Vlad/315 lib injection ssi

[vlad-scherbich]

prev: #19260 | next: #19259

Summary

SSI allow-list + wheel download for 3.15 auto-instrumentation (GAP-01). Closes #17813.

Test plan

• lib-injection CI green

[pr-commenter]

Benchmarks

Benchmark execution time: 2026-07-23 14:12:13

Comparing candidate commit fc38b6e in PR branch vlad/315-lib-injection-ssi with baseline commit 528a085 in branch main.

Found 0 performance improvements and 4 performance regressions! Performance is the same for 614 metrics, 10 unstable metrics.

scenario:iastaspects-index_aspect

• 🟥 execution_time [+14.996µs; +17.808µs] or [+10.997%; +13.060%]

scenario:iastaspects-title_aspect

• 🟥 execution_time [+27.838µs; +34.463µs] or [+8.347%; +10.333%]

scenario:iastaspectsospath-ospathbasename_aspect

• 🟥 execution_time [+64.680µs; +72.345µs] or [+15.628%; +17.480%]

scenario:telemetryaddmetric-1-count-metric-1-times

• 🟥 execution_time [+225.836ns; +270.294ns] or [+10.641%; +12.736%]

[cit-pr-commenter-54b7da]

Codeowners resolved as

lib-injection/dl_wheels.py                                              @DataDog/apm-core-python
lib-injection/sources/sitecustomize.py                                  @DataDog/apm-core-python

[cit-pr-commenter-54b7da]

Circular import analysis

⚠️ Existing circular imports

There are 33 circular imports that already exist on the base branch and have not been changed by this PR.

Show existing cycles (showing 5 of 33 shortest)

ddtrace.internal.datastreams -> ddtrace.internal.datastreams.google_cloud_pubsub -> ddtrace.internal.datastreams
ddtrace.internal.datastreams -> ddtrace.internal.datastreams.kombu -> ddtrace.internal.datastreams
ddtrace.internal.datastreams -> ddtrace.internal.datastreams.kafka -> ddtrace.internal.datastreams
ddtrace.internal.datastreams -> ddtrace.internal.datastreams.botocore -> ddtrace.internal.datastreams
ddtrace.internal.core -> ddtrace._trace.span -> ddtrace.internal.core

To see all cycles, download the cycles-base.json and cycles-pr.json artifacts from this CI job and run:

uv run --script scripts/import-analysis/cycles.py compare cycles-base.json cycles-pr.json