Bump the minor-and-patch group with 2 updates

[dependabot]

Updated Azure.Monitor.OpenTelemetry.AspNetCore from 1.4.0 to 1.5.0.

Release notes

Sourced from Azure.Monitor.OpenTelemetry.AspNetCore's releases.

1.5.0

1.5.0 (2026-04-30)

Features Added

• Add ability to specify EnableStandardMetrics and EnablePerformanceCounters
  (#​56438)

Breaking Changes

• Default Sampler Changed: The default sampling behavior has been changed from
  ApplicationInsightsSampler with 100% sampling (all traces sampled) to
  RateLimitedSampler with 5.0 traces per second. This change significantly
  reduces telemetry volume for high-traffic applications and provides better
  cost optimization out of the box.
  Impact: Applications with more than 5 requests per second will see fewer
  traces exported by default.
  Migration: To maintain the previous behavior (100% sampling), explicitly
  configure the sampler:

// Option 1: Set SamplingRatio and clear TracesPerSecond
builder.Services.AddOpenTelemetry()
    .UseAzureMonitor(options =>
    {
        options.SamplingRatio = 1.0f;
        options.TracesPerSecond = null;
    });
// Option 2: Use environment variables
// OTEL_TRACES_SAMPLER=microsoft.fixed_percentage
// OTEL_TRACES_SAMPLER_ARG=1.0

Bugs Fixed

• Fixed an issue where Azure Container Apps instances were showing VM instance GUIDs
  instead of replica names in the Role Instance field.
  (#​54586)

1.5.0-beta.1

1.5.0-beta.1 (2026-04-28)

Features Added

• Upgraded api-version tag from package-2024-05-01 to package-preview-2025-06. Tag detail available at https://github.com/Azure/azure-rest-api-specs/blob/main/specification/appconfiguration/resource-manager/readme.md.
• Added AzureFrontDoor property to AppConfigurationStoreData and AppConfigurationStorePatch to support Azure Front Door configuration for a configuration store.
• Added new model AppConfigurationAzureFrontDoorProperties with a ResourceId property representing an Azure Front Door profile resource ID.

1.4.2

1.4.2 (2026-04-28)

Other Changes

• Upgraded dependent Azure.Core to 1.54.0.
• Upgraded dependent Azure.ResourceManager to 1.14.0.

1.4.1

1.4.1 (2026-04-27)

Other Changes

• Upgraded dependent Azure.Core to 1.54.0.
• Upgraded dependent Azure.ResourceManager to 1.14.0.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.4.0 to 18.5.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.5.1

What's Changed

• Fix System.Collections.Immutable binding mismatch in Common.dll (rel/18.5) by @​nohwnd in Fix System.Collections.Immutable binding mismatch in Common.dll (rel/18.5) microsoft/vstest#15720
• Port verify-binding-redirects.ps1 to rel/18.5 by @​nohwnd in Port verify-binding-redirects.ps1 to rel/18.5 microsoft/vstest#15719
• Bump to 18.5.1 by @​nohwnd in Bump to 18.5.1 microsoft/vstest#15721

Full Changelog: microsoft/vstest@v18.5.0...v18.5.1

18.5.0

⚠️ Unlisted on Nuget, because of #​15718

What's Changed

• Add runtime configs by @​nohwnd in Add runtime configs microsoft/vstest#15377
• Add net8.0 target for TranslationLayer by @​nohwnd in Add net8.0 target for TranslationLayer microsoft/vstest#15375
• Determine architecture of remote process on windows by @​nohwnd in Determine architecture of remote process on windows microsoft/vstest#15396
• Updating System.Collections.Immutable package reference to version 9.0.0 by @​MSLukeWest in Updating System.Collections.Immutable package reference to version 9.0.0 microsoft/vstest#15392
• Dump via netcore tool on windows by @​nohwnd in Dump via netcore tool on windows microsoft/vstest#15397
• Fix answer file splitting by @​nohwnd in Fix answer file splitting microsoft/vstest#15381
• Run tests against vsix runner by @​nohwnd in Run tests against vsix runner microsoft/vstest#15419

Full Changelog: microsoft/vstest@v18.4.0...v18.5.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: tests. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[henrik-me]

Local pre-merge validation (GPT-5.5 final-diff review)

Validated in worktree from PR head f884ed0:

• Diff scope: 2 expected csproj package-version lines only.
• dotnet restore clean
• dotnet build -c Release 0 errors (only pre-existing xUnit1051 warnings)
• dotnet test ΓåÆ 109/109 passed
• Full Playwright E2E suite ΓåÆ 32/32 passed
• dotnet list ... --vulnerable --include-transitive ΓåÆ no vulnerable packages
• No public CVEs found for either target version

One decision documented

Azure.Monitor.OpenTelemetry.AspNetCore 1.5.0 contains a documented Breaking Change:

Default Sampler Changed: from ApplicationInsightsSampler at 100% sampling to RateLimitedSampler at 5 traces/sec.
(changelog)

Decision: accept the new default (no code change). Rationale:

• np.metzger.dk runs on Container Apps Consumption tier (scale-to-zero), with sustained traffic well below 5 req/sec; 100% of traces will continue to be retained in practice.
• The new default is better aligned with the App Insights free 5 GB/mo tier.
• If traffic ever exceeds 5 req/sec sustained, we can opt back into 100% sampling via UseAzureMonitor(o => { o.SamplingRatio = 1.0f; o.TracesPerSecond = null; }).

CONTEXT.md will be updated as part of the merge to record this.

[Copilot]

Pull request overview

Updates backend/test dependencies in the .NET solution, primarily bumping Azure Monitor OpenTelemetry integration and the .NET test SDK.

Changes:

• Bump Azure.Monitor.OpenTelemetry.AspNetCore from 1.4.0 to 1.5.0 in the API project.
• Bump Microsoft.NET.Test.Sdk from 18.4.0 to 18.5.1 in the API test project.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
src/api/NaturalizationPuzzle.Api.csproj	Updates Azure Monitor OpenTelemetry package version used by the API.
tests/api/NaturalizationPuzzle.Api.Tests.csproj	Updates test SDK package version used by xUnit test project.

[henrik-me]

Dependabot PR validated locally per repo conventions: GPT-5.5 final-diff review (plan+diff for #57 as a major bump), full pre-push verification (build/test/E2E), Copilot PR review loop completed with all threads resolved. Approving as the human reviewer to satisfy the branch ruleset's required-approval gate.