deps(example-python): bump ddtrace from 4.10.1 to 4.13.1 in /examples/single_service/src/python-project

[dependabot]

Bumps ddtrace from 4.10.1 to 4.13.1.

Release notes

Sourced from ddtrace's releases.

4.13.1

Bug Fixes

• snowflake: Fixes an issue where traced cursor calls fail when command is passed as a keyword argument to execute or executemany.
• profiling: A rare crash happening when using gevent has been fixed.

4.13.0

Upgrade Notes

• LLM Observability:
  • Deprecates the ml_app argument and DD_LLMOBS_ML_APP environment variable, which will be removed in the next major version of ddtrace. Use agent_service and DD_SERVICE instead to group traces belonging to a root agentic service (i.e. previously known as ML application).

Deprecation Notes

• AI Guard:
  • The public SDK has moved from the ddtrace.appsec.ai_guard package to the top-level ddtrace.aiguard package. Importing from ddtrace.appsec.ai_guard is deprecated, now emits a ddtrace.DDTraceDeprecationWarning, and will be removed in 5.0.0. As an alternative, update imports such as from ddtrace.appsec.ai_guard import AIGuardClient to from ddtrace.aiguard import AIGuardClient. The Strands Agents classes are the exception: import them from ddtrace.aiguard.integrations.strands (AIGuardStrandsPlugin and AIGuardStrandsHookProvider are not re-exported from the top-level package).
• pytest:
  • The legacy pytest plugin (ddtrace/contrib/internal/pytest) is deprecated and will be removed in ddtrace 5.0.0. This plugin is active only when DD_PYTEST_USE_NEW_PLUGIN is explicitly set to false or 0. The new pytest plugin (ddtrace/testing/internal/pytest) is already the default. To migrate, remove the DD_PYTEST_USE_NEW_PLUGIN environment variable from your configuration.
• LLM Observability:
  • The label parameter of LLMObs.get_prompt() and LLMObs.refresh_prompt() is deprecated. Set DD_ENV instead; the prompt version is resolved for that environment.
  • The ManagedPrompt.label property is deprecated. #19399

