Update ddtrace requirement from ~=2.7.0 to ~=2.8.5

[dependabot]

Updates the requirements on ddtrace to permit the latest version.

Release notes

Sourced from ddtrace's releases.

2.8.5

Known Issues

• Code Security: Security tracing for the builtins.open function is experimental and may not be stable. This aspect is not replaced by default.
• grpc: Tracing for the grpc.aio clients and servers is experimental and may not be stable. This integration is now disabled by default.

Bug Fixes

• fix(grpc): This fix a bug in the grpc.aio support specific to streaming responses.
• RemoteConfig: This fix resolves an issue where remote config did not work for the tracer when using an agent that would add a flare item to the remote config payload. With this fix, the tracer will now correctly pull out the lib_config we need from the payload in order to implement remote config changes properly.

Changelog

Sourced from ddtrace's changelog.

2.8.5

Known Issues

• Code Security: Security tracing for the builtins.open function is experimental and may not be stable. This aspect is not replaced by default.
• grpc: Tracing for the grpc.aio clients and servers is experimental and may not be stable. This integration is now disabled by default.

Bug Fixes

• fix(grpc): This fix a bug in the grpc.aio support specific to streaming responses.
• RemoteConfig: This fix resolves an issue where remote config did not work for the tracer when using an agent that would add a flare item to the remote config payload. With this fix, the tracer will now correctly pull out the lib_config we need from the payload in order to implement remote config changes properly.

---

2.8.4

Bug Fixes

• telemetry: This fix resolves an issue when using pytest + gevent where the telemetry writer was eager initialized by pytest entrypoints loading of our plugin causing a potential dead lock.

---

2.7.10

Bug Fixes

• Code Security: This fix solves an issue with fstrings where formatting was not applied to int parameters
• logging: This fix resolves an issue where tracer.get_log_correlation_context() incorrectly returned a 128-bit trace_id even with DD_TRACE_128_BIT_TRACEID_LOGGING_ENABLED set to False (the default), breaking log correlation. It now returns a 64-bit trace_id.
• profiling: Fixes a defect where the deprecated path to the Datadog span type was used by the profiler.

---

2.8.3

Bug Fixes

• Code Security: This fix solves an issue with fstrings where formatting was not applied to int parameters
• logging: This fix resolves an issue where tracer.get_log_correlation_context() incorrectly returned a 128-bit trace_id even with DD_TRACE_128_BIT_TRACEID_LOGGING_ENABLED set to False (the default), breaking log correlation. It now returns a 64-bit trace_id.
• profiling: Fixes a defect where the deprecated path to the Datadog span type was used by the profiler.

---

2.6.12

... (truncated)

Commits

• b31181a fix(iast): empty insecure cookies [backport 2.8] (#9295)
• b831c3f fix(asm): workaround disabling builtins.open aspects [backport 2.8] (#9252)
• 5866dad perf(iast): improve performance for patching decision (#9265) (#9292)
• 98eb943 fix(iast): ensure no side-effects in IAST encode aspect [backport 2.8] (#9258)
• 3d7ede7 fix(grpc): fix segfault with grpc.aio streaming responses [backport 2.8] (#9274)
• ab9ca08 fix(remoteconfig): fix remoteconfig when flare data in payload [backport 2.8]...
• b93d994 fix(grpc): disable aio support [backport 2.8] (#9200)
• 9f0aa46 chore(profiling): pin version of echion dependency [backport 2.8] (#9178)
• a5ee561 fix: pytest deadlock when using gevent [backport 2.8] (#9166)
• d8a5718 ci: temporarily disable vertica test suite (#9110) (#9117)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #597.