Parse __eh_frame DWARF info on macOS for per-PC frame descriptions

.adms/python/gitlab.yaml

@@ -0,0 +1,9 @@
+# File generated and managed by #dependency-management.
+# Changes are subject to overwriting.
+# DO NOT EDIT
+
+variables:
+    PIP_INDEX_URL: "https://depot-read-api-python.us1.ddbuild.io/magicmirror/magicmirror/@current/simple"
+    PIP_EXTRA_INDEX_URL: "https://depot-read-api-python.us1.ddbuild.io/magicmirror/testing/@current/simple"
+    UV_INDEX: "https://depot-read-api-python.us1.ddbuild.io/magicmirror/magicmirror/@current/simple https://depot-read-api-python.us1.ddbuild.io/magicmirror/testing/@current/simple"
+    UV_DEFAULT_INDEX: "https://depot-read-api-python.us1.ddbuild.io/magicmirror/magicmirror/@current/simple"

.github/chainguard/async-profiler-build.ci.sts.yaml

@@ -1,10 +1,10 @@
 # Allow async-profiler-build CI to publish to gh-pages
 issuer: https://gitlab.ddbuild.io
 
-subject_pattern: "project_path:DataDog/apm-reliability/async-profiler-build:ref_type:branch:ref:.*"
+subject_pattern: "project_path:DataDog/java-profiler:ref_type:branch:ref:.*"
 
 claim_pattern:
-  project_path: "DataDog/apm-reliability/async-profiler-build"
+  project_path: "DataDog/java-profiler"
   ref_type: "branch"
   ref: ".*"
 

.github/chainguard/gh-pages.sts.yaml

@@ -0,0 +1,26 @@
+# Octo-STS Trust Policy for GitHub Pages Publishing
+# This policy allows GitLab CI to push integration test reports to gh-pages branch
+#
+# Trust Policy Location: .github/chainguard/gh-pages.sts.yaml
+# Referenced by: scripts/get-github-token-via-octo-sts.sh (OCTO_STS_POLICY=gh-pages)
+#
+# How it works:
+# 1. GitLab CI generates OIDC token with issuer: https://gitlab.ddbuild.io
+# 2. Token includes claims: project_path, ref, namespace_path, etc.
+# 3. Octo-STS validates token against this policy
+# 4. If valid, Octo-STS returns short-lived GitHub token with specified permissions
+
+# GitLab OIDC issuer
+issuer: https://gitlab.ddbuild.io
+
+# Match GitLab CI jobs from any branch (needed for PR comments)
+# GitLab token includes: project_path=DataDog/java-profiler, ref=<branch>
+subject_pattern: project_path:DataDog/java-profiler:ref_type:branch:ref:.*
+
+# GitHub API permissions for the returned token
+# contents:write - Required to push to gh-pages branch
+permissions:
+  contents: write
+
+# Token lifetime (default: 1 hour)
+# Short-lived tokens reduce security risk

.github/chainguard/update-images.sts.yaml

@@ -0,0 +1,17 @@
+# Octo-STS Trust Policy for Image Update PRs
+#
+# Allows the GitLab CI check-image-updates and rebuild-images-pr jobs to push
+# branches and create pull requests for CI image reference updates.
+#
+# Referenced by: scripts/create-image-update-pr.sh (OCTO_STS_POLICY=update-images)
+
+# GitLab OIDC issuer
+issuer: https://gitlab.ddbuild.io
+
+# Match GitLab CI jobs from the async-profiler-build project on any branch
+subject_pattern: project_path:DataDog/java-profiler:ref_type:branch:ref:.*
+
+# GitHub API permissions
+permissions:
+  contents: write
+  pull_requests: write

.github/dependabot.yml

@@ -10,6 +10,7 @@ updates:
     labels:
       - "dependencies"
       - "no-release-notes"
+      - "no-review"
     ignore:
       - dependency-name: "org.junit-pioneer:junit-pioneer"
         versions: [">=2.0.0"]
@@ -31,6 +32,7 @@ updates:
     labels:
       - "dependencies"
       - "no-release-notes"
+      - "no-review"
     groups:
       gradle-minor:
         update-types:
@@ -49,5 +51,6 @@ updates:
     labels:
       - "dependencies"
       - "no-release-notes"
+      - "no-review"
     cooldown:
       default-days: 2

