Bump hot-shots from 15.0.0 to 17.0.0

[dependabot]

Bumps hot-shots from 15.0.0 to 17.0.0.

Changelog

Sourced from hot-shots's changelog.

17.0.0 (2026-7-11)

• @​bdeitte Add opt-in client-side aggregation of counts, gauges and sets via the aggregation option, for better parity with official DogStatsD clients but also for use with any StatsD, DogStatsD or Telegraf client. This includes an aggregation maxContexts option (default 5000) bounding the number of live aggregation contexts; new contexts beyond the cap are sent directly with a one-time warning.
• @​bdeitte Add a public flush() method to send buffered metrics (and any pending aggregated metrics) immediately, useful for serverless and other short-lived environments
• @​bdeitte Support DD_TAGS / DATADOG_TAGS env vars for global tags, for better parity with official DogStatsD clients
• @​bdeitte Support DD_DOGSTATSD_URL and DD_DOGSTATSD_SOCKET env vars for transport configuration, for better parity with official DogStatsD clients
• @​bdeitte Fix dev-dependency security advisories (@​babel/core, js-yaml) via npm audit fix

16.0.0 (2026-6-8)

• @​bdeitte BREAKING: Add Datadog mode for better parity with the official DogStatsD clients. A new datadog option (explicit true/false, or auto-detected from DD_AGENT_HOST/DD_ENV/other DD_* signals) enables:
  • Origin detection — the container ID is detected from cgroups (Linux only) and sent as |c:. Configurable via originDetection, containerID, and DD_ORIGIN_DETECTION_ENABLED.
  • External Data — read from DD_EXTERNAL_ENV and sent as |e:.
  • Cardinality — a client-wide default (cardinality option or DD_CARDINALITY/DATADOG_CARDINALITY) plus a per metric/event/check cardinality option, sent as |card:.
  • Client telemetry (includeDatadogTelemetry) can be enabled like before. But it also now defaults to on whenever Datadog mode is active — an explicit datadog: true or a DD_* env var. The uds protocol alone does not auto-enable Datadog mode or telemetry. This is a breaking change because clients running in a Datadog environment (e.g. with DD_AGENT_HOST set) will auto-detect Datadog mode and begin emitting the new |c:/|e: wire fields and client telemetry. Opt out with datadog: false, originDetection: false, and/or includeDatadogTelemetry: false. Non-Datadog (StatsD/Telegraf) usage is unaffected.

Commits

• 48835af 17.0.0
• caabaa4 Changelog update
• b8a9438 Merge pull request #321 from bdeitte/dogstatsd-parity
• 6b7a00e Remove plan and tweak README
• 3192429 Document aggregation option in README parameter options list
• 1ad552d Remove uneeded changelog and small README fixup
• ec3c252 Add NODE_DEBUG debug logging to aggregator.js key points
• a6a7abf Centralize metric type codes into constants.METRIC_TYPES
• e0b2196 Extract DogStatsD metric type codes into named constants in statsd.js
• a032942 Move cloneTags helper from aggregator.js to helpers.js
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)