT~56f32103b2, baseline=1.53.0-SNAPSHOT~9de0da8e64
    dateFormat X
    axisFormat %s
section baseline
no_agent (36.351 ms) : 36062, 36640
.   : milestone, 36351,
appsec (46.311 ms) : 45909, 46713
.   : milestone, 46311,
code_origins (43.286 ms) : 42920, 43652
.   : milestone, 43286,
iast (43.909 ms) : 43534, 44284
.   : milestone, 43909,
profiling (47.004 ms) : 46564, 47444
.   : milestone, 47004,
tracing (44.405 ms) : 44039, 44771
.   : milestone, 44405,
section candidate
no_agent (38.141 ms) : 37833, 38449
.   : milestone, 38141,
appsec (46.838 ms) : 46417, 47259
.   : milestone, 46838,
code_origins (45.809 ms) : 45418, 46200
.   : milestone, 45809,
iast (44.123 ms) : 43742, 44504
.   : milestone, 44123,
profiling (45.999 ms) : 45552, 46447
.   : milestone, 45999,
tracing (42.621 ms) : 42267, 42975
.   : milestone, 42621,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	36.351 ms [36.062 ms, 36.64 ms]	-
appsec	46.311 ms [45.909 ms, 46.713 ms]	9.96 ms (27.4%)
code_origins	43.286 ms [42.92 ms, 43.652 ms]	6.935 ms (19.1%)
iast	43.909 ms [43.534 ms, 44.284 ms]	7.558 ms (20.8%)
profiling	47.004 ms [46.564 ms, 47.444 ms]	10.653 ms (29.3%)
tracing	44.405 ms [44.039 ms, 44.771 ms]	8.054 ms (22.2%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	38.141 ms [37.833 ms, 38.449 ms]	-
appsec	46.838 ms [46.417 ms, 47.259 ms]	8.697 ms (22.8%)
code_origins	45.809 ms [45.418 ms, 46.2 ms]	7.668 ms (20.1%)
iast	44.123 ms [43.742 ms, 44.504 ms]	5.982 ms (15.7%)
profiling	45.999 ms [45.552 ms, 46.447 ms]	7.858 ms (20.6%)
tracing	42.621 ms [42.267 ms, 42.975 ms]	4.48 ms (11.7%)

Dacapo

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	nikita.tkachenko/backport-pr-9318
git_commit_date	1754481044	1754481358
git_commit_sha	`9de0da8`	`56f3210`
release_version	1.53.0-SNAPSHOT~9de0da8e64	1.53.0-SNAPSHOT~56f32103b2

See matching parameters

	Baseline	Candidate
application	biojava	biojava
ci_job_date	1754483432	1754483432
ci_job_id	1066640682	1066640682
ci_pipeline_id	72835111	72835111
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-3-jxa39uc4 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-3-jxa39uc4 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 10 metrics, 2 unstable metrics.

Execution time for tomcat

gantt
    title tomcat - execution time [CI 0.99] : candidate=1.53.0-SNAPSHOT~56f32103b2, baseline=1.53.0-SNAPSHOT~9de0da8e64
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.475 ms) : 1464, 1487
.   : milestone, 1475,
appsec (3.591 ms) : 3379, 3803
.   : milestone, 3591,
iast (2.197 ms) : 2134, 2259
.   : milestone, 2197,
iast_GLOBAL (2.24 ms) : 2177, 2303
.   : milestone, 2240,
profiling (2.489 ms) : 2320, 2658
.   : milestone, 2489,
tracing (2.013 ms) : 1965, 2062
.   : milestone, 2013,
section candidate
no_agent (1.475 ms) : 1463, 1486
.   : milestone, 1475,
appsec (3.655 ms) : 3436, 3875
.   : milestone, 3655,
iast (2.198 ms) : 2136, 2261
.   : milestone, 2198,
iast_GLOBAL (2.242 ms) : 2179, 2305
.   : milestone, 2242,
profiling (2.055 ms) : 2003, 2106
.   : milestone, 2055,
tracing (2.008 ms) : 1960, 2057
.   : milestone, 2008,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.475 ms [1.464 ms, 1.487 ms]	-
appsec	3.591 ms [3.379 ms, 3.803 ms]	2.116 ms (143.4%)
iast	2.197 ms [2.134 ms, 2.259 ms]	721.577 µs (48.9%)
iast_GLOBAL	2.24 ms [2.177 ms, 2.303 ms]	765.025 µs (51.9%)
profiling	2.489 ms [2.32 ms, 2.658 ms]	1.014 ms (68.7%)
tracing	2.013 ms [1.965 ms, 2.062 ms]	538.346 µs (36.5%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.475 ms [1.463 ms, 1.486 ms]	-
appsec	3.655 ms [3.436 ms, 3.875 ms]	2.181 ms (147.9%)
iast	2.198 ms [2.136 ms, 2.261 ms]	723.514 µs (49.1%)
iast_GLOBAL	2.242 ms [2.179 ms, 2.305 ms]	767.666 µs (52.1%)
profiling	2.055 ms [2.003 ms, 2.106 ms]	579.956 µs (39.3%)
tracing	2.008 ms [1.96 ms, 2.057 ms]	533.599 µs (36.2%)