.github/workflows/approve-trivial.yml

@@ -11,7 +11,7 @@ jobs:
     permissions:
       id-token: write # Needed to federate tokens
     steps:
-      - uses: DataDog/dd-octo-sts-action@acaa02eee7e3bb0839e4272dacb37b8f3b58ba80 # v1.0.3
+      - uses: DataDog/dd-octo-sts-action@96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a # v1.0.4
         id: octo-sts
         with:
           scope: DataDog/java-profiler

.github/workflows/cache_java.yml

@@ -68,7 +68,7 @@ jobs:
       sdkman_path: ${{ steps.export-path.outputs.sdkman_path }}
     steps:
       - name: Cache SDKMan! AMD64
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: sdkman
           key: sdkman-amd64-${{ github.run_id }}
@@ -109,7 +109,7 @@ jobs:
       sdkman_path: ${{ steps.export-path.outputs.sdkman_path }}
     steps:
       - name: Cache SDKMan! AARCH64
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: sdkman
           key: sdkman-aarch64-${{ github.run_id }}
@@ -154,7 +154,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Try restore cache JDK ${{ matrix.java_variant }}
         id: cache-jdk
-        uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache/restore@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: |
             ${{ env.JDKS_DIR }}/jdk${{ matrix.java_variant }}
@@ -193,7 +193,7 @@ jobs:
 
       - name: Save JDK ${{ matrix.java_variant }} cache
         if: steps.check-cache.outputs.cache-hit != 'true'
-        uses: actions/cache/save@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache/save@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: |
             ${{ env.JDKS_DIR }}/jdk${{ matrix.java_variant }}
@@ -217,7 +217,7 @@ jobs:
           apk update && apk add curl zip unzip bash tar
       - name: Cache JDK ${{ matrix.java_variant }}
         id: cache-jdk
-        uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache/restore@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: |
             ${{ env.JDKS_DIR }}/jdk${{ matrix.java_variant }}
@@ -243,7 +243,7 @@ jobs:
 
       - name: Save JDK ${{ matrix.java_variant }} cache
         if: steps.check-cache.outputs.cache-hit != 'true'
-        uses: actions/cache/save@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache/save@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: |
             ${{ env.JDKS_DIR }}/jdk${{ matrix.java_variant }}
@@ -265,7 +265,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Cache JDK ${{ matrix.java_variant }}
         id: cache-jdk
-        uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache/restore@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: |
             ${{ env.JDKS_DIR }}/jdk${{ matrix.java_variant }}
@@ -303,7 +303,7 @@ jobs:
 
       - name: Save JDK ${{ matrix.java_variant }} cache
         if: steps.check-cache.outputs.cache-hit != 'true'
-        uses: actions/cache/save@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache/save@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: |
             ${{ env.JDKS_DIR }}/jdk${{ matrix.java_variant }}
@@ -326,7 +326,7 @@ jobs:
           sudo apt update && sudo apt install -y curl zip unzip bash tar
       - name: Cache JDK ${{ matrix.java_variant }}
         id: cache-jdk
-        uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache/restore@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: |
             ${{ env.JDKS_DIR }}/jdk${{ matrix.java_variant }}
@@ -352,7 +352,7 @@ jobs:
 
       - name: Save JDK ${{ matrix.java_variant }} cache
         if: steps.check-cache.outputs.cache-hit != 'true'
-        uses: actions/cache/save@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache/save@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: |
             ${{ env.JDKS_DIR }}/jdk${{ matrix.java_variant }}

.github/workflows/ci.yml

@@ -63,15 +63,15 @@ jobs:
           sudo mv /usr/bin/clang-format-11 /usr/bin/clang-format
 
