[emmettbutler]

dd-trace-py is moving its stacktrace C extension, which only IAST uses, from ddtrace/appsec/_shared/ to ddtrace/internal/security/. The layer already strips ddtrace/appsec/_shared for this reason. The new directory also contains modules AAP imports at startup, so only the compiled extension is removed, not the whole directory.

The existing ddtrace/appsec/_shared entry is kept so the layer still strips the extension from ddtrace versions released before the move. rm -rf ignores whichever path doesn't exist, so this works with both old and new ddtrace versions, and the merge order relative to the dd-trace-py change doesn't matter.

Testing Guidelines

The extension isn't imported at serverless startup; dd-trace-py's tests/internal/test_serverless.py asserts this at its new module path.

Additional Notes

Types of Changes

• Bug fix
• New feature
• Breaking change
• Misc (docs, refactoring, dependency upgrade, etc.)

Check all that apply

• This PR's description is comprehensive
• This PR contains breaking changes that are documented in the description
• This PR introduces new APIs or parameters that are documented and unlikely to change in the foreseeable future

🤖 Generated with Claude Code

[datadog-prod-us1-3]

More details

The removal glob targets the relocated compiled extension while preserving the security modules needed at startup. The retained legacy path also covers older ddtrace layouts; no reportable defect was identified.

Was this helpful? React 👍 or 👎

_{Open Bits AI session}

_{🤖 Bits Code Review · Commit e2c2dff}

[rithikanarayan]

@emmettbutler I am currently doing a release for this layer, please don't merge this until at least tomorrow afternoon (assuming this ddtrace change is going out in 4.17 or later, if it's already out pls let me know asap and I'll pause the release) 🙏

[rithikanarayan]

blocking til release is done, dm if the comment about ddtrace version this responds to is relevant

[datadog-prod-us1-3]

 

✨ Unblock PR with BitsAI

❌ Errors

Your PR has failed checks. Please review the issues below and take necessary action before merging.

🚦 1 Pipeline job failed

DataDog/datadog-lambda-python | e2e-test-status — 🔧 Needs a code fix, caused by this PR

View more details · View in GitLab

ℹ️ Info

🔄 Datadog auto-retried 1 job - 0 passed on retry

Useful? React with 👍 / 👎

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: e2c2dff | Docs | View more details | Give us feedback!}