Update dependency ddev to v19

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
ddev	17.0.1 → 19.1.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

DataDog/integrations-core (ddev)

v19.1.0

Compare Source

Added:

• Open a datadog-agent PR pinning INTEGRATIONS_CORE_VERSION to the tagged commit when tagging an Agent release branch. The PR targets the Agent main for the first RC of a milestone and the matching Agent release branch for every other tag, and is opened before the tag is pushed: PR creation retries on transient HTTP errors and, if it keeps failing, the command aborts without pushing the tag, printing the gh pr create command to open it manually; pass --skip-pr-creation to create and push the tag without the PR. (#​25116)

Fixed:

• Include actionable QA label guidance in failed validation reports. (#​25262)

v19.0.0

Compare Source

Removed:

• Remove the --dependency-sizes option and GitHub artifact fetching from ddev size status. Fall back to the other wheels storage tier when the preferred one (set via --wheels-storage) does not have a wheel. (#​23831)

Added:

• Add deterministic Dispatcher test batch planning, with each job carrying the Python version it runs under and the Agent image its E2E tests run against. The internal max_jobs_per_batch option moves from [dispatcher] to [dispatcher.batching]. (#​24687)
• Report the type of each changed file from GitRepository.changed_files, and allow comparing two refs. (#​24776)
• Add the Dispatcher pull-request updater task, which renders each progress snapshot into one PR comment, falls back to smaller comment tiers when GitHub refuses the body, and publishes the final report to the GitHub Actions run summary. (#​24822)
• Include the target branch in backport PR titles ([Backport <branch>] <subject>). (#​24868)
• Include a comment on the source PR listing each failed base when a backport fails. (#​24872)
• Add --to-dd-org and --to-dd-key to ddev size diff to send per-module size deltas to Datadog as datadog.agent_integrations.size_diff, and report the deltas as a comment on pull requests. (#​24895)
• Add the ddev ci dispatch-tests command and the Dispatcher that runs a batching plan. (#​24935)
• Add a retry strategy to the async GitHub client for failures that are not rate limiting. (#​24963)
• Report a cancelled Dispatcher run on its pull request and cancel the workflow runs it dispatched. (#​25042)
• Add a --minimum-base-package option to ddev ci dispatch-tests that plans a minimum-base-package job alongside each test job. (#​25074)
• Add a shutdown mode to the async GitHub client that caps request timeouts and stops retrying. (#​25076)
• Tell processors when a stop is requested so they can shorten work in flight. (#​25078)
• Add pull request file endpoints to the async GitHub client. (#​25082)
• Handle the shutdown signals in the event bus so every orchestrator winds down cleanly. (#​25088)
• Add --pytest-args to ddev ci dispatch-tests, forwarded to each batch workflow. (#​25112)
• Add a shared monitoring runtime for Dispatcher context, console logging, and metric sinks. (#​25159)
• Add structured Datadog log delivery for Dispatcher operations. (#​25176)
• Add a buffered Datadog log handler to the monitoring runtime. (#​25179)
• Export the resolved Dispatcher run to a manifest that a later invocation can reuse for planning. (#​25190)
• Show a per-platform totals table and pivot the per-module table by platform in the ddev size diff markdown output and PR comment. (#​25195)
• Allow ddev validate all to write its formatted pull request comment to a file. (#​25243)

Fixed:

• Speed up package installs in E2E start_commands by pointing the Agent container's apt mirror at the generic Ubuntu archive instead of a region-pinned mirror. (#​24733)
• Rename TaskPullRequestUpdater to TaskRunReporter and PullRequestUpdaterOptions to RunReporterOptions, since the task also reports on runs that have no pull request. (#​24931)
• Bump stamina from 23.2.0 to 26.1.0. (#​24960)
• Fix a message submitted from a worker thread being lost, leaving the event bus running until its timeout. (#​24962)
• Wait for sync processors to finish and retire the bus thread pool when the run ends. (#​24978)
• Abandon a batch's gathering when the event bus is shutting down. (#​24980)
• Ignore CI targets and target environments whose names contain characters outside the set used by real integrations, so that a directory name or hatch.toml matrix value taken from a pull request cannot inject shell commands or $GITHUB_ENV entries into CI jobs. (#​24991)
• Report a message dropped and a processor skipped once the bus is stopping. (#​25002)
• Send check-run status and conclusion as the enums the GitHub API declares. (#​25046)
• Stop passing --explicit-package-bases when type checking ddev, so mypy resolves first-party imports instead of silently treating them as Any. (#​25051)
• Draw the Dispatcher pull-request comment progress bar with pixel images instead of block characters. (#​25083)
• Resolve a pull request's changed files through the GitHub API instead of local git, and split the pull request endpoints into the two schemas GitHub returns, so a listed pull request can no longer stand in for a full one. (#​25095)
• Send a batch's job list to the test workflow as gzip and base64. (#​25096)
• Reject a per_page outside GitHub's accepted range of 1..100 in the async GitHub client. (#​25100)
• ddev ci dispatch-tests sends each batch the commit and branch its results belong to and whether the tested head lives in a fork, no longer opens the batch's check run itself, and rejects a plan naming an unknown runner. (#​25115)
• Discover Dispatcher test environments from hatch.toml without executing Hatch. (#​25129)
• Resolve Dispatcher pull requests from workflow head metadata and preserve expected-head validation. (#​25133)
• Mark Dispatcher pull request reports as informational during shadow mode. (#​25136)
• Retry interrupted license archive downloads and make license validation tests independent of live HTTP requests. (#​25142)
• Include short help in ddev size so it fits in the terminal (#​25146)
• Give Dispatcher artifact requests a configurable API allowance separate from polling while sharing GitHub backpressure. (#​25148)
• Report Dispatcher run links and job progress before artifact collection, using a separate API allowance for collection. (#​25150)
• Accept pending GitHub Actions step statuses and unify Dispatcher shutdown reporting and cleanup, preserving original failures and secondary diagnostics. (#​25156)
• Stop passing hatch's verbosity to the uv pip install commands ddev injects, so CI environment creation no longer dumps uv's resolver DEBUG output. (#​25170)
• Improve Dispatcher test job names and CI Visibility tags. (#​25175)
• Link running Dispatcher comments to their workflow run. (#​25178)
• Order the disk usage diff details table by largest size change first instead of alphabetically. (#​25206)
• Fix Dispatcher validation and clarify resolved run identity fields. (#​25220)
• Require a tests directory for ddev test to run pytest for an integration, while lint, formatting, and environment listing remain available with only a hatch.toml. (#​25222)
• Prevent repository instruction files from selecting Dispatcher test targets. (#​25227)
• Define a shared Dispatcher monitoring field contract for logs, test tags, and metrics. (#​25235)
• Propagate Dispatcher monitoring attributes to test batch jobs. (#​25238)
• Improve Test Batch summaries with links to their Dispatcher context. (#​25239)
• Fix Dispatcher reports that showed queued batches after jobs started. (#​25242)

v18.0.0

Compare Source

Changed:

• Drop the [tool.black] block from ddev/pyproject.toml and the matching code path in ddev meta scripts update-python-config (formatting is fully handled by ruff). (#​23588)
• ddev release branch tag now accepts --release/-r, --ref, --rc N, and --yes/-y, and prompts to confirm when run on a release branch without --release. Existing non-interactive callers that piped a single y need to pass --yes or one extra confirmation. (#​23860)
• Bump datadog-checks-dev pin to >=39.0,<41 to track the v39 release. (#​24110)
• Bump datadog-checks-dev pin to >=40.0,<42 to track the v40 release. (#​24842)

Added:

• Add TaskTestRunner processor for the CI dispatcher. (#​23518)
• Legacy migration: validate codeowners is now implemented natively in ddev (was previously delegated to datadog_checks_dev). (#​23651)
• Add ddev release test-agent command that dispatches the Linux and Windows Agent test workflows against a release branch or tag. (#​23722)
• Add an AI configuration block for ddev. (#​23894)
• Add TaskTestGatherer processor and a JUnit parsing utility for the CI dispatcher. (#​23938)
• Add GitHub API rate limiting to the Dispatcher. (#​24179)
• Pass capabilities from e2e metadata to the Agent container. (#​24238)
• Add support for the --env option to ddev env agent to pass environment variables. (#​24289)
• Support running EventBusOrchestrator unbounded by passing max_timeout=None. (#​24314)
• release port-commit gains a --from-pr <number> mode that backports a merged PR to every backport/<base> label on it (deriving the commit and target branches from the PR and skipping bases already backported), and now resets .deps/ alongside .in-toto so regenerated dependency lockfiles are taken from the target branch. (#​24470)
• Add a Kubernetes Agent interface for running the Agent in Kind-based E2E test clusters, alongside the existing Docker and Vagrant interfaces. (#​24639)
• Add investigation as a valid metric unit name. (#​24696)
• Adds the batch and job progress aggregate (DispatcherProgress) to the test gatherer. (#​24774)

Fixed:

• Anchor in-core editable installs in the hatch environment collector to the project root so the post-install command works on hatch 1.10+ when invoked from a subdirectory of the integration. The generated install, lint, and typing commands now shell-quote those absolute paths so checkouts under a path containing whitespace work on both POSIX and Windows. (#​23765)
• Bundle per-job correlation into the CI dispatcher's BatchFinished via BatchJobResult. (#​24253)
• Fix the EventBusOrchestrator overwriting a task's timeout cancellation reason with a bare cancel during shutdown cleanup. (#​24315)
• Retype async GitHub client response-model enum fields (PR state, workflow-job and check-run status/conclusion) as StrEnums. (#​24316)
• Add an internal DispatcherConfig model for reading Dispatcher settings from the repo config. (#​24434)
• Show actionable guidance when GitHub rejects ddev's configured token. (#​24502)
• Bump requests to 2.34.2 to match datadog-checks-base. (#​24534)
• Read the repository worktrees once per lookup instead of once per checked path. (#​24809)
• Bump the pinned embedded Python version from 3.13.14 to 3.13.15. (#​24828)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 6am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cit-pr-commenter-54b7da]

evalya-impact-summary

evalya impact analysis

Impact analysis: 0 selected, 0 skipped (of 0 test tasks)
Publish tasks:   2 (always emitted)
Diff (1 file):
  .github/workflows/release-dispatch.yml

Debug a specific task: evalya plan impact --path <path> --task <task>

Learn more about CI impact filtering

[dd-octo-sts]

Validation Report

All 21 validations passed.

Show details

Validation	Description	Status
agent-reqs	Verify check versions match the Agent requirements file	✅
ci	Validate CI configuration and code coverage settings	✅
codeowners	Validate every integration has a CODEOWNERS entry	✅
config	Validate default configuration files against spec.yaml	✅
dep	Verify dependency pins are consistent and Agent-compatible	✅
http	Validate integrations use the HTTP wrapper correctly	✅
imports	Validate check imports do not use deprecated modules	✅
integration-style	Validate check code style conventions	✅
jmx-metrics	Validate JMX metrics definition files and config	✅
labeler	Validate PR labeler config matches integration directories	✅
legacy-signature	Validate no integration uses the legacy Agent check signature	✅
license-headers	Validate Python files have proper license headers	✅
licenses	Validate third-party license attribution list	✅
metadata	Validate metadata.csv metric definitions	✅
models	Validate configuration data models match spec.yaml	✅
openmetrics	Validate OpenMetrics integrations disable the metric limit	✅
package	Validate Python package metadata and naming	✅
qa-label	Validate the pull request declares whether it needs QA for the next Agent release	✅
readmes	Validate README files have required sections	✅
saved-views	Validate saved view JSON file structure and fields	✅
version	Validate version consistency between package and changelog	✅

View full run