Merge branch 'main' into release.script/changelog-update-2.19.4

CHANGELOG.md

@@ -4,6 +4,59 @@ Changelogs for versions not listed here can be found at https://github.com/DataD
 
 ---
 
+## 2.20.2
+
+### Deprecation Notes
+
+- tracing: Deprecates the following constants in `ddtrace.constants` module:
+  - ANALYTICS_SAMPLE_RATE_KEY
+  - SAMPLE_RATE_METRIC_KEY
+  - SAMPLING_PRIORITY_KEY
+  - SAMPLING_AGENT_DECISION
+  - SAMPLING_RULE_DECISION
+  - SAMPLING_LIMIT_DECISION
+  - ORIGIN_KEY
+  - USER_ID_KEY
+  - HOSTNAME_KEY
+  - RUNTIME_FAMILY
+  - BASE_SERVICE_KEY
+  - SPAN_MEASURED_KEY
+  - KEEP_SPANS_RATE_KEY
+  - MULTIPLE_IP_HEADERS
+  - CONFIG_ENDPOINT_ENV
+  - CONFIG_ENDPOINT_RETRIES_ENV
+  - CONFIG_ENDPOINT_TIMEOUT_ENV
+- tracing: Internalizes the `ddtrace.settings.config` module and deprecates the following `ddtrace.config` attributes:
+  - http, use `DD_TRACE_HEADER_TAGS` environment variable instead.
+  - http_server, use `DD_TRACE_HTTP_SERVER_ERROR_STATUSES` environment variable instead.
+  - trace_headers, this attribute is internal to the tracer.
+  - header_is_traced, this attribute is internal to the tracer.
+  - convert_rc_trace_sampling_rules, this attribute is internal to the tracer.
+  - enable_remote_configuration, use `DD_REMOTE_CONFIGURATION_ENABLED` environment variable instead.
+  - get_from, use `ddtrace.trace.Pin` to set instance level configurations.
+
+### Bug Fixes
+
+- ASM: This ensures that no module from ASM are loaded when ASM is disabled or unavailable.
+
+- SCA: This ensures that no module from IAST are loaded when IAST is disabled or unavailable.
+
+- Code security (IAST): This fix resolves an issue where the usage of <span class="title-ref">callonce</span> decorator could trigger an import loop
+
+- Runtime Code Analysis (IAST): Avoid imports of IAST native module when IAST is not enabled.
+
+- internal: Fix performance overhead of Python distribution parsing for internal telemetry.
+
+- ASM: This fix resolves an issue where IAST modules could be loaded, even if disabled,  
+  which could create an ImportError exception on Windows.
+
+### Other Changes
+
+- tracing: Ensures the ddtrace library does not use deprecated APIs internally. Deprecation warnings should only be logged when the user's code is using deprecated APIs.
+- cassandra,cherrypy,flask_cache,starlette: Ensures a deprecation warning is not raised when patching these integrations via `ddtrace-run` and `import ddtrace.auto`.
+
+---
+
 ## 2.21.1
 ### Bug Fixes