Bump newrelic from 11.0.1 to 11.5.0

[dependabot]

Bumps newrelic from 11.0.1 to 11.5.0.

Release notes

Sourced from newrelic's releases.

v11.5.0

Notes

This release of the Python agent adds trace/span support for Hybrid Agent, New Relic's integration with OpenTelemetry. It also adds entity GUIDs to Agent Control health check files, subcomponent attributes to agentic AI instrumentation, support for new Redis client methods, fixes a bug where there may be duplicate ImportHookFinder instances and a bug in OracleDB Cursor.callproc() instrumentation.

Install the agent using easy_install/pip/distribute via the Python Package Index, using conda via the Conda-Forge Package Index, or download it directly from the New Relic download site.

Features

• Add Hybrid Agent tracing support

  • Hybrid Agent is designed to bridge the gap for teams looking to adopt OpenTelemetry standards while maintaining backwards compatibility with their existing New Relic dashboards. Hybrid Agent offers a "best-of-both-worlds" experience by combining New Relic’s deep visibility with OpenTelemetry API compatibility. It provides an observability solution with integrated support for the following OpenTelemetry APIs:
    • Tracing
    • Standalone library and native framework instrumentation
  • Key enhancements like Span Links and Events on Spans are now available, ensuring seamless interoperability in mixed-mode environments.

• Introduces a new Trace ID Ratio based sampler

  • A new Trace ID Ratio based sampler. This sampling algorithm is based off the sampler of the same name from OpenTelemetry, and can be configured to sample a set percentage of transactions.

• Add subcomponent attributes to agentic AI instrumentation

  • Instrumentation for LangChain, MCP, and Strands now includes a subcomponent attribute on spans that represent tool or agent calls. This is used to provide more enhanced entity mapping in the New Relic UI.

• Add entity GUID to Agent Control health check files

  • When the agent is started within an Agent Control environment, a health check file is created at the configured file location for every agent process. This file now includes the GUID of the entity related to the agent when available.

• Add instrumentation for new Redis methods

  • Add instrumentation for the following methods new methods on Redis clients:
    • hotkeys_get
    • hotkeys_reset
    • hotkeys_start
    • hotkeys_stop
    • vrange
    • xcfgset

Bugs

• Fix duplicate ImportHookFinder instances

  • Previously it was possible for duplicates of the import hook finder to be added to sys.meta_path.

• Fix incorrect signature on OracleDB Cursor.callproc()

  • Previously attempting to use keyword arguments with Cursor.callproc() would cause crashes as the argument names were incorrect in our instrumentation. This has been fixed, and the additional argument keyword_parameters is now also supported.

Support statement

... (truncated)

Commits

• 7cb9b89 Hybrid core tracing rebased (#1646)
• 1efa4a5 Add subcomponent attributes to agentic AI framework instrumentations (#1666)
• 3f0d83b Fix OracleDB Mismatched Signature (#1648)
• 0d90dc8 Update CI Image (#1649)
• fa1ccf8 Bump the github_actions group with 3 updates (#1662)
• 14789b2 Add entity guid to Agent Control health file (#1640)
• dad7197 Merge pull request #1663 from newrelic/fix-redis
• 93257cb Fix redis uninstrumented commands
• 0474217 Revert "Merge main into develop-v12.0.0" (#1660)
• 0c58455 Revert "Merge main into develop-v12.0.0"
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)