## DataDog/datadog-agent — v0.9.0…vickenty/7530

_10000+ commits._

### Features
- **[ASCII-1350] Add agent startup time to `inventoryagent` (#24210) (#24297)** (8af6951)
- **[CONTINT-3682] Workloadmeta/containerd/image Collector: Pull all image references in new image event  (#24185)** (15e1b4d)
- **Add warn log for OTel top-level spans change (#24156)** (44fc17f)
- **use new channel name (#24036)** (826521c)
- **USMON-824: USM Kafka support for produce record batching (#23937)** (c9caf90)
- **feat(CI): Direct junit upload using standalone ci-uploader (#22134)** (4e949a6)
- **[CONTINT-3679] Add workqueue telemetry (#24073)** (8596c54)
- **[CWS] add support for fchmodat2 (#24040)** (12bb486)
- **add spp dir to ignored system paths (#24074)** (006c698)
- **Revert "(fleet) make new-e2e-updater manual (#24032)" (#24034)** (0aba308)
- **(fleet) make new-e2e-updater manual (#24032)** (92f92e3)
- **Add a custom action to check that the caller has the correct user membership (#23985)** (e89c323)
- **[network_path] Add telemetry to network_path integration (#23992)** (06715ae)
- **Add e2e tests for runtime secrets management (#23925)** (584e0a6)
- **[CWS] add CWS 7.53 release notes (#24001)** (9951afa)
- **Add `winregistry` module to the check subcommand (#23303)** (1da3ff3)
- **[fleet] Add back dd-updater user (#23962)** (513e3d5)
- **[EBPF-295] Add Rocky Linux images to KMT  (#23832)** (a54a222)
- **[RC] refactor RC service configurations to support multiple RC service instances (#23815)** (385f519)
- **Add kmt.status task (#23994)** (c0db2e2)
- **add missing `enable_approvers` and `enable_discarders` (#23993)** (34e12be)
- **[EBPF] Add typing information to KMT tasks (#23923)** (925d8d0)
- **[CWS] add security profile sliding window (#20506)** (dfad48e)
- **Add integrations_core_ref as workflow inputs (#20442)** (1718c7e)
- **[CSPM] Cleanups in dbconfig and new kubelet.service path (#23982)** (aa3dd97)
- **[Orchestrator]  add new check to collect ecs tasks (#22060)** (e6ec7d5)
- **Add assert function for WithTimestamp metric sender methods (#23974)** (73cf7c5)
- **invoke(update-test-infra): Add a flag to update only go mod (#23973)** (a50d64a)

### Fixes
- **fix process handle leak (#25155) (#25157)** (053f11d)
- **openscap: fix implicit declaration of INT_MIN/INT_MAX (#25070) (#25084)** (83bab3d)
- **OCI: fix PACKAGE_VERSION (#24522)** (92e01d5)
- **[CWS] fix deadlock when calling `RemoveDump` from a function where ad is already locked (#24464) (#24473)** (823696d)
- **[oracle] Fix global_custom_queries bug (SDBM-901) (#24379) (#24395)** (5d7f246)
- **[CWS] fix CWS feature e2e test (#24322) (#24337)** (b6f80c1)
- **[oracle] Bug fixes for the legacy mode (DBMON-3803) (#24284) (#24313)** (1ce564f)
- **[CWS] fix a security dump segfault (#24200) (#24236)** (b570c21)
- **[CWS] fix ECS Fargate container ID pattern (#24192)** (7eabb40)
- **Fix ECS Fargate processes not being associated with containers (#24186)** (ee95e2f)
- **Fix bug in the scrubber where 'AddStrippedKeys' would modify the given slice (#24184)** (2e83e2f)
- **fix pod test (#24068)** (cdeb9c4)
- **[CWS] fix security-agent status policy state (#24172)** (ac10f41)
- **[gitlab] Fix dependencies of new-e2e-agent-shared-components (#24053)** (39024b5)
- **[CWS] Fix security profile sliding window (#24130)** (870bc30)
- **[CWS] Fix ptracer possible infinite loop (#24091)** (5cd19af)
- **fix: write response in /agent/jmx/status (#24093)** (1641029)
- **[USMO] Fix dynamic counter table TLS leak (#24042)** (10911a1)
- **[Network Path] Fix parsing of query params (#24030)** (cf94a5b)
- **fix pod manifest (#24055)** (b74f8f6)
- **fix missing go.mod replaces in all new `pkg/logs` modules (#24058)** (7743b3c)
- **fix: compression import path (#24021)** (eb5280d)
- **fix: do not check return value in case of error (#24019)** (5136441)
- **[ASCII-1330] Fix auth token global variable race (#24013)** (aa4ae94)
- **fix permissions (#24007)** (77a06f2)
- **Fix typo (#24003)** (efc5fe9)
- **fix: inventory package signing docs (#23996)** (07ea584)
- **E2E(Reliability): Attempt to fix ECS timeout flakiness (#23988)** (ec9c194)
- **fix: agentless scanner arm64 RPM deploy job (#23972)** (110f4e9)
- **apm: fix all TODO(APM) (#23959)** (46c7bd1)

