deps: Bump the microsoft-extensions group with 1 update#18
deps: Bump the microsoft-extensions group with 1 update#18dependabot[bot] wants to merge 3 commits into
Conversation
Bumps Microsoft.ApplicationInsights.WorkerService from 2.23.0 to 3.1.0 --- updated-dependencies: - dependency-name: Microsoft.ApplicationInsights.WorkerService dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: microsoft-extensions - dependency-name: Microsoft.ApplicationInsights.WorkerService dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: microsoft-extensions ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
Microsoft.ApplicationInsights.WorkerService 3.1.0 transitively pulls OpenTelemetry.Api 1.15.1, which has a moderate-severity advisory (GHSA-g94r-2vxg-569j). NuGet's audit step under -warnaserror fails the restore. Pin OpenTelemetry.Api to 1.15.3 (latest patched stable in the 1.15.x line) directly in Notify.IngestionApi.csproj. The transitive pin propagates to Notify.IngestionApi.Tests via the project reference. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
|
Closing — pushes to dependabot's branch weren't retriggering CI. Manually applying the bump + the OpenTelemetry.Api 1.15.3 pin (GHSA-g94r-2vxg-569j) on a fresh branch instead. |
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
… pin OTel (#21) Manual landing of dependabot's #18 plus the GHSA-g94r-2vxg-569j fix: 3.1.0 pulls OpenTelemetry.Api 1.15.1 transitively, which has a moderate-severity advisory. NuGet's audit step under -warnaserror fails restore unless we pin a patched version directly. Pin OpenTelemetry.Api → 1.15.3 (latest patched stable in the 1.15.x line). The transitive pin propagates to Notify.IngestionApi.Tests via project reference. Closed dependabot's PR #18 because pushes to its branch weren't retriggering CI for unclear reasons (close+reopen + empty commits + the fix push all produced zero workflow runs). Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
Updated Microsoft.ApplicationInsights.WorkerService from 2.23.0 to 3.1.0.
Release notes
Sourced from Microsoft.ApplicationInsights.WorkerService's releases.
3.1.0
Version 3.1.0
TelemetryContextproperties public and propagate them viaTelemetryClient.APPLICATIONINSIGHTS_CONNECTION_STRINGenvironment variable for Base, Web, and NLog packages when connection string is not set via code.OTEL_SDK_DISABLEDnot being honored whenTelemetryConfiguration.DisableTelemetryis set in DI scenarios., #3157TrackAvailabilityignoring user-specifiedTimestamponAvailabilityTelemetry. The timestamp is now emitted asmicrosoft.availability.testTimestampso downstream exporters can use the correct event time.netstandard2.0target framework toMicrosoft.ApplicationInsightspackage to support customers with shared libraries targeting netstandard2.0.TelemetryClient.Context.Cloud.RoleNameset after construction now applies to all telemetry.NullReferenceExceptioninTelemetryClient.Flush()andFlushAsync()when called from DI scenariosApplicationVersionignored:ApplicationInsightsServiceOptions.ApplicationVersionis now applied asservice.versionon the OpenTelemetry Resource for both AspNetCore and WorkerService packagesHttpRequestExtensions.UnvalidatedGetHeaderalways returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.3.0.0
netstandard2.0withnet8.0target framework inMicrosoft.ApplicationInsights.NLogTargetpackage.3.0.0-rc1
netstandard2.0target framework fromMicrosoft.ApplicationInsights,Microsoft.ApplicationInsights.AspNetCore, andMicrosoft.ApplicationInsights.WorkerServicepackages.Microsoft.ApplicationInsights.AspNetCorehas been updated to version 10.EnabledAdaptiveSamplingand replaced withTracesPerSecondandSamplingRatioEnableTraceBasedLogsSamplerproperty toApplicationInsightsServiceOptionsfor ASP.NET Core and WorkerService packagesStorageDirectoryandDisableOfflineStoragefromTelemetryConfigurationin DI scenarios3.0.0-beta2
Added
Bug fix
3.0.0-beta1
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions