Bump the nuget group with 4 updates

[dependabot]

Updated log4net from 3.3.0 to 3.3.1.

Release notes

Sourced from log4net's releases.

3.3.1

What's Changed

• #​281 fix hints and warnings by @​FreeAndNil in #281 fix hints and warnings apache/logging-log4net#281
• Bump picomatch by @​dependabot[bot] in Bump picomatch apache/logging-log4net#284
• Bump convict from 6.2.4 to 6.2.5 by @​dependabot[bot] in Bump convict from 6.2.4 to 6.2.5 apache/logging-log4net#285
• Bump handlebars from 4.7.8 to 4.7.9 by @​dependabot[bot] in Bump handlebars from 4.7.8 to 4.7.9 apache/logging-log4net#286
• Reduce silent log event loss during XmlConfigurator reconfiguration by @​N0tre3l in Reduce silent log event loss during XmlConfigurator reconfiguration apache/logging-log4net#287
• bump internal log4net version for GHSA-4f7c-pmjv-c25w #​289 by @​FreeAndNil in bump internal log4net version for https://github.com/advisories/GHSA-4f7c-pmjv-c25w #289 apache/logging-log4net#289
• preserve UTF-16 surrogate pairs in MaskXmlInvalidCharacters - fixes #​290 by @​FreeAndNil in preserve UTF-16 surrogate pairs in MaskXmlInvalidCharacters - fixes #290 apache/logging-log4net#291

New Contributors

• @​N0tre3l made their first contribution in Reduce silent log event loss during XmlConfigurator reconfiguration apache/logging-log4net#287

Full Changelog: apache/logging-log4net@rel/3.3.0...rel/3.3.1
Nuget: https://www.nuget.org/packages/log4net/3.3.1

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights from 2.22.0 to 3.1.1.

Release notes

Sourced from Microsoft.ApplicationInsights's releases.

3.1.1

Version 3.1.1

• Update OpenTelemetry and Azure Monitor dependencies to address known security advisories (e.g. GHSA-g94r-2vxg-569j in OpenTelemetry.Api 1.15.1): Update OpenTelemetry and Azure Monitor packages to address vulnerabilities microsoft/ApplicationInsights-dotnet#3174
  • OpenTelemetry 1.15.3
  • OpenTelemetry.Exporter.Console 1.15.3
  • OpenTelemetry.Exporter.InMemory 1.15.3
  • OpenTelemetry.Extensions.Hosting 1.15.3
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.2
  • OpenTelemetry.Instrumentation.AspNet 1.15.2
  • OpenTelemetry.Instrumentation.Http 1.15.1
  • OpenTelemetry.Instrumentation.SqlClient 1.15.2
  • Azure.Monitor.OpenTelemetry.Exporter 1.8.0

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

2.23.0

• no changes since beta.

2.23.0-beta1

• Populate required field Message with "n/a" if it is empty
• Fix ITelemetryModule singleton registration to support presence of keyed services

Commits viewable in compare view.

Updated System.Diagnostics.DiagnosticSource from 8.0.1 to 10.0.7.

Release notes

Sourced from System.Diagnostics.DiagnosticSource's releases.

10.0.0-preview.6.25358.103

You can build .NET 10.0 Preview 6 from the repository by cloning the release tag v10.0.0-preview.6.25358.103 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.5.25277.114

You can build .NET 10.0 Preview 5 from the repository by cloning the release tag v10.0.0-preview.5.25277.114 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.4.25258.110

You can build .NET 10.0 Preview 4 from the repository by cloning the release tag v10.0.0-preview.4.25258.110 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.3.25171.5

You can build .NET 10.0 Preview 3 from the repository by cloning the release tag v10.0.0-preview.3.25171.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.2.25163.2

You can build .NET 10.0 Preview 2 from the repository by cloning the release tag v10.0.0-preview.2.25163.2 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.1.25080.5

You can build .NET 10.0 Preview 1 from the repository by cloning the release tag v10.0.0-preview.1.25080.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.116

You can build .NET 9.0 from the repository by cloning the release tag v9.0.116 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.115

You can build .NET 9.0 from the repository by cloning the release tag v9.0.115 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.114

You can build .NET 9.0 from the repository by cloning the release tag v9.0.114 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached is the PGP signature for the GitHub generated tarball. You can find the public key at https://dot.net/release-key-2023

9.0.113

You can build .NET 9.0 from the repository by cloning the release tag v9.0.113 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.112

You can build .NET 9.0 from the repository by cloning the release tag v9.0.112 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.111

You can build .NET 9.0 from the repository by cloning the release tag v9.0.111 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.110

You can build .NET 9.0 from the repository by cloning the release tag v9.0.110 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.109

You can build .NET 9.0 from the repository by cloning the release tag v9.0.109 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.101

You can build .NET 9.0 from the repository by cloning the release tag v9.0.101 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.7

You can build .NET 9.0 from the repository by cloning the release tag v9.0.7 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.6

You can build .NET 9.0 from the repository by cloning the release tag v9.0.6 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.5

You can build .NET 9.0 from the repository by cloning the release tag v9.0.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.4

You can build .NET 9.0 from the repository by cloning the release tag v9.0.4 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.3

You can build .NET 9.0 from the repository by cloning the release tag v9.0.3 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.2

You can build .NET 9.0 from the repository by cloning the release tag v9.0.2 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.1

You can build .NET 9.0 from the repository by cloning the release tag v9.0.1 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.0

You can build .NET 9.0 from the repository by cloning the release tag v9.0.0 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.0-rc.2.24473.5

You can build NET 9.0 RC2 from the repository by cloning the release tag v9.0.0-rc.2.24473.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.0-rc.1.24431.7

You can build .NET 9.0 RC1 from the repository by cloning the release tag v9.0.0-rc.1.24431.7 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.0-preview.7.24405.7

You can build .NET 9.0 Preview 7 from the repository by cloning the release tag v9.0.0-preview.7.24405.7 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.0-preview.6.24327.7

You can build .NET 9.0 Preview 6 from the repository by cloning the release tag v9.0.0-preview.6.24327.7 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.0-preview.5.24306.7

You can build .NET 9.0 Preview 5 from the repository by cloning the release tag v9.0.0-preview.5.24306.7 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.0-preview.4.24266.19

You can build .NET 9.0 Preview 4 from the repository by cloning the release tag v9.0.0-preview.4.24266.19 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.0-preview.3.24172.9

You can build .NET 9.0 Preview 3 from the repository by cloning the release tag v9.0.0-preview.3.24172.9 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.0-preview.2.24128.5

You can build .NET 9.0 Preview 2 from the repository by cloning the release tag v9.0.0-preview.2.24128.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.0-preview.1.24080.9

You can build .NET 9.0 Preview 1 from the repository by cloning the release tag v9.0.0-preview.1.24080.9 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.126

You can build .NET 8.0 from the repository by cloning the release tag v8.0.126 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.125

You can build .NET 8.0 from the repository by cloning the release tag v8.0.125 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.124

You can build .NET 8.0 from the repository by cloning the release tag v8.0.124 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.123

You can build .NET 8.0 from the repository by cloning the release tag v8.0.123 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.122

You can build .NET 8.0 from the repository by cloning the release tag v8.0.122 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.121

You can build .NET 8.0 from the repository by cloning the release tag v8.0.121 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.120

You can build .NET 8.0 from the repository by cloning the release tag v8.0.120 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.119

You can build .NET 8.0 from the repository by cloning the release tag v8.0.119 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.100-preview.1

8.0.18

You can build .NET 8.0 from the repository by cloning the release tag v8.0.18 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.17

You can build .NET 8.0 from the repository by cloning the release tag v8.0.17 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.16

You can build .NET 8.0 from the repository by cloning the release tag v8.0.16 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.15

You can build .NET 8.0 from the repository by cloning the release tag v8.0.15 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.14

You can build .NET 8.0 from the repository by cloning the release tag v8.0.14 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.13

You can build .NET 8.0 from the repository by cloning the release tag v8.0.13 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.12

You can build .NET 8.0 from the repository by cloning the release tag v8.0.12 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.11

