DataDome Tyk module

1.4.0 (2026-08-24)

Add datadome_graphql_endpoint option to define the path(s) used to detect GraphQL requests (comma-separated list, defaults to graphql)
Add datadome_use_x_forwarded_host option to support host override via the X-Forwarded-Host header
Upgrade the DataDome Go module to v2.5.0
- Add support for 301/302 redirections returned by the Protection API
- Rely on Protection API response headers instead of hard-coded status codes, enabling seamless support for upcoming features
- Collect the Sec-Fetch-Storage-Access header and the cookie list
- Extend the default URL pattern exclusion
- Detect GraphQL requests when Content-Type includes a charset
Route DataDome logs through the Tyk logger; datadome_debug now promotes DataDome debug output to the info level so it is visible at Tyk's default log level
Fix a 500 error returned on every request when the API definition has no config_data.datadome section (environment-variable-only configuration)
Accept non-string values in config_data.datadome (e.g. "datadome_timeout": 300) and log invalid values instead of silently falling back to the default

Add datadome_enable_referrer_restoration option to enable the referrer restoration
Remove the go-core directory to rely on module-go-package

Add GraphQL support for POST requests
- Add datadome_enable_graphql_support option to enable GraphQL support
Add debug logs and enhance log outputs
- Add datadome_debug option to enable debug mode

Fix the timestamp sent to the API to ensure calculation of request durations
Update regex matching to cover the entire URL and simplify the configuration
Fix default URL pattern exclusions to maintain a consistent regex format across all platforms
Add truncation limits to prevent large payloads to be sent to the API