Update Java SSI deny rules and fix Java 7 exclusion

[annacai21]

What Does This Do

Updates the SSI workload-selection rules in metadata/requirements.json, which decide which Java processes single-step instrumentation injects the tracer into. requirements.json is regenerated from the generator inputs (base-requirements.json, denied-arguments.tsv, denied-environment-variables.tsv) instead of edited by hand.

Changes include:

• New deny rules:
  • java_xshare_dump: skips injection for java -Xshare:dump (building the CDS archive).
  • java_ca_certificates_java_jar: skips injection for the ca-certificates-java certificate management utility (/usr/share/ca-certificates-java/ca-certificates-java.jar).
• Looser -version / --version matching: java8_version and java_version deny rules now use "position": null instead of 1.
• Descriptions on native_deps: each glibc/musl arch entry gets a description.
• Wording: rule descriptions say "Exclude …" instead of "Skip …".

Motivation

dd-trace-java is the source of truth for Java's SSI requirements, and auto_inject should sync its fallback copy from this repo. Some rules had only been added within the auto_inject repo. This brings them here and corrects issues found along the way.

Additional Notes

Contributor Checklist

• Format the title according to the contribution guidelines
• Assign the type: and (comp: or inst:) labels in addition to any other useful labels
• Avoid using close, fix, or any linking keywords when referencing an issue
  Use solves instead, and assign the PR milestone to the issue
• Update the CODEOWNERS file on source file addition, migration, or deletion
• Update public documentation with any new configuration flags or behaviors
• Once approved, use merge queue to merge the PR

Jira ticket: [PROJ-IDENT]

[dd-octo-sts]

🟢 Java Benchmark SLOs — All performance SLOs passed

Suite	Status
Startup	🟢 pass

SLO thresholds are defined here based on automatically generated metrics. A warning is raised when results are within 5% of the threshold.

PR vs. master results

Scenario	Candidate	master	Δ (95% CI of mean)
startup:insecure-bank:iast:Agent	14.02 s	13.98 s	[-0.6%; +1.1%] (no difference)
startup:insecure-bank:tracing:Agent	12.93 s	13.00 s	[-1.1%; +0.1%] (no difference)
startup:petclinic:appsec:Agent	17.22 s	17.23 s	[-1.0%; +0.8%] (no difference)
startup:petclinic:iast:Agent	17.02 s	17.13 s	[-1.5%; +0.2%] (no difference)
startup:petclinic:profiling:Agent	16.74 s	16.92 s	[-2.2%; +0.1%] (no difference)
startup:petclinic:sca:Agent	17.16 s	17.12 s	[-0.7%; +1.2%] (no difference)
startup:petclinic:tracing:Agent	16.24 s	16.10 s	[-0.2%; +1.9%] (no difference)

Commit: dd2036a1 · CI Pipeline · Benchmarking Platform UI

---

Load and DaCapo benchmarks can be triggered manually in the GitLab pipeline. Results will appear in the Benchmarking Platform UI after completion.