[pull] master from DataDog:master

.generator/schemas/v1/openapi.yaml

@@ -20355,6 +20355,10 @@ components:
         ignoreServerCertificateError:
           description: Ignore server certificate error for browser tests.
           type: boolean
+        ignore_certificate_validation:
+          description: |-
+            For SSL tests, whether or not the test should ignore certificate validation.
+          type: boolean
         initialNavigationTimeout:
           description: Timeout before declaring the initial step as failed (in seconds) for browser tests.
           format: int64

.generator/schemas/v2/openapi.yaml

@@ -36905,7 +36905,7 @@ components:
         product:
           description: |-
             Name of the product the dataset is for. Possible values are 'apm', 'rum',
-            'metrics', 'logs', 'error_tracking', 'cloud_cost', and 'sd_repoinfo'.
+            'metrics', 'logs', 'error_tracking', 'cloud_cost', 'sd_repoinfo', and 'secruntime'.
           example: "logs"
           type: string
       required:
@@ -168771,7 +168771,21 @@ paths:
         permissions:
           - user_access_read
     post:
-      description: Create a new role for your organization.
+      description: |-
+        Create a new role for your organization.
+
+        The following read permissions are automatically added to every new role, even if they are not included in the request:
+
+        - Dashboards Read
+        - Notebooks Read
+        - Monitors Read
+        - APM Read
+        - Vulnerability Management Read
+        - RUM Apps Read
+        - Incidents Read
+        - SLOs Read
+        - CI Visibility Read
+        - CD Visibility Read
       operationId: CreateRole
       requestBody:
         content:

cassettes/features/v1/synthetics/Create-an-API-SSL-test-returns-OK-Returns-the-created-test-details-response.frozen

@@ -1 +1 @@
-2025-07-11T17:23:57.607Z
+2026-07-10T09:46:57.309Z

examples/v1/synthetics/CreateSyntheticsAPITest_1072503741.rb

@@ -26,6 +26,7 @@
     accept_self_signed: true,
     check_certificate_revocation: true,
     disable_aia_intermediate_fetching: true,
+    ignore_certificate_validation: true,
     tick_every: 60,
   }),
   subtype: DatadogAPIClient::V1::SyntheticsTestDetailsSubType::SSL,

features/v1/synthetics.feature

@@ -246,6 +246,7 @@ Feature: Synthetics
     When the request is sent
     Then the response status is 200 OK - Returns the created test details.
     And the response "name" is equal to "{{ unique }}"
+    And the response "options.ignore_certificate_validation" is equal to true
 
   @generated @skip @team:DataDog/synthetics-orchestrating-managing
   Scenario: Create an API test returns "- JSON format is wrong" response

features/v1/synthetics_api_ssl_test_payload.json

@@ -19,6 +19,7 @@
     "accept_self_signed": true,
     "checkCertificateRevocation": true,
     "disableAiaIntermediateFetching": true,
+    "ignore_certificate_validation": true,
     "tick_every": 60
   },
   "subtype": "ssl",

lib/datadog_api_client/v1/models/synthetics_test_options.rb

@@ -67,6 +67,9 @@ class SyntheticsTestOptions
     # Ignore server certificate error for browser tests.
     attr_accessor :ignore_server_certificate_error
 
+    # For SSL tests, whether or not the test should ignore certificate validation.
+    attr_accessor :ignore_certificate_validation
+
     # Timeout before declaring the initial step as failed (in seconds) for browser tests.
     attr_accessor :initial_navigation_timeout
 