       - name: Cache Gradle Wrapper Binaries
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: ~/.gradle/wrapper/dists
           key: gradle-wrapper-${{ runner.os }}-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties') }}
           restore-keys: |
             gradle-wrapper-${{ runner.os }}-
 
       - name: Cache Gradle User Home
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: ~/.gradle/caches
           key: gradle-caches-${{ runner.os }}-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
@@ -101,15 +101,15 @@ jobs:
           sudo apt-get install -y curl zip unzip binutils
 
       - name: Cache Gradle Wrapper Binaries
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: ~/.gradle/wrapper/dists
           key: gradle-wrapper-${{ runner.os }}-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties') }}
           restore-keys: |
             gradle-wrapper-${{ runner.os }}-
 
       - name: Cache Gradle User Home
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: ~/.gradle/caches
           key: gradle-caches-${{ runner.os }}-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}

.github/workflows/codecheck.yml

@@ -75,7 +75,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
+        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -84,4 +84,4 @@ jobs:
           # queries: ./path/to/local/query, your-org/your-repo/queries@main
       - run: ./gradlew -x test assembleReleaseJar
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
+        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1

.github/workflows/dependabot-automerge.yml

@@ -11,7 +11,7 @@ jobs:
     permissions:
       id-token: write # Needed to federate tokens
     steps:
-      - uses: DataDog/dd-octo-sts-action@acaa02eee7e3bb0839e4272dacb37b8f3b58ba80 # v1.0.3
+      - uses: DataDog/dd-octo-sts-action@96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a # v1.0.4
         id: octo-sts
         with:
           scope: DataDog/java-profiler

.github/workflows/test_workflow.yml

@@ -56,15 +56,15 @@ jobs:
         if: steps.set_enabled.outputs.enabled == 'true'
       - name: Cache Gradle Wrapper Binaries
         if: steps.set_enabled.outputs.enabled == 'true'
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: ~/.gradle/wrapper/dists
           key: gradle-wrapper-${{ runner.os }}-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties') }}
           restore-keys: |
             gradle-wrapper-${{ runner.os }}-
       - name: Cache Gradle User Home
         if: steps.set_enabled.outputs.enabled == 'true'
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: ~/.gradle/caches
           key: gradle-caches-${{ runner.os }}-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
@@ -186,14 +186,14 @@ jobs:
           apk add musl-dbg
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Cache Gradle Wrapper Binaries
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: ~/.gradle/wrapper/dists
           key: gradle-wrapper-${{ runner.os }}-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties') }}
           restore-keys: |
             gradle-wrapper-${{ runner.os }}-
       - name: Cache Gradle User Home
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: ~/.gradle/caches
           key: gradle-caches-${{ runner.os }}-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
@@ -313,15 +313,15 @@ jobs:
         if: steps.set_enabled.outputs.enabled == 'true'
       - name: Cache Gradle Wrapper Binaries
         if: steps.set_enabled.outputs.enabled == 'true'
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: ~/.gradle/wrapper/dists
           key: gradle-wrapper-${{ runner.os }}-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties') }}
           restore-keys: |
             gradle-wrapper-${{ runner.os }}-
       - name: Cache Gradle User Home
         if: steps.set_enabled.outputs.enabled == 'true'
-        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
         with:
           path: ~/.gradle/caches
           key: gradle-caches-${{ runner.os }}-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
@@ -459,14 +459,14 @@ jobs:
      steps:
        - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        - name: Cache Gradle Wrapper Binaries
-         uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+         uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
          with:
            path: ~/.gradle/wrapper/dists
            key: gradle-wrapper-${{ runner.os }}-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties') }}
            restore-keys: |
              gradle-wrapper-${{ runner.os }}-
        - name: Cache Gradle User Home
-         uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+         uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
          with:
            path: ~/.gradle/caches
            key: gradle-caches-${{ runner.os }}-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}

.gitignore

@@ -2,6 +2,7 @@
 **/build_*/
 **/build-*/
 !build-logic/
+!.gitlab/build-deploy/
 /nbproject/
 /out/
 /.idea/