Bump ddtrace from 1.13.4 to 2.8.5 in /requirements

[dependabot]

Bumps ddtrace from 1.13.4 to 2.8.5.

Release notes

Sourced from ddtrace's releases.

2.8.5

Known Issues

• Code Security: Security tracing for the builtins.open function is experimental and may not be stable. This aspect is not replaced by default.
• grpc: Tracing for the grpc.aio clients and servers is experimental and may not be stable. This integration is now disabled by default.

Bug Fixes

• fix(grpc): This fix a bug in the grpc.aio support specific to streaming responses.
• RemoteConfig: This fix resolves an issue where remote config did not work for the tracer when using an agent that would add a flare item to the remote config payload. With this fix, the tracer will now correctly pull out the lib_config we need from the payload in order to implement remote config changes properly.

2.8.4

Bug Fixes

• telemetry: This fix resolves an issue when using pytest + gevent where the telemetry writer was eagerly initialized by pytest entrypoints loading of our plugin causing a potential dead lock.

2.8.3

Bug Fixes

• Code Security: This fix solves an issue with fstrings where formatting was not applied to int parameters.
• logging: This fix resolves an issue where tracer.get_log_correlation_context() incorrectly returned a 128-bit trace_id even with DD_TRACE_128_BIT_TRACEID_LOGGING_ENABLED set to False (the default), breaking log correlation. It now returns a 64-bit trace_id.
• profiling: Fixes a defect where the deprecated path to the Datadog span type was used by the profiler.

2.8.2

Bug Fixes

• tracing: This fix resolves an issue where sampling rules were not matching correctly on float values that had a 0 decimal value. Sampling rules now evaluate such values as integers.

• langchain: This fix resolves an issue where the LangChain integration always attempted to patch LangChain partner
  libraries, even if they were not available.

• langchain: This fix resolves an issue where tracing Chain.invoke() instead of Chain.__call__() resulted in the an ArgumentError due to an argument name change for inputs between the two methods.

• langchain: This fix adds error handling for checking if a traced LLM or chat model is an OpenAI instance, as the langchain_community package does not allow automatic submodule importing.

• internal: This fix resolves an error regarding the remote config module with payloads missing a lib_config entry

• profiling: fix a bug that caused the HTTP exporter to crash when attempting to serialize tags.

• grpc: Resolves segfaults raised when grpc.aio interceptors are registered

• Code Security: Ensure that when tainting the headers of a Flask application, iterating over the headers (i.e., with headers.items()) does not duplicate them.

• pymongo: this resolves an issue where the library raised an error in pymongo.pool.validate_session

2.8.1

... (truncated)

Changelog

Sourced from ddtrace's changelog.

2.8.5

Known Issues

• Code Security: Security tracing for the builtins.open function is experimental and may not be stable. This aspect is not replaced by default.
• grpc: Tracing for the grpc.aio clients and servers is experimental and may not be stable. This integration is now disabled by default.

Bug Fixes

• fix(grpc): This fix a bug in the grpc.aio support specific to streaming responses.
• RemoteConfig: This fix resolves an issue where remote config did not work for the tracer when using an agent that would add a flare item to the remote config payload. With this fix, the tracer will now correctly pull out the lib_config we need from the payload in order to implement remote config changes properly.

---

2.8.4

Bug Fixes

• telemetry: This fix resolves an issue when using pytest + gevent where the telemetry writer was eager initialized by pytest entrypoints loading of our plugin causing a potential dead lock.

---

2.7.10

Bug Fixes

• Code Security: This fix solves an issue with fstrings where formatting was not applied to int parameters
• logging: This fix resolves an issue where tracer.get_log_correlation_context() incorrectly returned a 128-bit trace_id even with DD_TRACE_128_BIT_TRACEID_LOGGING_ENABLED set to False (the default), breaking log correlation. It now returns a 64-bit trace_id.
• profiling: Fixes a defect where the deprecated path to the Datadog span type was used by the profiler.

---

2.8.3

Bug Fixes

• Code Security: This fix solves an issue with fstrings where formatting was not applied to int parameters
• logging: This fix resolves an issue where tracer.get_log_correlation_context() incorrectly returned a 128-bit trace_id even with DD_TRACE_128_BIT_TRACEID_LOGGING_ENABLED set to False (the default), breaking log correlation. It now returns a 64-bit trace_id.
• profiling: Fixes a defect where the deprecated path to the Datadog span type was used by the profiler.

---

2.6.12

... (truncated)

Commits

• b31181a fix(iast): empty insecure cookies [backport 2.8] (#9295)
• b831c3f fix(asm): workaround disabling builtins.open aspects [backport 2.8] (#9252)
• 5866dad perf(iast): improve performance for patching decision (#9265) (#9292)
• 98eb943 fix(iast): ensure no side-effects in IAST encode aspect [backport 2.8] (#9258)
• 3d7ede7 fix(grpc): fix segfault with grpc.aio streaming responses [backport 2.8] (#9274)
• ab9ca08 fix(remoteconfig): fix remoteconfig when flare data in payload [backport 2.8]...
• b93d994 fix(grpc): disable aio support [backport 2.8] (#9200)
• 9f0aa46 chore(profiling): pin version of echion dependency [backport 2.8] (#9178)
• a5ee561 fix: pytest deadlock when using gevent [backport 2.8] (#9166)
• d8a5718 ci: temporarily disable vertica test suite (#9110) (#9117)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #34749.