[gh-worker-campaigns-3e9aa4]

Summary: Security update — 1 package upgraded (MINOR changes included)

Manifests changed:

• local_tests/golang/go.mod (go)

---

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.

---

Updates

Package	From	To	Type	Dep Type	Vulnerabilities Fixed
gopkg.in/DataDog/dd-trace-go.v1	v1.43.1	v1.74.8	minor	Direct	-

---

Security Details

⚠️ Dependencies that have Reached EOL (1)

Dependency	Unsafe Version	EOL Date	New Version	Path	Case
gopkg.in/DataDog/dd-trace-go.v1	v1.43.1	Oct 27, 2025	v1.74.8	local_tests/golang/go.mod	-

---

Review Checklist

Standard review:

• Review changes for compatibility with your code
• Check for breaking changes in release notes
• Run tests locally or wait for CI
• Approve and merge this PR

---

Update Mode: first_party_upgrades

🤖 Generated by DataDog Automated Dependency Management System

[datadog-datadog-prod-us1-2]

✨ Unblock PR with BitsAI

❌ Errors

Your PR has failed checks. Please review the issues below and take necessary action before merging.

🚦 1 Pipeline job failed

DataDog/datadog-lambda-extension | e2e-test-status (amd64) — 🔧 Needs a code fix, caused by this PR

View more details · View in GitLab

Useful? React with 👍 / 👎

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 803a44f | Docs | View more details | Give us feedback!}

[dd-prapprover-prod-77c48c]

PRApprover will approve and merge this PR, FAQ, #dx-source-code-management

🛠️ PRApproval Status

• ✅ PR is eligible for auto-approval by rule dependency-management-version-updater - 2026-10-19T19:36:01Z
• ✅ CI tests passed - 2026-10-19T19:36:09Z
• ✅ Approved (commit: 803a44f) - 2026-10-19T19:36:13Z
• ✅ Merge Started
• ⬜ Merged

➡️ Current phase: ⏳ Merge via MergeQueue is still pending...

[dd-prapprover-prod-77c48c]

This PR has been automatically approved by the DD PR Approver bot.

[Copilot]

🔵 Needs a closer look

Compatibility of the substantial tracer upgrade with the existing Lambda wrapper and local runtime remains unverified.

0 open findings

What changed in this PR

Updates the tracer dependency used by the extension’s local Go Lambda tests to address the reported end-of-life dependency.

Changes:

• Upgrades dd-trace-go.v1 from v1.43.1 to v1.74.8.
• Refreshes transitive dependencies and checksums.

File	Description
local_tests/​golang/​go.sum	Updates checksums for the revised dependency graph.
local_tests/​golang/​go.mod	Upgrades the tracer and associated indirect dependencies.

🧠 Review effort: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[gh-worker-campaigns-3e9aa4]

Auto-rebase complete

Branch is up to date with main — rebased onto ec9efa9.

---

_{Auto-Rebase · Add no-auto-rebase to opt out}

[dd-prapprover-prod-77c48c]

This PR has been automatically approved by the DD PR Approver bot.