Execution time for biojava

gantt
    title biojava - execution time [CI 0.99] : candidate=1.53.0-SNAPSHOT~56f32103b2, baseline=1.53.0-SNAPSHOT~9de0da8e64
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.727 s) : 15727000, 15727000
.   : milestone, 15727000,
appsec (14.836 s) : 14836000, 14836000
.   : milestone, 14836000,
iast (18.449 s) : 18449000, 18449000
.   : milestone, 18449000,
iast_GLOBAL (17.899 s) : 17899000, 17899000
.   : milestone, 17899000,
profiling (15.214 s) : 15214000, 15214000
.   : milestone, 15214000,
tracing (14.837 s) : 14837000, 14837000
.   : milestone, 14837000,
section candidate
no_agent (14.936 s) : 14936000, 14936000
.   : milestone, 14936000,
appsec (14.602 s) : 14602000, 14602000
.   : milestone, 14602000,
iast (18.177 s) : 18177000, 18177000
.   : milestone, 18177000,
iast_GLOBAL (18.064 s) : 18064000, 18064000
.   : milestone, 18064000,
profiling (15.613 s) : 15613000, 15613000
.   : milestone, 15613000,
tracing (15.044 s) : 15044000, 15044000
.   : milestone, 15044000,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.727 s [15.727 s, 15.727 s]	-
appsec	14.836 s [14.836 s, 14.836 s]	-891.0 ms (-5.7%)
iast	18.449 s [18.449 s, 18.449 s]	2.722 s (17.3%)
iast_GLOBAL	17.899 s [17.899 s, 17.899 s]	2.172 s (13.8%)
profiling	15.214 s [15.214 s, 15.214 s]	-513.0 ms (-3.3%)
tracing	14.837 s [14.837 s, 14.837 s]	-890.0 ms (-5.7%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	14.936 s [14.936 s, 14.936 s]	-
appsec	14.602 s [14.602 s, 14.602 s]	-334.0 ms (-2.2%)
iast	18.177 s [18.177 s, 18.177 s]	3.241 s (21.7%)
iast_GLOBAL	18.064 s [18.064 s, 18.064 s]	3.128 s (20.9%)
profiling	15.613 s [15.613 s, 15.613 s]	677.0 ms (4.5%)
tracing	15.044 s [15.044 s, 15.044 s]	108.0 ms (0.7%)

