Prepare for JEP 500 #9557

PerfectSlayer · 2025-09-18T10:41:28Z

What Does This Do

This PR adds methods that may mutate final fields to the list of ForbiddenAPIs. It also identifies current use-cases of these methods and whether or not the usage will need to be changed.

Motivation

Let's "Prepare to Make Final Mean Final". Starting in Java 26, mutating final fields will emit warnings, and in a future release, this behavior will result in exceptions.

Additional Notes

Contributor Checklist

Format the title according the contribution guidelines
Assign the type: and (comp: or inst:) labels in addition to any usefull labels
Don't use close, fix or any linking keywords when referencing an issue.
Use solves instead, and assign the PR milestone to the issue
Update the CODEOWNERS file on source file addition, move, or deletion
Update the public documentation in case of new configuration flag or behavior

Jira ticket: APMLP-594

pr-commenter · 2025-09-18T12:05:57Z

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	bbujon/jep500
git_commit_date	1769178816	1769203854
git_commit_sha	`567fb10`	`de63e70`
release_version	1.59.0-SNAPSHOT~567fb106f6	1.54.0-SNAPSHOT~de63e7031b

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1769205608	1769205608
ci_job_id	1374583500	1374583500
ci_pipeline_id	92611499	92611499
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-0-v782x3k1 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-0-v782x3k1 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module	Agent	Agent
parent	None	None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 54 metrics, 11 unstable metrics.

Startup time reports for petclinic

gantt
    title petclinic - global startup overhead: candidate=1.54.0-SNAPSHOT~de63e7031b, baseline=1.59.0-SNAPSHOT~567fb106f6

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.086 s) : 0, 1085722
Total [baseline] (10.8 s) : 0, 10799812
Agent [candidate] (1.09 s) : 0, 1090462
Total [candidate] (10.921 s) : 0, 10921019
section appsec
Agent [baseline] (1.267 s) : 0, 1266666
Total [baseline] (11.009 s) : 0, 11008669
Agent [candidate] (1.281 s) : 0, 1280846
Total [candidate] (11.15 s) : 0, 11150318
section iast
Agent [baseline] (1.225 s) : 0, 1225024
Total [baseline] (10.097 s) : 0, 10096982
Agent [candidate] (1.234 s) : 0, 1234129
Total [candidate] (11.258 s) : 0, 11257693
section profiling
Agent [baseline] (1.205 s) : 0, 1204914
Total [baseline] (10.869 s) : 0, 10868767
Agent [candidate] (1.207 s) : 0, 1206963
Total [candidate] (11.061 s) : 0, 11061303

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.086 s	-
Agent	appsec	1.267 s	180.944 ms (16.7%)
Agent	iast	1.225 s	139.301 ms (12.8%)
Agent	profiling	1.205 s	119.191 ms (11.0%)
Total	tracing	10.8 s	-
Total	appsec	11.009 s	208.857 ms (1.9%)
Total	iast	10.097 s	-702.83 ms (-6.5%)
Total	profiling	10.869 s	68.955 ms (0.6%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.09 s	-
Agent	appsec	1.281 s	190.384 ms (17.5%)
Agent	iast	1.234 s	143.667 ms (13.2%)
Agent	profiling	1.207 s	116.501 ms (10.7%)
Total	tracing	10.921 s	-
Total	appsec	11.15 s	229.299 ms (2.1%)
Total	iast	11.258 s	336.674 ms (3.1%)
Total	profiling	11.061 s	140.284 ms (1.3%)

gantt
    title petclinic - break down per module: candidate=1.54.0-SNAPSHOT~de63e7031b, baseline=1.59.0-SNAPSHOT~567fb106f6