### Backend
- **7.53.0 final (#25216)** (0eec38d)
- **Update release.json and Go modules for 6/7.53.0-rc.8 (#25183)** (3d08388)
- **Remove the zstd release note (#25120)** (ef218d4)
- **Update release.json and Go modules for 6/7.53.0-rc.7 (#25086)** (88d4535)
- **[backport] bump `github.com/hashicorp/go-getter` to v1.7.4 (#25040) (#25054)** (e035c31)
- **force tag (#24685) (#25057)** (ddb35a6)
- **Update release.json and Go modules for 6/7.53.0-rc.6 (#24798)** (60dedf6)
- **[Backport 7.53.x] Allow failures in the `kitchen_ubuntu_process_agent-a7` job (#24772)** (040716f)
- **Kfairise/backport ami update7.53.x (#24763)** (4c79d48)
- **Update release.json and Go modules for 6/7.53.0-rc.5 (#24641)** (e8c5575)
- **Backport go bump to 1.21.9 (#24629)** (0156920)
- **[CWS] ensure directory provider lock is not held while propagating profile to manager (#24661) (#24669)** (8027f10)
- **Fi missing autodiscovery component in agent diagnose command (#24604) (#24626)** (55d42f8)
- **Fast-tests: Improve module detection to not run any tests on not targ… (#24052) (#24630)** (9cd30b5)
- **ebpfless: disable procfs scan by default (#24592) (#24595)** (475d324)
- **Update release.json and Go modules for 6/7.53.0-rc.4 (#24489)** (17cdd59)
- **[Backport 7.53.x] [CWS] only report ebpfless selftest once (#24470)** (39dcb4c)
- **Prevent false-positive detection on VirusTotal (#24452)** (a389f9f)
- **7.52.1 changelog (#24376) (#24410)** (1343bc3)
- **Update release.json and Go modules for 6/7.53.0-rc.3 (#24295)** (6c12160)
- **Change OTel top-level spans identification logic to opt-in instead of default (#24232) (#24301)** (9ca6b41)
- **[SVLS-4630] Update serverless integration tests to only run on pull requests (#24083) (#24238)** (1dcd5d0)
- **Handle early subscriber channel closure in tagger server (#24229) (#24290)** (3d5295a)
- **omnibus: python: don't generate debug symbols (#24217) (#24275)** (77466ea)
- **Updates for 7.53.x branch (#24235)** (bcb124a)
- **Only include updater agents (#24174)** (0d3dcb9)
- **Correct logger to avoid to log when logger is disable (#24190)** (33e888d)
- **bump security agent policies to v0.53.1 (#24191)** (88450cd)
- **[release] Update release.json and Go modules for 6/7.53.0-rc.2 (#24143)** (b238404)
- **[CSPM] dbconfig: revert #23384 and continue relying on system-probe (#24169)** (7912719)
- **Revert "[CONTINT-3920] Fakeintake with db" (#24167)** (c247808)
- **[SBOM] Reduce Trivy size (#24117)** (7df26bd)
- **[CONTINT-3920] Fakeintake with db (#24064)** (91f0a2e)
- **Pin github repo of precommit by hash rather than version (#24037)** (a6f695e)
- **(rc) use the director repository to download TUF targets (#24124)** (4b12607)
- **update butane version to v0.20.0 (#24121)** (b8dd087)
- **[dca] Do not load language detection patcher if disabled (#24116)** (eef61a7)
- **[CONTINT-3920][fakeintake] Make the store more generic (#24063)** (6dd02e4)
- **Bump Trivy to version 2024-03-24 (#24088)** (f11876e)
- **[CSPM] k8s: fault tolerant when dealing with unreachable configuration data (#24090)** (ad840e9)
- **update syscall table generation to 6.8 (#24039)** (d39c4e9)
- **downgrade `golang.org/x/tools` to v0.17.0 (#24080)** (01ceb12)
- **[ASCII-1321] Ensure agent startup requests order (#23875)** (46f4f51)
- **Update release.json and Go modules for 6/7.53.0-rc.1 (#24054)** (08b816e)
- **Revert "Split remote updater build & packaging (#23968)" (#24060)** (b7d6f33)
- **[internal] Update golang.org/x/mod to v0.16.0 in internal/tools/modparser (#24038)** (53b2451)
- **Read and propagate helm config for security products (#23618)** (5af707e)
- **[CONTINT-3935] Bump test-infra-definitions (#24017)** (e4d347d)
- **[ASCII-1162] Remove workloadmetadata global store (#23933)** (2921ef1)
- **use stable windows installer URL (#24033)** (9290b8e)
- **remove c.cache (#24031)** (e70a307)
- **Refactor snmp walk subcommand (#23456)** (9357e92)
- **Bump datadog-api-client from 2.22.0 to 2.23.0 in /test/e2e/cws-tests (#24027)** (d53de7d)
- **Changelog update for 7.52.0 release (#23929) (#23960)** (afb342c)
- **CWS: sync BTFhub constants (#24018)** (c15614b)
- **Remove last occurrences of agent-platform (#24014)** (42cd02f)
- **Move external/custom metrics in a dedicated pkg in cluster agent (#23712)** (7522434)
- **use no-kmod branch of btfhub-archive (#23979)** (ee69654)
- **cws-instrumentation: push missing rc and versioned tags (#24002)** (01e2c09)
- **Adding is_trace_root tag for APM Stats (#23302)** (c2a48f5)
- **[CONTINT-3931] Clean SBOM cache enabled option (#23710)** (1030788)
- **[lint-unknown-licenses] Verify unknown licenses in lint-licenses task (#23934)** (3a5fbf6)
- **[CONTINT-3750] Create a dedicate group allowed to run the secret backends (#23769)** (c7525d3)
- **[CONTINT-3546] Check dd-agent UID and document doc update needed (#23764)** (d45b7ec)
- **Allow users to skip provisioning microvms (#23976)** (2f50a43)
- **Disable Oracle 7 (#23997)** (d08bfb2)
- **[CWS-1348] Persist profile when a workload stops (#23914)** (cd2c0b3)
- **Only provide dummy responses to List all external metrics (#23288)** (10242a9)
- **Create Windows-specific provisioner (#23744)** (acb2f5a)
- **Split remote updater build & packaging (#23968)** (4cf3214)
- **[CWS] reduce partial allocation when the field is not used in the rule (#23745)** (22ab468)
- **[clusteragent/admission/sidecar] Simplify TestApplyProviderOverrides (#23967)** (8187752)
- **latest_stable updated (#23991)** (caa6000)
- **[CI] Remove PyYAML override in winbuildscripts (#23969)** (f8bb44b)
- **update slack/jira mapping location comment (#23990)** (1b28be4)
- **Fall back to multiple agent binaries (#22866) (#23954)** (885f82b)
- **usm: kafka: Allow all ASCII printable chars in client id (#23955)** (c14860f)
- **[create-vm-message] Added changes condition (#23909)** (5ea8deb)
- **[auto-team-labels] Added toml requirements (#23958)** (8ac53d3)
- **[ASCII-1329] Remove some unknown config keys warning logs (#23970)** (894b984)
- **Create an e2e test for non-core agent config-refresh on Linux (#23942)** (ae73151)
- **Revert "include CI_PIPELINE_ID in s3 cp filter (#23896)" (#23980)** (11dd582)
- **skip pipeline artifact name match if pipeline is not included in the artifact name (#23981)** (4deb112)
- **Renaming Oracle check (DBMON-3594) (#23812)** (37d3a47)
- **Bump docker/docker to v25.0.5 (#23978)** (3db4093)
- **Set process comm at startup (#23666)** (bd440b7)
- **bump security agent policies to v0.53.0 (#23975)** (3d201a5)
- **cronjob status: Collect LastSuccessfulTime (#23912)** (448cac2)
- **Deploy our OCI artifact to a private registry (#23931)** (108a811)
- **enable language detection components only if both reporting and language detection are enabled (#23621)** (ce30c0f)
- **[clusteragent/admission/sidecar] Set ShareProcessNamespace=true on EKS Fargate (#23963)** (7deabc0)

### Chore
- **CI: packaging: improve datadog-package tool fetching (#23987)** (4facabe)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/DataDog/datadog-agent?utm_source=github-action)._