Bump java-profiler (ddprof) to 1.47.0

[rkennke]

What Does This Do

Bump java-profiler (ddprof) from 1.46.0 to 1.47.0 in gradle/libs.versions.toml, and regenerate dd-java-agent/ddprof-lib/gradle.lockfile accordingly. Also raise metadata/agent-jar-checks.properties's jar.size.budget, since the updated native library grew the shadow jar past the previous limit.

Motivation

Brings in the all-native OTEL context write API (Phase 1), needed to continue #11899.

Additional Notes

Noticeable changes

• feat(context): all-native OTEL context write API — Phase 1 (PROF-15271) by @rkennke in feat(context): all-native OTEL context write API — Phase 1 (PROF-15271) java-profiler#631
• fix(profiler): guard line-number-table copy against stale jmethodID by @jbachorik in fix(profiler): guard line-number-table copy against stale jmethodID java-profiler#647
• fix: prevent duplicate trace_id after CallTraceHashTable expansion by @jbachorik in fix: prevent duplicate trace_id after CallTraceHashTable expansion java-profiler#659
• Fix native OOM from unbounded CallTraceHashTable expansion by @jbachorik in Fix native OOM from unbounded CallTraceHashTable expansion java-profiler#670

See full release notes

Jar size budget

The shadow jar grew past the previous jar.size.budget, so this PR raises it (~33.02 MiB). The growth is almost entirely from the new all-native context API added in java-profiler#631: ddprof.jar gained a new ContextValueCache class and an expanded JavaProfiler (+16.7 KB), and the native libraries gained the new JNI entry points in javaApi.cpp (+~4 KB each on x64/arm64).

This is expected to be temporary. Per java-profiler's migration design note (§7, "expand → migrate → contract"), this release is the additive "expand" phase — the new API lands alongside the old DirectByteBuffer/CarrierThreadLocal-based context path. Once dd-trace-java fully migrates to the native API (#11899) and java-profiler ships its "contract" release, the old OtelContextStorage/BufferWriter*/most of ThreadContext (~1,200 lines, Java-side only) get deleted, which should shrink ddprof.jar again — likely below the pre-1.47.0 baseline. The native .so growth from this release is expected to stay, though, since it's the new production code path rather than scaffolding, and the old DBB path's native footprint was minimal to begin with.

Contributor Checklist

• Format the title according to the contribution guidelines
• Assign the type: and (comp: or inst:) labels in addition to any other useful labels
• Avoid using close, fix, or any linking keywords when referencing an issue
  Use solves instead, and assign the PR milestone to the issue
• Update the CODEOWNERS file on source file addition, migration, or deletion
• Update public documentation with any new configuration flags or behaviors
• Add your completed PR to the merge queue by commenting /merge.

🤖 Generated with Claude Code

[datadog-prod-us1-3]

🎯 Code Coverage (details)
• Patch Coverage: 100.00%
• Overall Coverage: 57.54% (-0.01%)

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 3808810 | Docs | Datadog PR Page | Give us feedback!}

[datadog-prod-us1-3]

More details

The dependency bump is internally consistent: the version catalog and all locked ddprof configurations resolve to 1.47.0, while profiler API call sites are unchanged. Local Gradle execution was blocked before project evaluation because the pinned distribution could not be downloaded and the installed Gradle requires an unavailable Java 25 toolchain.

Was this helpful? React 👍 or 👎

_{Open Bits AI session}

_{🤖 Datadog Autotest · Commit 9f389fe · What is Autotest? · @DataDog review to ask questions · Any feedback? Reach out in #autotest}

[dd-octo-sts]

🟢 Java Benchmark SLOs — All performance SLOs passed

Suite	Status
Startup	🟢 pass

SLO thresholds are defined here based on automatically generated metrics. A warning is raised when results are within 5% of the threshold.

PR vs. master results

Scenario	Candidate	master	Δ (95% CI of mean)
startup:insecure-bank:iast:Agent	14.00 s	13.88 s	[+0.2%; +1.5%] (maybe worse)
startup:insecure-bank:tracing:Agent	12.87 s	12.98 s	[-1.5%; -0.2%] (maybe better)
startup:petclinic:appsec:Agent	16.71 s	16.12 s	[-0.8%; +8.1%] (no difference)
startup:petclinic:iast:Agent	16.23 s	16.82 s	[-7.6%; +0.6%] (no difference)
startup:petclinic:profiling:Agent	16.10 s	16.63 s	[-7.4%; +1.1%] (no difference)
startup:petclinic:sca:Agent	16.81 s	16.23 s	[-0.5%; +7.8%] (no difference)
startup:petclinic:tracing:Agent	16.10 s	16.20 s	[-1.6%; +0.4%] (no difference)

Commit: 38088105 · CI Pipeline · Benchmarking Platform UI

---

Load and DaCapo benchmarks can be triggered manually in the GitLab pipeline. Results will appear in the Benchmarking Platform UI after completion.

[dd-octo-sts]

/merge

[gh-worker-devflow-routing-ef8351]

View all feedbacks in Devflow UI.

2026-07-23 17:26:57 UTC ℹ️ Start processing command /merge

---

2026-07-23 17:27:01 UTC ℹ️ MergeQueue: pull request added to the queue

The expected merge time in master is approximately 1h (p90).

---

2026-07-23 18:26:39 UTC ℹ️ MergeQueue: This merge request was merged