@@ -136,6 +139,7 @@ def self.attribute_map
         :'follow_redirects' => :'follow_redirects',
         :'http_version' => :'httpVersion',
         :'ignore_server_certificate_error' => :'ignoreServerCertificateError',
+        :'ignore_certificate_validation' => :'ignore_certificate_validation',
         :'initial_navigation_timeout' => :'initialNavigationTimeout',
         :'min_failure_duration' => :'min_failure_duration',
         :'min_location_failed' => :'min_location_failed',
@@ -170,6 +174,7 @@ def self.openapi_types
         :'follow_redirects' => :'Boolean',
         :'http_version' => :'SyntheticsTestOptionsHTTPVersion',
         :'ignore_server_certificate_error' => :'Boolean',
+        :'ignore_certificate_validation' => :'Boolean',
         :'initial_navigation_timeout' => :'Integer',
         :'min_failure_duration' => :'Integer',
         :'min_location_failed' => :'Integer',
@@ -267,6 +272,10 @@ def initialize(attributes = {})
         self.ignore_server_certificate_error = attributes[:'ignore_server_certificate_error']
       end
 
+      if attributes.key?(:'ignore_certificate_validation')
+        self.ignore_certificate_validation = attributes[:'ignore_certificate_validation']
+      end
+
       if attributes.key?(:'initial_navigation_timeout')
         self.initial_navigation_timeout = attributes[:'initial_navigation_timeout']
       end
@@ -396,6 +405,7 @@ def ==(o)
           follow_redirects == o.follow_redirects &&
           http_version == o.http_version &&
           ignore_server_certificate_error == o.ignore_server_certificate_error &&
+          ignore_certificate_validation == o.ignore_certificate_validation &&
           initial_navigation_timeout == o.initial_navigation_timeout &&
           min_failure_duration == o.min_failure_duration &&
           min_location_failed == o.min_location_failed &&
@@ -415,7 +425,7 @@ def ==(o)
     # @return [Integer] Hash code
     # @!visibility private
     def hash
-      [accept_self_signed, allow_insecure, blocked_request_patterns, capture_network_payloads, check_certificate_revocation, ci, device_ids, disable_aia_intermediate_fetching, disable_cors, disable_csp, enable_profiling, enable_security_testing, follow_redirects, http_version, ignore_server_certificate_error, initial_navigation_timeout, min_failure_duration, min_location_failed, monitor_name, monitor_options, monitor_priority, no_screenshot, restricted_roles, _retry, rum_settings, scheduling, tick_every, additional_properties].hash
+      [accept_self_signed, allow_insecure, blocked_request_patterns, capture_network_payloads, check_certificate_revocation, ci, device_ids, disable_aia_intermediate_fetching, disable_cors, disable_csp, enable_profiling, enable_security_testing, follow_redirects, http_version, ignore_server_certificate_error, ignore_certificate_validation, initial_navigation_timeout, min_failure_duration, min_location_failed, monitor_name, monitor_options, monitor_priority, no_screenshot, restricted_roles, _retry, rum_settings, scheduling, tick_every, additional_properties].hash
     end
   end
 end

lib/datadog_api_client/v2/api/roles_api.rb

@@ -251,6 +251,19 @@ def create_role(body, opts = {})
     #
     # Create a new role for your organization.
     #
+    # The following read permissions are automatically added to every new role, even if they are not included in the request:
+    #
+    # - Dashboards Read
+    # - Notebooks Read
+    # - Monitors Read
+    # - APM Read
+    # - Vulnerability Management Read
+    # - RUM Apps Read
+    # - Incidents Read
+    # - SLOs Read
+    # - CI Visibility Read
+    # - CD Visibility Read
+    #
     # @param body [RoleCreateRequest] 
     # @param opts [Hash] the optional parameters
     # @return [Array<(RoleCreateResponse, Integer, Hash)>] RoleCreateResponse data, response status code and response headers

lib/datadog_api_client/v2/models/filters_per_product.rb

@@ -28,7 +28,7 @@ class FiltersPerProduct
     attr_reader :filters
 
     # Name of the product the dataset is for. Possible values are 'apm', 'rum',
-    # 'metrics', 'logs', 'error_tracking', 'cloud_cost', and 'sd_repoinfo'.
+    # 'metrics', 'logs', 'error_tracking', 'cloud_cost', 'sd_repoinfo', and 'secruntime'.
     attr_reader :product
 
     attr_accessor :additional_properties