fix(deps): update module gopkg.in/datadog/dd-trace-go.v1 to v2

[self-hosted-renovatebot]

This PR contains the following updates:

Package	Change	Age	Confidence
gopkg.in/DataDog/dd-trace-go.v1	v1.71.1 → v2.9.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[self-hosted-renovatebot]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: gopkg.in/DataDog/dd-trace-go.v2@v2.9.2: parsing go.mod:
	module declares its path as: github.com/DataDog/dd-trace-go/v2
	        but was required as: gopkg.in/DataDog/dd-trace-go.v2

[gitops-autobot-reviewer-cresta]

Auto-approved: PR created by known bot user @self-hosted-renovatebot[bot]

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch renovate/gopkg.in-datadog-dd-trace-go.v1-2.x

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[cursor]

PR Summary

High Risk
Major version bump of the Datadog tracing library with a new module path; existing v1 imports are unchanged, so this can break builds and APM instrumentation until code is migrated.

Overview
Bumps the Datadog APM client from gopkg.in/DataDog/dd-trace-go.v1 (v1.71.1) to gopkg.in/DataDog/dd-trace-go.v2 (v2.9.2).

This is a major module-path change. Application imports in internal/gitdb/tracing/datadog still reference the v1 paths (contrib/gorilla/mux, contrib/net/http, ddtrace/tracer), so those will need a matching migration for the upgrade to build and run correctly.

^{Reviewed by Cursor Bugbot for commit 4388657. Bugbot is set up for automated code reviews on this repo. Configure here.}

[gitops-autobot-reviewer-cresta]

Codeowner Check

Status: ❌ Missing codeowner approvals

The following rules are missing approval. Request a review from the listed codeowners:

Pattern	# Files	Owners to approve
go.*	1	@cresta/infrastructure-squad

Please request a review from the listed codeowners to satisfy this check.

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: Module uses deprecated gopkg.in path for v2
  • Updated go.mod to use the official v2 module path github.com/DataDog/dd-trace-go/v2 instead of the deprecated gopkg.in path.

Or push these changes by commenting:

@cursor push 420cb1758f

Preview (420cb1758f)

diff --git a/go.mod b/go.mod
--- a/go.mod
+++ b/go.mod
@@ -15,7 +15,7 @@
 	github.com/signalfx/golib/v3 v3.4.2
 	github.com/stretchr/testify v1.11.1
 	go.uber.org/zap v1.27.1
-	gopkg.in/DataDog/dd-trace-go.v2 v2.7.0
+	github.com/DataDog/dd-trace-go/v2 v2.7.0
 )
 
 require (

[cursor]

Module uses deprecated gopkg.in path for v2

Medium Severity

The go.mod declares gopkg.in/DataDog/dd-trace-go.v2 but DataDog's official v2 module path is github.com/DataDog/dd-trace-go/v2. Using the legacy gopkg.in domain creates inconsistency with official documentation, makes the codebase non-standard, and could cause confusion since the migration guide and all examples use the GitHub path. This also means import statements must use the deprecated gopkg.in path to match the module declaration.