Skip to content

Bump Microsoft.ApplicationInsights and 4 others#31

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/src/MX.Platform.SiteWatch.App/nuget-0ae8f36b95
Open

Bump Microsoft.ApplicationInsights and 4 others#31
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/src/MX.Platform.SiteWatch.App/nuget-0ae8f36b95

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 5, 2026

Updated Microsoft.ApplicationInsights from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights's releases.

3.1.0

Version 3.1.0

3.0.0

3.0.0-rc1

3.0.0-beta2

Added

  • Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
  • Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
  • Added Self Diagnostics feature
  • Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
  • Update Azure Monitor Exporter to 1.6.0-beta.2
  • Add comprehensive applicationinsights.config support
  • Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

  • Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

  • The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
    • Microsoft.ApplicationInsights
    • Microsoft.ApplicationInsights.AspNetCore
    • Microsoft.ApplicationInsights.WorkerService
    • Microsoft.ApplicationInsights.Web
    • Microsoft.ApplicationInsights.NLogTarget
  • Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
  • Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights.WorkerService from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights.WorkerService's releases.

3.1.0

Version 3.1.0

3.0.0

3.0.0-rc1

3.0.0-beta2

Added

  • Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
  • Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
  • Added Self Diagnostics feature
  • Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
  • Update Azure Monitor Exporter to 1.6.0-beta.2
  • Add comprehensive applicationinsights.config support
  • Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

  • Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

  • The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
    • Microsoft.ApplicationInsights
    • Microsoft.ApplicationInsights.AspNetCore
    • Microsoft.ApplicationInsights.WorkerService
    • Microsoft.ApplicationInsights.Web
    • Microsoft.ApplicationInsights.NLogTarget
  • Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
  • Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.UserSecrets from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Configuration.UserSecrets's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Polly from 8.6.5 to 8.6.6.

Release notes

Sourced from Polly's releases.

8.6.6

Highlights

What's Changed

New Contributors

Full Changelog: App-vNext/Polly@8.6.5...8.6.6

Commits viewable in compare view.

@dependabot dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Apr 5, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 5, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 3 package(s) with unknown licenses.
See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 6af0767.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

src/MX.Platform.SiteWatch.App/MX.Platform.SiteWatch.App.csproj

PackageVersionLicenseIssue Type
Microsoft.ApplicationInsights3.1.0NullUnknown License
Microsoft.ApplicationInsights.WorkerService3.1.0NullUnknown License
Microsoft.Extensions.Diagnostics.HealthChecks10.0.5NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
nuget/Microsoft.ApplicationInsights 3.1.0 UnknownUnknown
nuget/Microsoft.ApplicationInsights.WorkerService 3.1.0 UnknownUnknown
nuget/Microsoft.Extensions.Configuration.UserSecrets 10.0.5 UnknownUnknown
nuget/Microsoft.Extensions.Diagnostics.HealthChecks 10.0.5 UnknownUnknown
nuget/Polly 8.6.6 🟢 7.8
Details
CheckScoreReason
Code-Review⚠️ 0Found 0/6 approved changesets -- score normalized to 0
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Vulnerabilities🟢 100 existing vulnerabilities detected
CII-Best-Practices🟢 5badge detected: Passing
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST🟢 10SAST tool is run on all commits
License🟢 10license file detected
Packaging🟢 10packaging workflow detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 25 contributing companies or organizations

Scanned Files

  • src/MX.Platform.SiteWatch.App/MX.Platform.SiteWatch.App.csproj

@github-actions github-actions bot enabled auto-merge (squash) April 5, 2026 05:19
@dependabot dependabot bot changed the title Bump the nuget group with 5 updates Bump Microsoft.ApplicationInsights and 4 others Apr 12, 2026
Bumps Microsoft.ApplicationInsights from 2.23.0 to 3.1.0
Bumps Microsoft.ApplicationInsights.WorkerService from 2.23.0 to 3.1.0
Bumps Microsoft.Extensions.Configuration.UserSecrets from 10.0.3 to 10.0.5
Bumps Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.3 to 10.0.5
Bumps Polly from 8.6.5 to 8.6.6

---
updated-dependencies:
- dependency-name: Microsoft.ApplicationInsights
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: Microsoft.ApplicationInsights.WorkerService
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Configuration.UserSecrets
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Polly
  dependency-version: 8.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/nuget/src/MX.Platform.SiteWatch.App/nuget-0ae8f36b95 branch from 8203931 to 6af0767 Compare April 12, 2026 05:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant