🍒 9165 - Fix NPE in AppSecConfigServiceImpl #9172

manuel-alvarez-alvarez · 2025-07-15T09:31:41Z

Backport #9165 to release/v1.51.x

(cherry picked from commit 9a188f8)

pr-commenter · 2025-07-15T10:25:55Z

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	malvarez/backport-pr-9165
git_commit_date	1752571825	1752571897
git_commit_sha	`51532a8`	`9c11cc2`
release_version	1.52.0-SNAPSHOT~51532a82ba	1.52.0-SNAPSHOT~9c11cc2fb0

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1752574778	1752574778
ci_job_id	1028687780	1028687780
ci_pipeline_id	70553587	70553587
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-0-29yok7z7 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-0-29yok7z7 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module	Agent	Agent
parent	None	None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 46 metrics, 7 unstable metrics.

Startup time reports for insecure-bank

gantt
    title insecure-bank - global startup overhead: candidate=1.52.0-SNAPSHOT~9c11cc2fb0, baseline=1.52.0-SNAPSHOT~51532a82ba

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (993.769 ms) : 0, 993769
Total [baseline] (8.577 s) : 0, 8576685
Agent [candidate] (1.002 s) : 0, 1002355
Total [candidate] (8.567 s) : 0, 8567350
section iast
Agent [baseline] (1.129 s) : 0, 1129166
Total [baseline] (9.281 s) : 0, 9280927
Agent [candidate] (1.134 s) : 0, 1134262
Total [candidate] (9.278 s) : 0, 9278199

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	993.769 ms	-
Agent	iast	1.129 s	135.396 ms (13.6%)
Total	tracing	8.577 s	-
Total	iast	9.281 s	704.241 ms (8.2%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.002 s	-
Agent	iast	1.134 s	131.907 ms (13.2%)
Total	tracing	8.567 s	-
Total	iast	9.278 s	710.849 ms (8.3%)

gantt
    title insecure-bank - break down per module: candidate=1.52.0-SNAPSHOT~9c11cc2fb0, baseline=1.52.0-SNAPSHOT~51532a82ba

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (685.989 ms) : 0, 685989
BytebuddyAgent [candidate] (692.465 ms) : 0, 692465
GlobalTracer [baseline] (241.836 ms) : 0, 241836
GlobalTracer [candidate] (243.228 ms) : 0, 243228
AppSec [baseline] (30.409 ms) : 0, 30409
AppSec [candidate] (30.807 ms) : 0, 30807
Debugger [baseline] (5.956 ms) : 0, 5956
Debugger [candidate] (6.034 ms) : 0, 6034
Remote Config [baseline] (674.887 µs) : 0, 675
Remote Config [candidate] (683.954 µs) : 0, 684
Telemetry [baseline] (8.212 ms) : 0, 8212
Telemetry [candidate] (8.291 ms) : 0, 8291
section iast
BytebuddyAgent [baseline] (804.056 ms) : 0, 804056
BytebuddyAgent [candidate] (810.779 ms) : 0, 810779
GlobalTracer [baseline] (232.534 ms) : 0, 232534
GlobalTracer [candidate] (230.974 ms) : 0, 230974
IAST [baseline] (26.32 ms) : 0, 26320
IAST [candidate] (27.704 ms) : 0, 27704
AppSec [baseline] (31.45 ms) : 0, 31450
AppSec [candidate] (29.835 ms) : 0, 29835
Debugger [baseline] (5.691 ms) : 0, 5691
Debugger [candidate] (5.723 ms) : 0, 5723
Remote Config [baseline] (576.489 µs) : 0, 576
Remote Config [candidate] (575.242 µs) : 0, 575
Telemetry [baseline] (7.913 ms) : 0, 7913
Telemetry [candidate] (7.874 ms) : 0, 7874

Startup time reports for petclinic

gantt
    title petclinic - global startup overhead: candidate=1.52.0-SNAPSHOT~9c11cc2fb0, baseline=1.52.0-SNAPSHOT~51532a82ba

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (995.874 ms) : 0, 995874
Total [baseline] (10.746 s) : 0, 10745755
Agent [candidate] (995.63 ms) : 0, 995630
Total [candidate] (10.61 s) : 0, 10610425
section appsec
Agent [baseline] (1.174 s) : 0, 1173922
Total [baseline] (10.897 s) : 0, 10897034
Agent [candidate] (1.173 s) : 0, 1172649
Total [candidate] (10.799 s) : 0, 10798832
section iast
Agent [baseline] (1.138 s) : 0, 1138215
Total [baseline] (10.838 s) : 0, 10837576
Agent [candidate] (1.133 s) : 0, 1133111
Total [candidate] (10.835 s) : 0, 10834544
section profiling
Agent [baseline] (1.243 s) : 0, 1242530
Total [baseline] (10.984 s) : 0, 10984466
Agent [candidate] (1.251 s) : 0, 1251390
Total [candidate] (10.947 s) : 0, 10946794

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	995.874 ms	-
Agent	appsec	1.174 s	178.048 ms (17.9%)
Agent	iast	1.138 s	142.341 ms (14.3%)
Agent	profiling	1.243 s	246.656 ms (24.8%)
Total	tracing	10.746 s	-
Total	appsec	10.897 s	151.279 ms (1.4%)
Total	iast	10.838 s	91.821 ms (0.9%)
Total	profiling	10.984 s	238.711 ms (2.2%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	995.63 ms	-
Agent	appsec	1.173 s	177.019 ms (17.8%)
Agent	iast	1.133 s	137.481 ms (13.8%)
Agent	profiling	1.251 s	255.759 ms (25.7%)
Total	tracing	10.61 s	-
Total	appsec	10.799 s	188.407 ms (1.8%)
Total	iast	10.835 s	224.119 ms (2.1%)
Total	profiling	10.947 s	336.369 ms (3.2%)

gantt
    title petclinic - break down per module: candidate=1.52.0-SNAPSHOT~9c11cc2fb0, baseline=1.52.0-SNAPSHOT~51532a82ba

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (687.226 ms) : 0, 687226
BytebuddyAgent [candidate] (687.869 ms) : 0, 687869
GlobalTracer [baseline] (242.457 ms) : 0, 242457
GlobalTracer [candidate] (241.767 ms) : 0, 241767
AppSec [baseline] (30.52 ms) : 0, 30520
AppSec [candidate] (30.446 ms) : 0, 30446
Debugger [baseline] (5.952 ms) : 0, 5952
Debugger [candidate] (5.946 ms) : 0, 5946
Remote Config [baseline] (674.846 µs) : 0, 675
Remote Config [candidate] (672.898 µs) : 0, 673
Telemetry [baseline] (8.232 ms) : 0, 8232
Telemetry [candidate] (8.222 ms) : 0, 8222
section appsec
BytebuddyAgent [baseline] (708.729 ms) : 0, 708729
BytebuddyAgent [candidate] (709.071 ms) : 0, 709071
GlobalTracer [baseline] (234.947 ms) : 0, 234947
GlobalTracer [candidate] (234.615 ms) : 0, 234615
IAST [baseline] (23.614 ms) : 0, 23614
IAST [candidate] (23.29 ms) : 0, 23290
AppSec [baseline] (171.295 ms) : 0, 171295
AppSec [candidate] (170.429 ms) : 0, 170429
Debugger [baseline] (5.767 ms) : 0, 5767
Debugger [candidate] (5.702 ms) : 0, 5702
Remote Config [baseline] (617.47 µs) : 0, 617
Remote Config [candidate] (597.832 µs) : 0, 598
Telemetry [baseline] (8.12 ms) : 0, 8120
Telemetry [candidate] (8.04 ms) : 0, 8040
section iast
BytebuddyAgent [baseline] (810.801 ms) : 0, 810801
BytebuddyAgent [candidate] (807.924 ms) : 0, 807924
GlobalTracer [baseline] (233.725 ms) : 0, 233725
GlobalTracer [candidate] (232.319 ms) : 0, 232319
IAST [baseline] (29.083 ms) : 0, 29083
IAST [candidate] (27.899 ms) : 0, 27899
AppSec [baseline] (29.385 ms) : 0, 29385
AppSec [candidate] (29.898 ms) : 0, 29898
Debugger [baseline] (5.778 ms) : 0, 5778
Debugger [candidate] (5.772 ms) : 0, 5772
Remote Config [baseline] (599.576 µs) : 0, 600
Remote Config [candidate] (584.34 µs) : 0, 584
Telemetry [baseline] (7.977 ms) : 0, 7977
Telemetry [candidate] (7.95 ms) : 0, 7950
section profiling
BytebuddyAgent [baseline] (676.843 ms) : 0, 676843
BytebuddyAgent [candidate] (682.119 ms) : 0, 682119
GlobalTracer [baseline] (360.916 ms) : 0, 360916
GlobalTracer [candidate] (362.829 ms) : 0, 362829
AppSec [baseline] (34.669 ms) : 0, 34669
AppSec [candidate] (34.865 ms) : 0, 34865
Debugger [baseline] (9.76 ms) : 0, 9760
Debugger [candidate] (8.352 ms) : 0, 8352
Remote Config [baseline] (667.833 µs) : 0, 668
Remote Config [candidate] (666.922 µs) : 0, 667
Telemetry [baseline] (7.975 ms) : 0, 7975
Telemetry [candidate] (9.528 ms) : 0, 9528
ProfilingAgent [baseline] (103.157 ms) : 0, 103157
ProfilingAgent [candidate] (104.192 ms) : 0, 104192
Profiling [baseline] (103.182 ms) : 0, 103182
Profiling [candidate] (104.217 ms) : 0, 104217

Load

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	malvarez/backport-pr-9165
git_commit_date	1752571825	1752571897
git_commit_sha	`51532a8`	`9c11cc2`
release_version	1.52.0-SNAPSHOT~51532a82ba	1.52.0-SNAPSHOT~9c11cc2fb0

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1752574296	1752574296
ci_job_id	1028687781	1028687781
ci_pipeline_id	70553587	70553587
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-0-0ix8xzgn 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-0-0ix8xzgn 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 2 performance improvements and 0 performance regressions! Performance is the same for 10 metrics, 12 unstable metrics.

scenario	Δ mean http_req_duration	Δ mean throughput	candidate mean http_req_duration	candidate mean throughput	baseline mean http_req_duration	baseline mean throughput
scenario:load:petclinic:tracing:high_load	better [-2.793ms; -2.004ms] or [-6.211%; -4.457%]	unstable [-1.836op/s; +13.436op/s] or [-1.763%; +12.904%]	42.562ms	109.925op/s	44.960ms	104.125op/s
scenario:load:petclinic:iast:high_load	better [-2.462ms; -1.630ms] or [-5.377%; -3.561%]	unstable [-2.383op/s; +11.933op/s] or [-2.331%; +11.674%]	43.740ms	106.987op/s	45.786ms	102.213op/s

Request duration reports for petclinic

gantt
    title petclinic - request duration [CI 0.99] : candidate=1.52.0-SNAPSHOT~9c11cc2fb0, baseline=1.52.0-SNAPSHOT~51532a82ba
    dateFormat X
    axisFormat %s
section baseline
no_agent (36.82 ms) : 36525, 37115
.   : milestone, 36820,
appsec (48.362 ms) : 47932, 48792
.   : milestone, 48362,
code_origins (45.271 ms) : 44885, 45657
.   : milestone, 45271,
iast (45.786 ms) : 45388, 46185
.   : milestone, 45786,
profiling (46.992 ms) : 46559, 47425
.   : milestone, 46992,
tracing (44.96 ms) : 44580, 45340
.   : milestone, 44960,
section candidate
no_agent (37.441 ms) : 37144, 37738
.   : milestone, 37441,
appsec (48.301 ms) : 47859, 48744
.   : milestone, 48301,
code_origins (46.503 ms) : 46118, 46889
.   : milestone, 46503,
iast (43.74 ms) : 43366, 44114
.   : milestone, 43740,
profiling (48.096 ms) : 47638, 48553
.   : milestone, 48096,
tracing (42.562 ms) : 42210, 42915
.   : milestone, 42562,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	36.82 ms [36.525 ms, 37.115 ms]	-
appsec	48.362 ms [47.932 ms, 48.792 ms]	11.542 ms (31.3%)
code_origins	45.271 ms [44.885 ms, 45.657 ms]	8.452 ms (23.0%)
iast	45.786 ms [45.388 ms, 46.185 ms]	8.966 ms (24.4%)
profiling	46.992 ms [46.559 ms, 47.425 ms]	10.172 ms (27.6%)
tracing	44.96 ms [44.58 ms, 45.34 ms]	8.14 ms (22.1%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	37.441 ms [37.144 ms, 37.738 ms]	-
appsec	48.301 ms [47.859 ms, 48.744 ms]	10.86 ms (29.0%)
code_origins	46.503 ms [46.118 ms, 46.889 ms]	9.062 ms (24.2%)
iast	43.74 ms [43.366 ms, 44.114 ms]	6.299 ms (16.8%)
profiling	48.096 ms [47.638 ms, 48.553 ms]	10.654 ms (28.5%)
tracing	42.562 ms [42.21 ms, 42.915 ms]	5.121 ms (13.7%)

Request duration reports for insecure-bank

gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.52.0-SNAPSHOT~9c11cc2fb0, baseline=1.52.0-SNAPSHOT~51532a82ba
    dateFormat X
    axisFormat %s
section baseline
no_agent (4.404 ms) : 4355, 4453
.   : milestone, 4404,
iast (9.068 ms) : 8914, 9222
.   : milestone, 9068,
iast_FULL (13.97 ms) : 13691, 14249
.   : milestone, 13970,
iast_GLOBAL (10.403 ms) : 10220, 10586
.   : milestone, 10403,
profiling (8.808 ms) : 8671, 8945
.   : milestone, 8808,
tracing (7.511 ms) : 7405, 7617
.   : milestone, 7511,
section candidate
no_agent (4.444 ms) : 4395, 4493
.   : milestone, 4444,
iast (9.118 ms) : 8969, 9267
.   : milestone, 9118,
iast_FULL (14.323 ms) : 14033, 14613
.   : milestone, 14323,
iast_GLOBAL (10.329 ms) : 10134, 10524
.   : milestone, 10329,
profiling (8.668 ms) : 8522, 8814
.   : milestone, 8668,
tracing (7.273 ms) : 7172, 7375
.   : milestone, 7273,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	4.404 ms [4.355 ms, 4.453 ms]	-
iast	9.068 ms [8.914 ms, 9.222 ms]	4.664 ms (105.9%)
iast_FULL	13.97 ms [13.691 ms, 14.249 ms]	9.566 ms (217.2%)
iast_GLOBAL	10.403 ms [10.22 ms, 10.586 ms]	5.999 ms (136.2%)
profiling	8.808 ms [8.671 ms, 8.945 ms]	4.404 ms (100.0%)
tracing	7.511 ms [7.405 ms, 7.617 ms]	3.107 ms (70.6%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	4.444 ms [4.395 ms, 4.493 ms]	-
iast	9.118 ms [8.969 ms, 9.267 ms]	4.674 ms (105.2%)
iast_FULL	14.323 ms [14.033 ms, 14.613 ms]	9.879 ms (222.3%)
iast_GLOBAL	10.329 ms [10.134 ms, 10.524 ms]	5.885 ms (132.4%)
profiling	8.668 ms [8.522 ms, 8.814 ms]	4.224 ms (95.0%)
tracing	7.273 ms [7.172 ms, 7.375 ms]	2.829 ms (63.7%)

Dacapo

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	malvarez/backport-pr-9165
git_commit_date	1752571825	1752571897
git_commit_sha	`51532a8`	`9c11cc2`
release_version	1.52.0-SNAPSHOT~51532a82ba	1.52.0-SNAPSHOT~9c11cc2fb0

See matching parameters

	Baseline	Candidate
application	biojava	biojava
ci_job_date	1752575043	1752575043
ci_job_id	1028687783	1028687783
ci_pipeline_id	70553587	70553587
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-1-12cy7m28 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-1-12cy7m28 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics.

Execution time for tomcat

gantt
    title tomcat - execution time [CI 0.99] : candidate=1.52.0-SNAPSHOT~9c11cc2fb0, baseline=1.52.0-SNAPSHOT~51532a82ba
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.477 ms) : 1465, 1489
.   : milestone, 1477,
appsec (2.413 ms) : 2363, 2463
.   : milestone, 2413,
iast (2.197 ms) : 2135, 2260
.   : milestone, 2197,
iast_GLOBAL (2.252 ms) : 2189, 2315
.   : milestone, 2252,
profiling (2.065 ms) : 2014, 2117
.   : milestone, 2065,
tracing (2.028 ms) : 1979, 2077
.   : milestone, 2028,
section candidate
no_agent (1.475 ms) : 1463, 1486
.   : milestone, 1475,
appsec (2.417 ms) : 2367, 2467
.   : milestone, 2417,
iast (2.209 ms) : 2146, 2272
.   : milestone, 2209,
iast_GLOBAL (2.249 ms) : 2186, 2312
.   : milestone, 2249,
profiling (2.061 ms) : 2008, 2113
.   : milestone, 2061,
tracing (2.031 ms) : 1981, 2080
.   : milestone, 2031,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.477 ms [1.465 ms, 1.489 ms]	-
appsec	2.413 ms [2.363 ms, 2.463 ms]	935.978 µs (63.4%)
iast	2.197 ms [2.135 ms, 2.26 ms]	720.36 µs (48.8%)
iast_GLOBAL	2.252 ms [2.189 ms, 2.315 ms]	775.457 µs (52.5%)
profiling	2.065 ms [2.014 ms, 2.117 ms]	588.325 µs (39.8%)
tracing	2.028 ms [1.979 ms, 2.077 ms]	551.122 µs (37.3%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.475 ms [1.463 ms, 1.486 ms]	-
appsec	2.417 ms [2.367 ms, 2.467 ms]	942.162 µs (63.9%)
iast	2.209 ms [2.146 ms, 2.272 ms]	733.814 µs (49.8%)
iast_GLOBAL	2.249 ms [2.186 ms, 2.312 ms]	774.072 µs (52.5%)
profiling	2.061 ms [2.008 ms, 2.113 ms]	585.616 µs (39.7%)
tracing	2.031 ms [1.981 ms, 2.08 ms]	555.672 µs (37.7%)

Execution time for biojava

gantt
    title biojava - execution time [CI 0.99] : candidate=1.52.0-SNAPSHOT~9c11cc2fb0, baseline=1.52.0-SNAPSHOT~51532a82ba
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.803 s) : 15803000, 15803000
.   : milestone, 15803000,
appsec (15.012 s) : 15012000, 15012000
.   : milestone, 15012000,
iast (18.484 s) : 18484000, 18484000
.   : milestone, 18484000,
iast_GLOBAL (17.701 s) : 17701000, 17701000
.   : milestone, 17701000,
profiling (14.828 s) : 14828000, 14828000
.   : milestone, 14828000,
tracing (14.87 s) : 14870000, 14870000
.   : milestone, 14870000,
section candidate
no_agent (15.588 s) : 15588000, 15588000
.   : milestone, 15588000,
appsec (14.642 s) : 14642000, 14642000
.   : milestone, 14642000,
iast (18.418 s) : 18418000, 18418000
.   : milestone, 18418000,
iast_GLOBAL (17.671 s) : 17671000, 17671000
.   : milestone, 17671000,
profiling (15.745 s) : 15745000, 15745000
.   : milestone, 15745000,
tracing (14.788 s) : 14788000, 14788000
.   : milestone, 14788000,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.803 s [15.803 s, 15.803 s]	-
appsec	15.012 s [15.012 s, 15.012 s]	-791.0 ms (-5.0%)
iast	18.484 s [18.484 s, 18.484 s]	2.681 s (17.0%)
iast_GLOBAL	17.701 s [17.701 s, 17.701 s]	1.898 s (12.0%)
profiling	14.828 s [14.828 s, 14.828 s]	-975.0 ms (-6.2%)
tracing	14.87 s [14.87 s, 14.87 s]	-933.0 ms (-5.9%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.588 s [15.588 s, 15.588 s]	-
appsec	14.642 s [14.642 s, 14.642 s]	-946.0 ms (-6.1%)
iast	18.418 s [18.418 s, 18.418 s]	2.83 s (18.2%)
iast_GLOBAL	17.671 s [17.671 s, 17.671 s]	2.083 s (13.4%)
profiling	15.745 s [15.745 s, 15.745 s]	157.0 ms (1.0%)
tracing	14.788 s [14.788 s, 14.788 s]	-800.0 ms (-5.1%)

| Package | Type | Package file | Manager | Update | Change | |---|---|---|---|---|---| | [app.cash.tempest:tempest-bom](https://github.com/cashapp/tempest) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2025.07.08.171526-e297588` -> `2025.07.15.155806-c1415e3` | | [com.google.cloud:google-cloud-spanner](https://github.com/googleapis/java-spanner) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `6.97.0` -> `6.97.1` | | [com.datadoghq:dd-trace-api](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.51.0` -> `1.51.1` | | [software.amazon.awssdk:sdk-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.31.78` -> `2.32.1` | | [software.amazon.awssdk:sqs](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.31.78` -> `2.32.1` | | [software.amazon.awssdk:dynamodb-enhanced](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.31.78` -> `2.32.1` | | [software.amazon.awssdk:dynamodb](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.31.78` -> `2.32.1` | | [software.amazon.awssdk:aws-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.31.78` -> `2.32.1` | | [software.amazon.awssdk:bom](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.31.78` -> `2.32.1` | | [software.amazon.awssdk:auth](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.31.78` -> `2.32.1` | | [com.amazonaws:aws-java-sdk-sqs](https://aws.amazon.com/sdkforjava) ([source](https://github.com/aws/aws-sdk-java)) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.12.787` -> `1.12.788` | | [com.amazonaws:aws-java-sdk-s3](https://aws.amazon.com/sdkforjava) ([source](https://github.com/aws/aws-sdk-java)) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.12.787` -> `1.12.788` | | [com.amazonaws:aws-java-sdk-dynamodb](https://aws.amazon.com/sdkforjava) ([source](https://github.com/aws/aws-sdk-java)) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.12.787` -> `1.12.788` | | [com.amazonaws:aws-java-sdk-core](https://aws.amazon.com/sdkforjava) ([source](https://github.com/aws/aws-sdk-java)) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.12.787` -> `1.12.788` | --- ### Release Notes <details> <summary>googleapis/java-spanner (com.google.cloud:google-cloud-spanner)</summary> ### [`v6.97.1`](https://github.com/googleapis/java-spanner/blob/HEAD/CHANGELOG.md#6971-2025-07-15) ##### Dependencies - Update dependency com.google.cloud:sdk-platform-java-config to v3.50.1 ([#3992](googleapis/java-spanner#3992)) ([69ffd72](googleapis/java-spanner@69ffd72)) - Update googleapis/sdk-platform-java action to v2.60.1 ([#3926](googleapis/java-spanner#3926)) ([7001b7f](googleapis/java-spanner@7001b7f)) </details> <details> <summary>datadog/dd-trace-java (com.datadoghq:dd-trace-api)</summary> ### [`v1.51.1`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.51.1): 1.51.1 ### Components #### Application Security Management (WAF) - 🐛 Fix NPE in AppSecConfigServiceImpl ([#9172](DataDog/dd-trace-java#9172) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### Tracer core - 🐛 Avoid race conditions on feature discovery ([#9175](DataDog/dd-trace-java#9175), [#9177](DataDog/dd-trace-java#9177) - [@daniel-mohedano](https://github.com/daniel-mohedano), [@amarziali](https://github.com/amarziali) ) </details> <details> <summary>aws/aws-sdk-java (com.amazonaws:aws-java-sdk-sqs)</summary> ### [`v1.12.788`](https://github.com/aws/aws-sdk-java/blob/HEAD/CHANGELOG.md#112788-2025-07-11) [Compare Source](aws/aws-sdk-java@1.12.787...1.12.788) #### **AWS SDK for Java** - ### Features - Add account endpoint caching #### **Amazon DynamoDB** - ### Features - Cache account endpoint URIs </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am every weekday" in timezone Australia/Melbourne, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). GitOrigin-RevId: 27a8b093249f74e7c13544759c5baf5d1acdc371

Fix NPE in AppSecConfigServiceImpl

9c11cc2

(cherry picked from commit 9a188f8)

manuel-alvarez-alvarez requested a review from a team as a code owner July 15, 2025 09:31

manuel-alvarez-alvarez requested review from robertpi and jandro996 July 15, 2025 09:31

manuel-alvarez-alvarez added type: bug Bug report and fix comp: asm waf Application Security Management (WAF) labels Jul 15, 2025

manuel-alvarez-alvarez added this to the 1.51.1 milestone Jul 15, 2025

amarziali approved these changes Jul 15, 2025

View reviewed changes

jandro996 approved these changes Jul 15, 2025

View reviewed changes

manuel-alvarez-alvarez merged commit 3a9d442 into release/v1.51.x Jul 15, 2025
508 checks passed

manuel-alvarez-alvarez deleted the malvarez/backport-pr-9165 branch July 15, 2025 11:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

🍒 9165 - Fix NPE in AppSecConfigServiceImpl #9172

🍒 9165 - Fix NPE in AppSecConfigServiceImpl #9172

Uh oh!

manuel-alvarez-alvarez commented Jul 15, 2025

Uh oh!

pr-commenter bot commented Jul 15, 2025

Uh oh!

Uh oh!

Uh oh!

🍒 9165 - Fix NPE in AppSecConfigServiceImpl #9172

🍒 9165 - Fix NPE in AppSecConfigServiceImpl #9172

Uh oh!

Conversation

manuel-alvarez-alvarez commented Jul 15, 2025

Uh oh!

pr-commenter bot commented Jul 15, 2025

Benchmarks

Startup

Parameters

Summary

Load

Parameters

Summary

Dacapo

Parameters

Summary

Uh oh!

Uh oh!

Uh oh!