You can build .NET 8.0 from the repository by cloning the release tag v8.0.11 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.10

You can build .NET 8.0 from the repository by cloning the release tag v8.0.10 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.8

You can build .NET 8.0 from the repository by cloning the release tag v8.0.8 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.7

You can build .NET 8.0 from the repository by cloning the release tag v8.0.7 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.6

You can build .NET 8.0 from the repository by cloning the release tag v8.0.6 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.5

You can build .NET 8 from the repository by cloning the release tag v8.0.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.4

You can build .NET 8.0 from the repository by cloning the release tag v8.0.4 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.3

You can build .NET 8.0 from the repository by cloning the release tag v8.0.3 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

8.0.2

You can build .NET 8.0 from the repository by cloning the release tag v8.0.2 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Commits viewable in compare view.

Updated System.Runtime.CompilerServices.Unsafe from 6.1.0 to 6.1.2.

Release notes

Sourced from System.Runtime.CompilerServices.Unsafe's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 35 package(s) with unknown licenses.

See the Details below.

License Issues

src/DemoManager.App/packages.config

Package	Version	License	Issue Type
Azure.Core	1.55.0	Null	Unknown License
Azure.Monitor.OpenTelemetry.Exporter	1.8.0	Null	Unknown License
Microsoft.ApplicationInsights	3.1.1	Null	Unknown License
Microsoft.Bcl.AsyncInterfaces	10.0.7	Null	Unknown License
Microsoft.Extensions.Configuration	10.0.7	Null	Unknown License
Microsoft.Extensions.Configuration.Abstractions	10.0.7	Null	Unknown License
Microsoft.Extensions.Configuration.Binder	10.0.7	Null	Unknown License
Microsoft.Extensions.DependencyInjection	10.0.7	Null	Unknown License
Microsoft.Extensions.DependencyInjection.Abstractions	10.0.7	Null	Unknown License
Microsoft.Extensions.Diagnostics.Abstractions	10.0.7	Null	Unknown License
Microsoft.Extensions.FileProviders.Abstractions	10.0.7	Null	Unknown License
Microsoft.Extensions.Hosting.Abstractions	10.0.7	Null	Unknown License
Microsoft.Extensions.Logging	10.0.7	Null	Unknown License
Microsoft.Extensions.Logging.Abstractions	10.0.7	Null	Unknown License
Microsoft.Extensions.Logging.Configuration	10.0.7	Null	Unknown License
Microsoft.Extensions.Options	10.0.7	Null	Unknown License
Microsoft.Extensions.Options.ConfigurationExtensions	10.0.7	Null	Unknown License
Microsoft.Extensions.Primitives	10.0.7	Null	Unknown License
Microsoft.Identity.Client	4.84.0	Null	Unknown License
Microsoft.Identity.Client.Extensions.Msal	4.84.0	Null	Unknown License
Microsoft.IdentityModel.Abstractions	8.18.0	Null	Unknown License
OpenTelemetry	1.15.3	Null	Unknown License
OpenTelemetry.Api	1.15.3	Null	Unknown License
OpenTelemetry.Api.ProviderBuilderExtensions	1.15.3	Null	Unknown License
OpenTelemetry.Extensions.Hosting	1.15.3	Null	Unknown License
OpenTelemetry.PersistentStorage.Abstractions	1.1.0	Null	Unknown License
OpenTelemetry.PersistentStorage.FileSystem	1.1.0	Null	Unknown License
System.ClientModel	1.11.0	Null	Unknown License
System.Diagnostics.DiagnosticSource	10.0.7	Null	Unknown License
System.Formats.Asn1	10.0.7	Null	Unknown License
System.IO.Pipelines	10.0.7	Null	Unknown License
System.Memory.Data	10.0.7	Null	Unknown License
System.Security.Cryptography.ProtectedData	10.0.7	Null	Unknown License
System.Text.Encodings.Web	10.0.7	Null	Unknown License
System.Text.Json	10.0.7	Null	Unknown License