New Features

• Tracing:
  • Trace and span IDs are now generated more safely in AWS Lambda MicroVM environments, reducing the risk of duplicate IDs. No configuration is required. #18017
  • Adds OpenTelemetry thread-context publication on Linux, enabling compatible profiling tools to correlate samples with the active trace and span.
  • Adds DD_TRACE_OTEL_SEMANTICS_ENABLED to opt in to OpenTelemetry trace semantics for spans created through OpenTelemetry APIs and for OpenTelemetry Protocol (OTLP) trace export.
• AI Guard:
  • This introduces per-integration kill-switch environment variables, extending the existing DD_AI_GUARD_OPENAI_ENABLED switch to the Anthropic and LangChain auto-instrumentations: DD_AI_GUARD_ANTHROPIC_ENABLED and DD_AI_GUARD_LANGCHAIN_ENABLED (both true by default). Set either to false to disable AI Guard for that specific provider/framework without affecting other integrations or requiring a tracer version rollback.
• AAP:
  • Add support for the DD_APPSEC_AGENTIC_ONBOARDING environment variable. Its value is reported verbatim in configuration telemetry, letting Datadog record that a service was onboarded through the agentic onboarding solution.
• LLM Observability:
  • Added DD_BOTOCORE_BEDROCK_RESOLVE_INFERENCE_PROFILE (default false). When enabled, Bedrock calls using an application-inference-profile ARN as modelId resolve the underlying foundation model, so the span reports the real model and cost populates. Requires DD_LLMOBS_ENABLED=true and bedrock:GetInferenceProfile IAM permission.
  • This introduces capture of session metadata (session id, user id, and app name) from the Google ADK Session object on LLM Observability spans.
  • Spans generated under an agent are now automatically attributed to their nearest agent ancestor, both within a single process and across service boundaries. This enables the Datadog backend to group and display spans by the agent that produced them.
  • Added agent_service as a preferred alias for the ml_app argument across SDK methods (LLMObs.enable(...), span constructors, decorators, submit_evaluation(...), get_spans(...), and publish_evaluator(...)). When provided, agent_service takes precedence over the deprecated ml_app argument and over service. When neither agent_service nor ml_app is set, application identity continues to resolve from a propagated parent value, then DD_LLMOBS_ML_APP, then DD_SERVICE.
  • Auto-instrumented LLM integrations now automatically link Datadog Managed Prompts retrieved with LLMObs.get_prompt() and rendered with .format() to the resulting LLM span.
  • LLMObs.get_prompt() now resolves environment-scoped prompt versions and supports targeting for A/B testing. Set DD_ENV to select the version for that environment. The signature is now keyword-only after prompt_id and accepts targeting_key (sticky bucketing) and **attributes (targeting rules). #18127
  • Adds a version argument to LLMObs.get_prompt() for retrieving an exact prompt version. #19050
  • This introduces support for attaching images to messages on LLM spans. Input and output messages annotated via LLMObs.annotate now accept an optional image_parts field, a list of images each with a mime_type and either inline base64 content or an attachment_key. This lets images be collected and rendered in LLM Observability.
  • The OpenAI integration now automatically instruments the Realtime API (client.realtime.connect(...), both sync and async). Each conversation turn is captured as an llm span with the user and assistant transcripts, audio, token usage, and any tool calls (function and MCP), grouped per connection so the whole conversation is traced end to end. Realtime instrumentation can be disabled on its own, without affecting the rest of the OpenAI integration, by setting DD_OPENAI_REALTIME_ENABLED=false.
  • Adds prompt management methods to LLMObs for creating, updating, deleting, and listing prompts and prompt versions in the prompt registry. #18186
  • Adds the env_ids argument to prompt creation and version update methods, allowing prompt versions to be deployed to feature-flag environments.
  • session_id now propagates to following spans in a trace. If session_id is set explicitly on a span, this will take precedence over the inherited or propagated value.
  • mistralai: Adds support for tracing synchronous and asynchronous streaming chat completion calls using the mistralai client.
  • Adds support for submitting LLM Observability spans for synchronous and asynchronous streaming chat completion calls using the mistralai client.
• CI visibility:
  • Adds DD_CODE_COVERAGE_FLAGS to group and filter uploaded code coverage reports.
• Crashtracking:

... (truncated)

Commits

• e4ef706 ci: update one-pipeline to 1.3.1 (#19677)
• 2ca5b5b fix(profiling): avoid invalid thread ID dereference [backport 4.13] (#19668)
• e7fd3ff chore: bump version to 4.13.1 (#19660)
• b318e2d fix(snowflake): snowflake cursor now supports command keyword [backport 4.13]...
• 16c3b86 ci(macos): revert os macos tests as allowed to fail [backport 4.13] (#19536)
• 7ac6821 ci: don't use ci-utils image for publishing (#19624)
• 0e59697 fix(tracing): allow disabling OTel thread context publication [backport 4.13]...
• b99aef5 fix(iast): retain request data from stale async contexts [backport 4.13] (#19...
• fe611cd fix(tracing): invalid v0.5 payload with more than 65k tags [backport 4.13] (#...
• 92d2ae7 ci: use custom eventhubs emulator image [backport 4.13] (#19610)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, examples, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[datadog-datadog-prod-us1-2]

More details

The regenerated lock retains the same transitive versions, while ddtrace 4.13.1 explicitly supports Python 3.12 with pytest 9.0.3 and preserves the pytest activation and Bazel offline payload contracts used by this example.

Was this helpful? React 👍 or 👎

_{Open Bits AI session}

_{🤖 Datadog Autotest · Commit c16aa10 · What is Autotest? · @DataDog review to ask questions · Any feedback? Reach out in #autotest}