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.184 ms) : 0, 1184
crashtracking [candidate] (1.184 ms) : 0, 1184
BytebuddyAgent [baseline] (651.788 ms) : 0, 651788
BytebuddyAgent [candidate] (654.632 ms) : 0, 654632
GlobalTracer [baseline] (283.361 ms) : 0, 283361
GlobalTracer [candidate] (284.467 ms) : 0, 284467
AppSec [baseline] (32.475 ms) : 0, 32475
AppSec [candidate] (32.696 ms) : 0, 32696
Debugger [baseline] (67.363 ms) : 0, 67363
Debugger [candidate] (68.292 ms) : 0, 68292
Remote Config [baseline] (618.49 µs) : 0, 618
Remote Config [candidate] (648.789 µs) : 0, 649
Telemetry [baseline] (8.846 ms) : 0, 8846
Telemetry [candidate] (8.917 ms) : 0, 8917
Flare Poller [baseline] (4.587 ms) : 0, 4587
Flare Poller [candidate] (3.969 ms) : 0, 3969
section appsec
crashtracking [baseline] (1.218 ms) : 0, 1218
crashtracking [candidate] (1.204 ms) : 0, 1204
BytebuddyAgent [baseline] (692.89 ms) : 0, 692890
BytebuddyAgent [candidate] (701.587 ms) : 0, 701587
GlobalTracer [baseline] (259.142 ms) : 0, 259142
GlobalTracer [candidate] (262.73 ms) : 0, 262730
IAST [baseline] (24.425 ms) : 0, 24425
IAST [candidate] (24.961 ms) : 0, 24961
AppSec [baseline] (173.031 ms) : 0, 173031
AppSec [candidate] (173.554 ms) : 0, 173554
Debugger [baseline] (66.405 ms) : 0, 66405
Debugger [candidate] (67.294 ms) : 0, 67294
Remote Config [baseline] (774.103 µs) : 0, 774
Remote Config [candidate] (779.366 µs) : 0, 779
Telemetry [baseline] (9.34 ms) : 0, 9340
Telemetry [candidate] (9.203 ms) : 0, 9203
Flare Poller [baseline] (3.788 ms) : 0, 3788
Flare Poller [candidate] (3.685 ms) : 0, 3685
section iast
crashtracking [baseline] (1.179 ms) : 0, 1179
crashtracking [candidate] (1.186 ms) : 0, 1186
BytebuddyAgent [baseline] (792.199 ms) : 0, 792199
BytebuddyAgent [candidate] (797.205 ms) : 0, 797205
GlobalTracer [baseline] (256.799 ms) : 0, 256799
GlobalTracer [candidate] (259.132 ms) : 0, 259132
IAST [baseline] (27.178 ms) : 0, 27178
IAST [candidate] (27.326 ms) : 0, 27326
AppSec [baseline] (34.094 ms) : 0, 34094
AppSec [candidate] (35.386 ms) : 0, 35386
Debugger [baseline] (65.75 ms) : 0, 65750
Debugger [candidate] (65.646 ms) : 0, 65646
Remote Config [baseline] (586.654 µs) : 0, 587
Remote Config [candidate] (603.324 µs) : 0, 603
Telemetry [baseline] (8.452 ms) : 0, 8452
Telemetry [candidate] (8.567 ms) : 0, 8567
Flare Poller [baseline] (3.586 ms) : 0, 3586
Flare Poller [candidate] (3.58 ms) : 0, 3580
section profiling
crashtracking [baseline] (1.202 ms) : 0, 1202
crashtracking [candidate] (1.223 ms) : 0, 1223
BytebuddyAgent [baseline] (701.388 ms) : 0, 701388
BytebuddyAgent [candidate] (702.738 ms) : 0, 702738
GlobalTracer [baseline] (221.697 ms) : 0, 221697
GlobalTracer [candidate] (222.265 ms) : 0, 222265
AppSec [baseline] (32.14 ms) : 0, 32140
AppSec [candidate] (32.181 ms) : 0, 32181
Debugger [baseline] (67.985 ms) : 0, 67985
Debugger [candidate] (68.409 ms) : 0, 68409
Remote Config [baseline] (639.373 µs) : 0, 639
Remote Config [candidate] (676.495 µs) : 0, 676
Telemetry [baseline] (8.993 ms) : 0, 8993
Telemetry [candidate] (8.925 ms) : 0, 8925
Flare Poller [baseline] (3.843 ms) : 0, 3843
Flare Poller [candidate] (3.742 ms) : 0, 3742
ProfilingAgent [baseline] (97.403 ms) : 0, 97403
ProfilingAgent [candidate] (96.616 ms) : 0, 96616
Profiling [baseline] (97.986 ms) : 0, 97986
Profiling [candidate] (97.191 ms) : 0, 97191

Startup time reports for insecure-bank

gantt
    title insecure-bank - global startup overhead: candidate=1.54.0-SNAPSHOT~de63e7031b, baseline=1.59.0-SNAPSHOT~567fb106f6

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.086 s) : 0, 1085673
Total [baseline] (8.762 s) : 0, 8762200
Agent [candidate] (1.089 s) : 0, 1089099
Total [candidate] (8.784 s) : 0, 8783508
section iast
Agent [baseline] (1.225 s) : 0, 1225042
Total [baseline] (9.346 s) : 0, 9346133
Agent [candidate] (1.233 s) : 0, 1232554
Total [candidate] (9.341 s) : 0, 9341096

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.086 s	-
Agent	iast	1.225 s	139.369 ms (12.8%)
Total	tracing	8.762 s	-
Total	iast	9.346 s	583.933 ms (6.7%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.089 s	-
Agent	iast	1.233 s	143.455 ms (13.2%)
Total	tracing	8.784 s	-
Total	iast	9.341 s	557.588 ms (6.3%)

gantt
    title insecure-bank - break down per module: candidate=1.54.0-SNAPSHOT~de63e7031b, baseline=1.59.0-SNAPSHOT~567fb106f6

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.18 ms) : 0, 1180
crashtracking [candidate] (1.182 ms) : 0, 1182
BytebuddyAgent [baseline] (651.273 ms) : 0, 651273
BytebuddyAgent [candidate] (653.847 ms) : 0, 653847
GlobalTracer [baseline] (284.353 ms) : 0, 284353
GlobalTracer [candidate] (284.892 ms) : 0, 284892
AppSec [baseline] (32.67 ms) : 0, 32670
AppSec [candidate] (32.642 ms) : 0, 32642
Debugger [baseline] (67.42 ms) : 0, 67420
Debugger [candidate] (67.441 ms) : 0, 67441
Remote Config [baseline] (629.242 µs) : 0, 629
Remote Config [candidate] (613.313 µs) : 0, 613
Telemetry [baseline] (8.82 ms) : 0, 8820
Telemetry [candidate] (8.929 ms) : 0, 8929
Flare Poller [baseline] (3.898 ms) : 0, 3898
Flare Poller [candidate] (4.014 ms) : 0, 4014
section iast
crashtracking [baseline] (1.198 ms) : 0, 1198
crashtracking [candidate] (1.188 ms) : 0, 1188
BytebuddyAgent [baseline] (793.467 ms) : 0, 793467
BytebuddyAgent [candidate] (797.234 ms) : 0, 797234
GlobalTracer [baseline] (256.728 ms) : 0, 256728
GlobalTracer [candidate] (258.334 ms) : 0, 258334
IAST [baseline] (26.841 ms) : 0, 26841
IAST [candidate] (27.197 ms) : 0, 27197
AppSec [baseline] (31.513 ms) : 0, 31513
AppSec [candidate] (32.819 ms) : 0, 32819
Debugger [baseline] (67.358 ms) : 0, 67358
Debugger [candidate] (67.502 ms) : 0, 67502
Remote Config [baseline] (593.555 µs) : 0, 594
Remote Config [candidate] (608.26 µs) : 0, 608
Telemetry [baseline] (8.391 ms) : 0, 8391
Telemetry [candidate] (8.505 ms) : 0, 8505
Flare Poller [baseline] (3.561 ms) : 0, 3561
Flare Poller [candidate] (3.581 ms) : 0, 3581

Load

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	bbujon/jep500
git_commit_date	1769178816	1769203854
git_commit_sha	`567fb10`	`de63e70`
release_version	1.59.0-SNAPSHOT~567fb106f6	1.54.0-SNAPSHOT~de63e7031b

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1769206136	1769206136
ci_job_id	1374583501	1374583501
ci_pipeline_id	92611499	92611499
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-0-xymqbmc0 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-0-xymqbmc0 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 2 performance improvements and 0 performance regressions! Performance is the same for 18 metrics, 16 unstable metrics.

scenario	Δ mean agg_http_req_duration_p50	Δ mean agg_http_req_duration_p95	Δ mean throughput	candidate mean agg_http_req_duration_p50	candidate mean agg_http_req_duration_p95	candidate mean throughput	baseline mean agg_http_req_duration_p50	baseline mean agg_http_req_duration_p95	baseline mean throughput
scenario:load:petclinic:no_agent:high_load	better [-2.263ms; -1.259ms] or [-12.291%; -6.837%]	better [-3.084ms; -0.786ms] or [-10.247%; -2.611%]	unstable [-3.594op/s; +52.781op/s] or [-1.455%; +21.364%]	16.649ms	28.157ms	271.656op/s	18.410ms	30.092ms	247.062op/s

Request duration reports for petclinic

gantt
    title petclinic - request duration [CI 0.99] : candidate=1.54.0-SNAPSHOT~de63e7031b, baseline=1.59.0-SNAPSHOT~567fb106f6
    dateFormat X
    axisFormat %s
section baseline
no_agent (18.897 ms) : 18710, 19084
.   : milestone, 18897,
appsec (18.802 ms) : 18608, 18995
.   : milestone, 18802,
code_origins (17.851 ms) : 17673, 18029
.   : milestone, 17851,
iast (17.633 ms) : 17458, 17808
.   : milestone, 17633,
profiling (18.739 ms) : 18551, 18926
.   : milestone, 18739,
tracing (17.717 ms) : 17539, 17894
.   : milestone, 17717,
section candidate
no_agent (17.177 ms) : 17006, 17348
.   : milestone, 17177,
appsec (19.126 ms) : 18933, 19320
.   : milestone, 19126,
code_origins (17.79 ms) : 17613, 17968
.   : milestone, 17790,
iast (17.691 ms) : 17518, 17865
.   : milestone, 17691,
profiling (18.422 ms) : 18241, 18604
.   : milestone, 18422,
tracing (17.584 ms) : 17410, 17758
.   : milestone, 17584,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	18.897 ms [18.71 ms, 19.084 ms]	-
appsec	18.802 ms [18.608 ms, 18.995 ms]	-95.096 µs (-0.5%)
code_origins	17.851 ms [17.673 ms, 18.029 ms]	-1.046 ms (-5.5%)
iast	17.633 ms [17.458 ms, 17.808 ms]	-1.264 ms (-6.7%)
profiling	18.739 ms [18.551 ms, 18.926 ms]	-157.902 µs (-0.8%)
tracing	17.717 ms [17.539 ms, 17.894 ms]	-1.18 ms (-6.2%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	17.177 ms [17.006 ms, 17.348 ms]	-
appsec	19.126 ms [18.933 ms, 19.32 ms]	1.95 ms (11.3%)
code_origins	17.79 ms [17.613 ms, 17.968 ms]	613.627 µs (3.6%)
iast	17.691 ms [17.518 ms, 17.865 ms]	514.567 µs (3.0%)
profiling	18.422 ms [18.241 ms, 18.604 ms]	1.245 ms (7.3%)
tracing	17.584 ms [17.41 ms, 17.758 ms]	407.053 µs (2.4%)

Request duration reports for insecure-bank

gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.54.0-SNAPSHOT~de63e7031b, baseline=1.59.0-SNAPSHOT~567fb106f6
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.27 ms) : 1256, 1283
.   : milestone, 1270,
iast (3.169 ms) : 3133, 3206
.   : milestone, 3169,
iast_FULL (5.811 ms) : 5753, 5869
.   : milestone, 5811,
iast_GLOBAL (3.532 ms) : 3479, 3584
.   : milestone, 3532,
profiling (2.032 ms) : 2014, 2050
.   : milestone, 2032,
tracing (1.811 ms) : 1795, 1827
.   : milestone, 1811,
section candidate
no_agent (1.216 ms) : 1202, 1230
.   : milestone, 1216,
iast (3.088 ms) : 3043, 3132
.   : milestone, 3088,
iast_FULL (5.704 ms) : 5648, 5761
.   : milestone, 5704,
iast_GLOBAL (3.669 ms) : 3609, 3730
.   : milestone, 3669,
profiling (2.055 ms) : 2035, 2074
.   : milestone, 2055,
tracing (1.804 ms) : 1788, 1820
.   : milestone, 1804,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.27 ms [1.256 ms, 1.283 ms]	-
iast	3.169 ms [3.133 ms, 3.206 ms]	1.9 ms (149.7%)
iast_FULL	5.811 ms [5.753 ms, 5.869 ms]	4.542 ms (357.7%)
iast_GLOBAL	3.532 ms [3.479 ms, 3.584 ms]	2.262 ms (178.2%)
profiling	2.032 ms [2.014 ms, 2.05 ms]	762.659 µs (60.1%)
tracing	1.811 ms [1.795 ms, 1.827 ms]	541.61 µs (42.7%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.216 ms [1.202 ms, 1.23 ms]	-
iast	3.088 ms [3.043 ms, 3.132 ms]	1.872 ms (153.9%)
iast_FULL	5.704 ms [5.648 ms, 5.761 ms]	4.488 ms (369.2%)
iast_GLOBAL	3.669 ms [3.609 ms, 3.73 ms]	2.453 ms (201.8%)
profiling	2.055 ms [2.035 ms, 2.074 ms]	838.822 µs (69.0%)
tracing	1.804 ms [1.788 ms, 1.82 ms]	588.123 µs (48.4%)

Dacapo

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	bbujon/jep500
git_commit_date	1769178816	1769203854
git_commit_sha	`567fb10`	`de63e70`
release_version	1.59.0-SNAPSHOT~567fb106f6	1.54.0-SNAPSHOT~de63e7031b

See matching parameters

	Baseline	Candidate
application	biojava	biojava
ci_job_date	1769205948	1769205948
ci_job_id	1374583502	1374583502
ci_pipeline_id	92611499	92611499
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-1-o0w3plpq 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-1-o0w3plpq 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics.

Execution time for biojava

gantt
    title biojava - execution time [CI 0.99] : candidate=1.54.0-SNAPSHOT~de63e7031b, baseline=1.59.0-SNAPSHOT~567fb106f6
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.029 s) : 15029000, 15029000
.   : milestone, 15029000,
appsec (14.824 s) : 14824000, 14824000
.   : milestone, 14824000,
iast (18.093 s) : 18093000, 18093000
.   : milestone, 18093000,
iast_GLOBAL (17.59 s) : 17590000, 17590000
.   : milestone, 17590000,
profiling (14.656 s) : 14656000, 14656000
.   : milestone, 14656000,
tracing (14.859 s) : 14859000, 14859000
.   : milestone, 14859000,
section candidate
no_agent (15.555 s) : 15555000, 15555000
.   : milestone, 15555000,
appsec (14.886 s) : 14886000, 14886000
.   : milestone, 14886000,
iast (17.931 s) : 17931000, 17931000
.   : milestone, 17931000,
iast_GLOBAL (17.693 s) : 17693000, 17693000
.   : milestone, 17693000,
profiling (15.297 s) : 15297000, 15297000
.   : milestone, 15297000,
tracing (14.861 s) : 14861000, 14861000
.   : milestone, 14861000,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.029 s [15.029 s, 15.029 s]	-
appsec	14.824 s [14.824 s, 14.824 s]	-205.0 ms (-1.4%)
iast	18.093 s [18.093 s, 18.093 s]	3.064 s (20.4%)
iast_GLOBAL	17.59 s [17.59 s, 17.59 s]	2.561 s (17.0%)
profiling	14.656 s [14.656 s, 14.656 s]	-373.0 ms (-2.5%)
tracing	14.859 s [14.859 s, 14.859 s]	-170.0 ms (-1.1%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.555 s [15.555 s, 15.555 s]	-
appsec	14.886 s [14.886 s, 14.886 s]	-669.0 ms (-4.3%)
iast	17.931 s [17.931 s, 17.931 s]	2.376 s (15.3%)
iast_GLOBAL	17.693 s [17.693 s, 17.693 s]	2.138 s (13.7%)
profiling	15.297 s [15.297 s, 15.297 s]	-258.0 ms (-1.7%)
tracing	14.861 s [14.861 s, 14.861 s]	-694.0 ms (-4.5%)

Execution time for tomcat

gantt
    title tomcat - execution time [CI 0.99] : candidate=1.54.0-SNAPSHOT~de63e7031b, baseline=1.59.0-SNAPSHOT~567fb106f6
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.471 ms) : 1459, 1482
.   : milestone, 1471,
appsec (3.697 ms) : 3478, 3916
.   : milestone, 3697,
iast (2.2 ms) : 2136, 2265
.   : milestone, 2200,
iast_GLOBAL (2.246 ms) : 2181, 2311
.   : milestone, 2246,
profiling (2.083 ms) : 2029, 2138
.   : milestone, 2083,
tracing (2.039 ms) : 1988, 2090
.   : milestone, 2039,
section candidate
no_agent (1.466 ms) : 1455, 1478
.   : milestone, 1466,
appsec (3.708 ms) : 3489, 3927
.   : milestone, 3708,
iast (2.203 ms) : 2138, 2268
.   : milestone, 2203,
iast_GLOBAL (2.238 ms) : 2173, 2303
.   : milestone, 2238,
profiling (2.066 ms) : 2013, 2119
.   : milestone, 2066,
tracing (2.039 ms) : 1988, 2090
.   : milestone, 2039,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.471 ms [1.459 ms, 1.482 ms]	-
appsec	3.697 ms [3.478 ms, 3.916 ms]	2.226 ms (151.3%)
iast	2.2 ms [2.136 ms, 2.265 ms]	729.344 µs (49.6%)
iast_GLOBAL	2.246 ms [2.181 ms, 2.311 ms]	775.381 µs (52.7%)
profiling	2.083 ms [2.029 ms, 2.138 ms]	612.425 µs (41.6%)
tracing	2.039 ms [1.988 ms, 2.09 ms]	568.242 µs (38.6%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.466 ms [1.455 ms, 1.478 ms]	-
appsec	3.708 ms [3.489 ms, 3.927 ms]	2.242 ms (152.9%)
iast	2.203 ms [2.138 ms, 2.268 ms]	736.654 µs (50.2%)
iast_GLOBAL	2.238 ms [2.173 ms, 2.303 ms]	771.516 µs (52.6%)
profiling	2.066 ms [2.013 ms, 2.119 ms]	599.623 µs (40.9%)
tracing	2.039 ms [1.988 ms, 2.09 ms]	572.51 µs (39.0%)

nikita-tkachenko-datadog · 2025-09-18T15:00:48Z

Will we be forbidding setAccessible(...) calls as well? (such as the one done in datadog.trace.util.MethodHandles#privateFieldSetter(java.lang.Class<?>, java.lang.String))

gradle/forbiddenApiFilters/main.txt

PerfectSlayer · 2025-09-18T15:13:34Z

We won't. Quick quote from my doc about the topic:

But the following will still working:

java.lang.reflect.AccessibleObject#setAccessible(boolean) will work to change the accessibility flag and Field.get() / unreflect() / unreflectGetter() will still allow access to private fields value and method calls.

PerfectSlayer · 2025-09-19T09:38:59Z

Going back to draft to carefully evaluate and document each calls.
I also envisioned some fixes for some of the calls already.

github-actions · 2026-01-01T03:31:13Z

This pull request has been marked as stale because it has not had activity over the past quarter. It will be closed in 7 days if no further activity occurs. Feel free to reopen the PR if you are still working on it.

PerfectSlayer · 2026-01-05T09:55:49Z

Let see if it makes the Q1 planning

pr-commenter · 2026-01-21T21:24:01Z

Debugger benchmarks

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
ci_job_date	1769204368	1769204713
end_time	2026-01-23T21:40:48	2026-01-23T21:46:33
git_branch	master	bbujon/jep500
git_commit_sha	`a89f803`	`de63e70`
start_time	2026-01-23T21:39:29	2026-01-23T21:45:14

See matching parameters

	Baseline	Candidate
ci_job_id	1374583510	1374583510
ci_pipeline_id	92611499	92611499
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
git_commit_date	1769203854	1769203854

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 9 metrics, 6 unstable metrics.

See unchanged results

scenario	Δ mean agg_http_req_duration_min	Δ mean agg_http_req_duration_p50	Δ mean agg_http_req_duration_p75	Δ mean agg_http_req_duration_p99	Δ mean throughput
scenario:noprobe	unstable [-20.351µs; +34.697µs] or [-7.492%; +12.774%]	unstable [-28.375µs; +50.641µs] or [-9.148%; +16.327%]	unstable [-36.610µs; +67.117µs] or [-11.313%; +20.741%]	unstable [-234.555µs; +1.818µs] or [-22.652%; +0.176%]	same
scenario:basic	same	same	same	unstable [-217.124µs; -27.808µs] or [-26.022%; -3.333%]	unstable [-244.564op/s; +102.317op/s] or [-9.049%; +3.786%]
scenario:loop	unsure [-4.505µs; -0.088µs] or [-0.051%; -0.001%]	same	unsure [+1.874µs; +11.678µs] or [+0.021%; +0.130%]	same	same

Request duration reports for reports

gantt
    title reports - request duration [CI 0.99] : candidate=None, baseline=None
    dateFormat X
    axisFormat %s
section baseline
noprobe (310.163 µs) : 284, 336
.   : milestone, 310,
basic (276.486 µs) : 270, 283
.   : milestone, 276,
loop (8.957 ms) : 8954, 8961
.   : milestone, 8957,
section candidate
noprobe (321.296 µs) : 275, 368
.   : milestone, 321,
basic (277.931 µs) : 271, 285
.   : milestone, 278,
loop (8.959 ms) : 8955, 8964
.   : milestone, 8959,

baseline results

Scenario	Request median duration [CI 0.99]
noprobe	310.163 µs [284.369 µs, 335.958 µs]
basic	276.486 µs [269.598 µs, 283.373 µs]
loop	8.957 ms [8.954 ms, 8.961 ms]

candidate results

Scenario	Request median duration [CI 0.99]
noprobe	321.296 µs [274.761 µs, 367.831 µs]
basic	277.931 µs [270.865 µs, 284.998 µs]
loop	8.959 ms [8.955 ms, 8.964 ms]

This reverts commit 9aacc3c.

chore: Clean up unused UnsafeUtils

96f1c44

This comment has been minimized.

Sign in to view

PerfectSlayer force-pushed the bbujon/jep500 branch from d2219bc to 5c24855 Compare September 18, 2025 11:29

feat: Add future prohibited methods

e73688f

PerfectSlayer force-pushed the bbujon/jep500 branch from 5c24855 to d906b86 Compare September 18, 2025 12:13

feat: Allow current usages

5ad4f5e

PerfectSlayer force-pushed the bbujon/jep500 branch from d906b86 to 5ad4f5e Compare September 18, 2025 14:53

PerfectSlayer added the tag: no release notes Changes to exclude from release notes label Sep 18, 2025

PerfectSlayer marked this pull request as ready for review September 18, 2025 14:57

PerfectSlayer requested review from a team as code owners September 18, 2025 14:57

PerfectSlayer requested review from manuel-alvarez-alvarez, nikita-tkachenko-datadog and smola September 18, 2025 14:57

bric3 reviewed Sep 18, 2025

View reviewed changes

gradle/forbiddenApiFilters/main.txt Show resolved Hide resolved

PerfectSlayer marked this pull request as draft September 19, 2025 09:37

github-actions bot added the tag: stale Stale pull requests label Jan 1, 2026

PerfectSlayer removed the tag: stale Stale pull requests label Jan 5, 2026

PerfectSlayer mentioned this pull request Jan 16, 2026

Forbid methods that mutate final fields #10388

Closed

sarahchen6 added 4 commits January 16, 2026 10:22

Merge branch 'master' into bbujon/jep500

9a1b042

Merge branch 'master' into bbujon/jep500

cda3d76

Update forbiddenAPIs comments

b698f4f

Add comments where fields may be mutated

968946d

sarahchen6 added 4 commits January 22, 2026 11:32

Merge branch 'master' into bbujon/jep500

2824aab

Mark which usages need changing

1860f68

Actually mark what usages need changing

9aacc3c

Revert "Actually mark what usages need changing"

c997577

This reverts commit 9aacc3c.

sarahchen6 marked this pull request as ready for review January 22, 2026 21:26

sarahchen6 requested a review from a team as a code owner January 22, 2026 21:26

sarahchen6 requested review from tylfin and removed request for a team January 22, 2026 21:26

tylfin requested a review from jpbempel January 22, 2026 21:50

sarahchen6 added 2 commits January 23, 2026 08:38

Merge branch 'master' into bbujon/jep500

805b105

Add comment to Bug4304Instrumentation

de63e70

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Prepare for JEP 500 #9557

Prepare for JEP 500 #9557

PerfectSlayer commented Sep 18, 2025 •

edited by atlassian bot

Loading

Uh oh!

This comment has been minimized.

pr-commenter bot commented Sep 18, 2025 •

edited

Loading

Uh oh!

nikita-tkachenko-datadog commented Sep 18, 2025

Uh oh!

Uh oh!

PerfectSlayer commented Sep 18, 2025

Uh oh!

PerfectSlayer commented Sep 19, 2025

Uh oh!

github-actions bot commented Jan 1, 2026

Uh oh!

PerfectSlayer commented Jan 5, 2026

Uh oh!

pr-commenter bot commented Jan 21, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Prepare for JEP 500 #9557

Are you sure you want to change the base?

Prepare for JEP 500 #9557

Conversation

PerfectSlayer commented Sep 18, 2025 • edited by atlassian bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What Does This Do

Motivation

Additional Notes

Contributor Checklist

Uh oh!

This comment has been minimized.

pr-commenter bot commented Sep 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Benchmarks

Startup

Parameters

Summary

Load

Parameters

Summary

Dacapo

Parameters

Summary

Uh oh!

nikita-tkachenko-datadog commented Sep 18, 2025

Uh oh!

Uh oh!

PerfectSlayer commented Sep 18, 2025

Uh oh!

PerfectSlayer commented Sep 19, 2025

Uh oh!

github-actions bot commented Jan 1, 2026

Uh oh!

PerfectSlayer commented Jan 5, 2026

Uh oh!

pr-commenter bot commented Jan 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Debugger benchmarks

Parameters

Summary

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

PerfectSlayer commented Sep 18, 2025 •

edited by atlassian bot

Loading

pr-commenter bot commented Sep 18, 2025 •

edited

Loading

pr-commenter bot commented Jan 21, 2026 •

edited

Loading