OpenSSF Scorecard

Scorecard details

Package	Version	Score	Details
nuget/Azure.Core	1.55.0	Unknown	Unknown
nuget/Azure.Monitor.OpenTelemetry.Exporter	1.8.0	Unknown	Unknown
nuget/Microsoft.ApplicationInsights	3.1.1	Unknown	Unknown
nuget/Microsoft.Bcl.AsyncInterfaces	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.Configuration	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.Configuration.Abstractions	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.Configuration.Binder	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.DependencyInjection	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.DependencyInjection.Abstractions	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.Diagnostics.Abstractions	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.FileProviders.Abstractions	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.Hosting.Abstractions	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.Logging	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.Logging.Abstractions	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.Logging.Configuration	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.Options	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.Options.ConfigurationExtensions	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.Primitives	10.0.7	Unknown	Unknown
nuget/Microsoft.Identity.Client	4.84.0	Unknown	Unknown
nuget/Microsoft.Identity.Client.Extensions.Msal	4.84.0	Unknown	Unknown
nuget/Microsoft.IdentityModel.Abstractions	8.18.0	Unknown	Unknown
nuget/OpenTelemetry	1.15.3	🟢 8.3	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10 Dependency-Update-Tool 🟢 10 update tool detected Code-Review 🟢 10 all changesets reviewed Binary-Artifacts 🟢 10 no binaries found in the repo Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege CII-Best-Practices 🟢 5 badge detected: Passing Pinned-Dependencies 🟢 10 all dependencies are pinned Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits Packaging 🟢 10 packaging workflow detected Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches License 🟢 10 license file detected Security-Policy 🟢 10 security policy file detected CI-Tests 🟢 10 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 Contributors 🟢 10 project has 37 contributing companies or organizations
nuget/OpenTelemetry.Api	1.15.3	🟢 8.3	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10 Dependency-Update-Tool 🟢 10 update tool detected Code-Review 🟢 10 all changesets reviewed Binary-Artifacts 🟢 10 no binaries found in the repo Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege CII-Best-Practices 🟢 5 badge detected: Passing Pinned-Dependencies 🟢 10 all dependencies are pinned Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits Packaging 🟢 10 packaging workflow detected Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches License 🟢 10 license file detected Security-Policy 🟢 10 security policy file detected CI-Tests 🟢 10 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 Contributors 🟢 10 project has 37 contributing companies or organizations
nuget/OpenTelemetry.Api.ProviderBuilderExtensions	1.15.3	🟢 8.3	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10 Dependency-Update-Tool 🟢 10 update tool detected Code-Review 🟢 10 all changesets reviewed Binary-Artifacts 🟢 10 no binaries found in the repo Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege CII-Best-Practices 🟢 5 badge detected: Passing Pinned-Dependencies 🟢 10 all dependencies are pinned Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits Packaging 🟢 10 packaging workflow detected Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches License 🟢 10 license file detected Security-Policy 🟢 10 security policy file detected CI-Tests 🟢 10 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 Contributors 🟢 10 project has 37 contributing companies or organizations
nuget/OpenTelemetry.Extensions.Hosting	1.15.3	🟢 8.3	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10 Dependency-Update-Tool 🟢 10 update tool detected Code-Review 🟢 10 all changesets reviewed Binary-Artifacts 🟢 10 no binaries found in the repo Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege CII-Best-Practices 🟢 5 badge detected: Passing Pinned-Dependencies 🟢 10 all dependencies are pinned Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits Packaging 🟢 10 packaging workflow detected Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches License 🟢 10 license file detected Security-Policy 🟢 10 security policy file detected CI-Tests 🟢 10 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 Contributors 🟢 10 project has 37 contributing companies or organizations