| Package | Type | Package file | Manager | Update | Change | |---|---|---|---|---|---| | [org.mockito:mockito-core](https://github.com/mockito/mockito) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `5.18.0` -> `5.19.0` | | [com.google.api-client:google-api-client](https://github.com/googleapis/google-api-java-client) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.8.0` -> `2.8.1` | | [com.datadoghq:dd-trace-api](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.52.0` -> `1.52.1` | | [software.amazon.awssdk:sdk-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.32.22` -> `2.32.23` | | [software.amazon.awssdk:sqs](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.32.22` -> `2.32.23` | | [software.amazon.awssdk:regions](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.32.22` -> `2.32.23` | | [software.amazon.awssdk:dynamodb-enhanced](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.32.22` -> `2.32.23` | | [software.amazon.awssdk:dynamodb](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.32.22` -> `2.32.23` | | [software.amazon.awssdk:aws-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.32.22` -> `2.32.23` | | [software.amazon.awssdk:bom](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.32.22` -> `2.32.23` | | [software.amazon.awssdk:auth](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.32.22` -> `2.32.23` | --- ### Release Notes <details> <summary>mockito/mockito (org.mockito:mockito-core)</summary> ### [`v5.19.0`](https://github.com/mockito/mockito/releases/tag/v5.19.0) <sup><sup>*Changelog generated by [Shipkit Changelog Gradle Plugin](https://github.com/shipkit/shipkit-changelog)*</sup></sup> ##### 5.19.0 - 2025-08-15 - [37 commit(s)](mockito/mockito@v5.18.0...v5.19.0) by Adrian-Kim, Tim van der Lippe, Tran Ngoc Nhan, dependabot\[bot], juyeop - feat: Add support for JDK21 Sequenced Collections. [(#3708)](mockito/mockito#3708) - Bump actions/checkout from 4 to 5 [(#3707)](mockito/mockito#3707) - build: Allow overriding 'Created-By' for reproducible builds [(#3704)](mockito/mockito#3704) - Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 [(#3703)](mockito/mockito#3703) - Bump androidx.test:runner from 1.6.2 to 1.7.0 [(#3697)](mockito/mockito#3697) - Bump org.junit.platform:junit-platform-launcher from 1.13.3 to 1.13.4 [(#3694)](mockito/mockito#3694) - Bump com.diffplug.spotless:spotless-plugin-gradle from 7.1.0 to 7.2.1 [(#3693)](mockito/mockito#3693) - Bump junit-jupiter from 5.13.3 to 5.13.4 [(#3691)](mockito/mockito#3691) - Bump com.gradle.develocity from 4.0.2 to 4.1 [(#3689)](mockito/mockito#3689) - Bump com.google.googlejavaformat:google-java-format from 1.27.0 to 1.28.0 [(#3688)](mockito/mockito#3688) - Bump com.google.googlejavaformat:google-java-format from 1.25.2 to 1.27.0 [(#3686)](mockito/mockito#3686) - Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.4 to 7.1.0 [(#3685)](mockito/mockito#3685) - Bump junit-jupiter from 5.13.2 to 5.13.3 [(#3684)](mockito/mockito#3684) - Bump org.shipkit:shipkit-auto-version from 2.1.0 to 2.1.2 [(#3683)](mockito/mockito#3683) - Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.2 to 7.0.4 [(#3682)](mockito/mockito#3682) - Only run release after both Java and Android tests have finished [(#3681)](mockito/mockito#3681) - Bump org.junit.platform:junit-platform-launcher from 1.12.2 to 1.13.3 [(#3680)](mockito/mockito#3680) - Bump org.codehaus.groovy:groovy from 3.0.24 to 3.0.25 [(#3679)](mockito/mockito#3679) - Bump org.eclipse.platform:org.eclipse.osgi from 3.23.0 to 3.23.100 [(#3678)](mockito/mockito#3678) - Can no longer publish snapshot releases [(#3677)](mockito/mockito#3677) - Update Gradle to 8.14.2 [(#3676)](mockito/mockito#3676) - Bump errorprone from 2.23.0 to 2.39.0 [(#3674)](mockito/mockito#3674) - Correct Junit docs link [(#3672)](mockito/mockito#3672) - Bump net.ltgt.gradle:gradle-errorprone-plugin from 4.1.0 to 4.3.0 [(#3670)](mockito/mockito#3670) - Bump junit-jupiter from 5.13.1 to 5.13.2 [(#3669)](mockito/mockito#3669) - Bump bytebuddy from 1.17.5 to 1.17.6 [(#3668)](mockito/mockito#3668) - Bump junit-jupiter from 5.12.2 to 5.13.1 [(#3666)](mockito/mockito#3666) - Bump org.jetbrains.kotlin:kotlin-stdlib from 2.0.21 to 2.2.0 [(#3665)](mockito/mockito#3665) - Bump org.gradle.toolchains.foojay-resolver-convention from 0.9.0 to 1.0.0 [(#3661)](mockito/mockito#3661) - Bump org.junit.platform:junit-platform-launcher from 1.11.4 to 1.12.2 [(#3660)](mockito/mockito#3660) - Add JDK21 sequenced collections for ReturnsEmptyValues [(#3659)](mockito/mockito#3659) - Bump com.gradle.develocity from 3.19.1 to 4.0.2 [(#3658)](mockito/mockito#3658) - Bump ru.vyarus:gradle-animalsniffer-plugin from 1.7.2 to 2.0.1 [(#3657)](mockito/mockito#3657) - Bump org.eclipse.platform:org.eclipse.osgi from 3.22.0 to 3.23.0 [(#3656)](mockito/mockito#3656) - Bump org.codehaus.groovy:groovy from 3.0.23 to 3.0.24 [(#3655)](mockito/mockito#3655) - Bump junit-jupiter from 5.11.4 to 5.12.2 [(#3653)](mockito/mockito#3653) - Reproducible Build: need to inject JDK distribution details to rebuild [(#3563)](mockito/mockito#3563) </details> <details> <summary>googleapis/google-api-java-client (com.google.api-client:google-api-client)</summary> ### [`v2.8.1`](https://github.com/googleapis/google-api-java-client/blob/HEAD/CHANGELOG.md#281-2025-08-14) ##### Bug Fixes - **deps:** Update project.http.version to v2 ([#2598](googleapis/google-api-java-client#2598)) ([4874da1](googleapis/google-api-java-client@4874da1)) </details> <details> <summary>datadog/dd-trace-java (com.datadoghq:dd-trace-api)</summary> ### [`v1.52.1`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.52.1): 1.52.1 ### Components #### Application Security Management (WAF) - 🐛 Fix NullPointerException log in AppSec ([#9356](DataDog/dd-trace-java#9356) - [@jandro996](https://github.com/jandro996)) #### Continuous Integration Visibility - ✨⚡ Do not follow symlinks by default when building repository index ([#9322](DataDog/dd-trace-java#9322) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) #### GraalVM native-image - 🐛 Update GraalVM config to reflect TempLocationManager's new package ([#9338](DataDog/dd-trace-java#9338) - [@luneo7](https://github.com/luneo7) - thanks for the contribution!) #### Profiling - 🐛 Properly handle trace agent IPv6 URL in profiling ([#9339](DataDog/dd-trace-java#9339) - [@jbachorik](https://github.com/jbachorik)) #### Realtime User Monitoring - ✨ Support async servlet for RUM injection ([#9343](DataDog/dd-trace-java#9343) - [@amarziali](https://github.com/amarziali)) - 🐛 Improve RUM injection matching and avoid truncating responses ([#9342](DataDog/dd-trace-java#9342) - [@amarziali](https://github.com/amarziali)) - ✨ Make rum injector stream/writer more resilient to errors ([#9340](DataDog/dd-trace-java#9340) - [@amarziali](https://github.com/amarziali)) #### Tracer core - 🐛 Avoid NPE on featureDiscovery creation ([#9354](DataDog/dd-trace-java#9354) - [@amarziali](https://github.com/amarziali)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am every weekday" in timezone Australia/Melbourne, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). GitOrigin-RevId: 74bf02ba96add7578dbd1f225449c2f86de0c99d

nikita-tkachenko-datadog added 2 commits August 6, 2025 13:55

Do not follow symlinks by default when building repository index

0cf815a

(cherry picked from commit 21661c2)

Restore the check to avoid following symlinks that point inside the repo

56f3210

(cherry picked from commit c427509)

nikita-tkachenko-datadog requested a review from a team as a code owner August 6, 2025 11:56

nikita-tkachenko-datadog added type: enhancement Enhancements and improvements comp: ci visibility Continuous Integration Visibility labels Aug 6, 2025

nikita-tkachenko-datadog requested a review from a team as a code owner August 6, 2025 11:56

nikita-tkachenko-datadog requested review from Mariovido and mcculls August 6, 2025 11:56

nikita-tkachenko-datadog added this to the 1.52.1 milestone Aug 6, 2025

PerfectSlayer approved these changes Aug 6, 2025

View reviewed changes

nikita-tkachenko-datadog enabled auto-merge (squash) August 6, 2025 12:11

daniel-mohedano approved these changes Aug 6, 2025

View reviewed changes

nikita-tkachenko-datadog merged commit 79a60e1 into release/v1.52.x Aug 6, 2025
505 of 506 checks passed

nikita-tkachenko-datadog deleted the nikita.tkachenko/backport-pr-9318 branch August 6, 2025 12:50

PerfectSlayer added the tag: performance Performance related changes label Aug 6, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

🍒 9318 - Do not follow symlinks by default when building repository index #9322

🍒 9318 - Do not follow symlinks by default when building repository index #9322

Uh oh!

nikita-tkachenko-datadog commented Aug 6, 2025

Uh oh!

PerfectSlayer left a comment

Uh oh!

datadog-official bot commented Aug 6, 2025 •

edited by datadog-datadog-prod-us1 bot

Loading

Uh oh!

pr-commenter bot commented Aug 6, 2025

Uh oh!

Uh oh!

Uh oh!

🍒 9318 - Do not follow symlinks by default when building repository index #9322

🍒 9318 - Do not follow symlinks by default when building repository index #9322

Uh oh!

Conversation

nikita-tkachenko-datadog commented Aug 6, 2025

Uh oh!

PerfectSlayer left a comment

Choose a reason for hiding this comment

Uh oh!

datadog-official bot commented Aug 6, 2025 • edited by datadog-datadog-prod-us1 bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pr-commenter bot commented Aug 6, 2025

Benchmarks

Startup

Parameters

Summary

Load

Parameters

Summary

Dacapo

Parameters

Summary

Uh oh!

Uh oh!

Uh oh!

datadog-official bot commented Aug 6, 2025 •

edited by datadog-datadog-prod-us1 bot

Loading