[dependabot]

Bumps appsignal from 4.10.0 to 5.0.0.

Changelog

Sourced from appsignal's changelog.

5.0.0

Published on 2026-09-28.

Changed

• Release the final package version. See the pre-release changelog entries for the changes in this version. (major)

5.0.0.rc.2

Published on 2026-09-23.

This release also includes all the changes from AppSignal for Ruby version 4.10.4 and below.

Added

• Detect the revision that is being deployed from the environment variables set by Heroku, Render, Kamal and Scalingo: HEROKU_SLUG_COMMIT, RENDER_GIT_COMMIT, KAMAL_VERSION and CONTAINER_VERSION. Applications deployed on those platforms now report their revision without setting the revision configuration option.

  This affects collector mode, where deploys were reported as unknown when the revision was not configured.

  (patch bf606432)

• Detect the hostname of the machine the application runs on. On Heroku this is the name of the dyno, and everywhere else it is the name the host reports for itself. Set the hostname configuration option to report a different name.

  This affects collector mode, where all data was reported for a host named unknown when the hostname was not configured.

  (patch bf606432)

• Report the host, the port and the HTTP version of an incoming web request in collector mode. These are sent as the server.address, server.port and network.protocol.version OpenTelemetry attributes. The host is read from the Forwarded and X-Forwarded-Host headers when a proxy sets them, so it is the host the client used rather than the one the proxy connected to. (patch 85460ff3)

• Report the request environment in collector mode. The request_headers configuration option is an allowlist of Rack environment names, and some of those names are not request headers. Those values are now reported as appsignal.environment.* OpenTelemetry attributes and shown in the request's Environment panel, instead of being left out.

  Values that describe the request itself are not repeated there, because they are already reported as the request's method, path, host, port and protocol version.

  (patch 85460ff3)

• Add the keep_request_headers and keep_request_environment configuration options, which are used in collector mode. They replace request_headers, which is deprecated in collector mode.

  keep_request_headers lists the request headers to report, using the names OpenTelemetry uses for them, such as accept and content-length. keep_request_environment lists the Rack environment values to report that are not request headers, using the names Rack uses for them, such as REMOTE_ADDR.

  Both options default to a value derived from request_headers, which lists Rack environment keys and mixes the two kinds together. So an application that only ever set request_headers keeps reporting the same values when it moves to collector mode.

  The request_headers configuration option is deprecated in collector mode, and a warning will be emitted at startup, containing the values of keep_request_headers and keep_request_environment that should be used to replace it.

  In agent mode, request_headers still lists every Rack environment key to report, and the two new options have no effect.

  (patch 992a60c8)

• Add the Appsignal.add_request_headers and Appsignal.add_request_environment helpers.

  Use add_request_headers to report request headers, naming each header in lowercase and with dashes, such as content-length. Use add_request_environment to report the values a Rack environment holds that are not request headers, naming each one the way Rack names it, such as REMOTE_ADDR.

  In agent mode, both write to the "Environment" sample data, formatted as Rack environment keys. In collector mode, they write different span attributes.

  Together they replace Appsignal.add_headers, which is now deprecated, as it accepts Rack environment keys and works out which ones are headers.

... (truncated)

Commits

• bfef790 Publish version v5.0.0
• 74f6f97 Record the 3.13.2 release in the changelog
• 26603ec Order the changelog by release date
• e770530 Publish version v5.0.0.rc.2
• fc12fd4 Reconcile the 4.x changelog and changesets (#1620)
• fd75018 Start AppSignal before Rails initializers (#1619)
• 992a60c Separate request headers from the Rack environment (#1609)
• 11ab281 Merge pull request #1613 from appsignal/update-agent/0.37.1
• a937988 Update agent to version 0.37.1
• 8b466a5 Support Grape 4 (#1610)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #31.