nuget/OpenTelemetry.PersistentStorage.Abstractions	1.1.0	🟢 8.2	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10 Dependency-Update-Tool 🟢 10 update tool detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 CII-Best-Practices 🟢 5 badge detected: Passing Vulnerabilities 🟢 10 0 existing vulnerabilities detected Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Packaging 🟢 10 packaging workflow detected License 🟢 10 license file detected SAST 🟢 9 SAST tool detected but not run on all commits Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Fuzzing ⚠️ 0 project is not fuzzed Security-Policy 🟢 10 security policy file detected CI-Tests 🟢 10 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 Contributors 🟢 10 project has 23 contributing companies or organizations
nuget/OpenTelemetry.PersistentStorage.FileSystem	1.1.0	🟢 8.2	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10 Dependency-Update-Tool 🟢 10 update tool detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 CII-Best-Practices 🟢 5 badge detected: Passing Vulnerabilities 🟢 10 0 existing vulnerabilities detected Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Packaging 🟢 10 packaging workflow detected License 🟢 10 license file detected SAST 🟢 9 SAST tool detected but not run on all commits Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Fuzzing ⚠️ 0 project is not fuzzed Security-Policy 🟢 10 security policy file detected CI-Tests 🟢 10 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 Contributors 🟢 10 project has 23 contributing companies or organizations
nuget/System.Buffers	4.6.1	Unknown	Unknown
nuget/System.ClientModel	1.11.0	Unknown	Unknown
nuget/System.Diagnostics.DiagnosticSource	10.0.7	Unknown	Unknown
nuget/System.Formats.Asn1	10.0.7	Unknown	Unknown
nuget/System.IO.FileSystem.AccessControl	5.0.0	🟢 6	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 9 Found 24/25 approved changesets -- score normalized to 9 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected License 🟢 10 license file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Signed-Releases ⚠️ -1 no releases found Binary-Artifacts ⚠️ 0 binaries present in source code SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Pinned-Dependencies 🟢 6 dependency not pinned by hash detected -- score normalized to 6 Fuzzing 🟢 10 project is fuzzed
nuget/System.IO.Pipelines	10.0.7	Unknown	Unknown
nuget/System.Memory	4.6.3	Unknown	Unknown
nuget/System.Memory.Data	10.0.7	Unknown	Unknown
nuget/System.Numerics.Vectors	4.6.1	Unknown	Unknown
nuget/System.Runtime.CompilerServices.Unsafe	6.1.2	Unknown	Unknown
nuget/System.Security.AccessControl	6.0.1	🟢 6	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 9 Found 24/25 approved changesets -- score normalized to 9 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected License 🟢 10 license file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Signed-Releases ⚠️ -1 no releases found Binary-Artifacts ⚠️ 0 binaries present in source code SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Pinned-Dependencies 🟢 6 dependency not pinned by hash detected -- score normalized to 6 Fuzzing 🟢 10 project is fuzzed
nuget/System.Security.Cryptography.ProtectedData	10.0.7	Unknown	Unknown
nuget/System.Security.Principal.Windows	5.0.0	🟢 6	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 9 Found 24/25 approved changesets -- score normalized to 9 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected License 🟢 10 license file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Signed-Releases ⚠️ -1 no releases found Binary-Artifacts ⚠️ 0 binaries present in source code SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Pinned-Dependencies 🟢 6 dependency not pinned by hash detected -- score normalized to 6 Fuzzing 🟢 10 project is fuzzed
nuget/System.Text.Encodings.Web	10.0.7	Unknown	Unknown
nuget/System.Text.Json	10.0.7	Unknown	Unknown
nuget/System.Threading.Tasks.Extensions	4.6.3	Unknown	Unknown
nuget/System.ValueTuple	4.6.2	Unknown	Unknown
nuget/log4net	3.3.1	🟢 5.1	Details Check Score Reason Code-Review 🟢 3 Found 8/23 approved changesets -- score normalized to 3 Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 10 17 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Binary-Artifacts 🟢 9 binaries present in source code Signed-Releases 🟢 8 5 out of the last 5 releases have a total of 5 signed artifacts. Security-Policy 🟢 10 security policy file detected Fuzzing ⚠️ 0 project is not fuzzed Pinned-Dependencies ⚠️ 2 dependency not pinned by hash detected -- score normalized to 2 SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0

Scanned Files

• src/DemoManager.App/packages.config

[github-actions]

🏗️ Terraform Plan

🌍 Environment: prd

✅ Validate — Passed

✅ Plan

	Count
🔄 Change	1

📋 Resource Details

Action	Resource
🔄 Update	azurerm_storage_account.artifact_storage

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud