Bump AWSSDK.S3 and 21 others by dependabot[bot] · Pull Request #333 · piwas-21/restaurant-app-backend

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #7610 by @jozkee (co-authored by @jeffhandley @Copilot)
New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #7549 by @javiercn (co-authored by @Copilot)

What's Changed

AI

Upgrade OpenAI dependency to 2.12.0 #7608 by @jozkee (co-authored by @Copilot)
Auto-detect audio format in OpenAISpeechToTextClient #7575 by @jozkee (co-authored by @Copilot)
Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #7624 by @jozkee (co-authored by @Copilot)

Vector Data

Make all test methods virtual in VectorData.ConformanceTests #7606 by @adamsitnik (co-authored by @Copilot)

Documentation Updates

Remove links to ai-samples repo #7574 by @gewarren
Fix up docs with Copilot (MEVD) #7597 by @gewarren
Fix up docs with Copilot (M.E.ServiceDiscovery) #7598 by @gewarren (co-authored by @Copilot)
Fix up docs with Copilot (MEAI) #7600 by @gewarren
Fix up docs with Copilot #7601 by @gewarren

Test Improvements

Fix flaky StampedeTests and harden related test waits #7572 by @jeffhandley (co-authored by @Copilot)
Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #7579 by @adamsitnik (co-authored by @Copilot)
Removing SemanticKernel Connectors dependency and replacing it #7584 by @adamsitnik (co-authored by @Copilot)
Migrate to xUnit v3 #7607 by @adamsitnik (co-authored by @shyamnamboodiripad @Copilot)

Repository Infrastructure Updates

Update OTel GenAI conventions skill for standalone semconv-genai repo #7519 by @jeffhandley (co-authored by @Copilot)
Bump dotnet-coverage from 18.7.0 to 18.8.0 #7552
[main] Update dependencies from dotnet/arcade #7559
Fix transitive MessagePack vulnerability in AI template AppHost projects #7561 by @adamsitnik (co-authored by @Copilot)
Bump esbuild, @vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7564
Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7569
Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7570
Bump PowerShell from 7.6.2 to 7.6.3 #7576
Remove duplicate 'WebAPI' classification from template #7577 by @danroth27
[main] Update dependencies from dotnet/arcade #7590
Eliminate redundant Correctness CI stage by merging into Build #7594 by @adamsitnik (co-authored by @Copilot)
Update Agent Framework to 1.13.0 #7613 by @jeffhandley (co-authored by @Copilot)
... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Identity.Stores from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Identity.Stores's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.ServiceDiscovery at 10.8.0.

Release notes

Sourced from Microsoft.Extensions.ServiceDiscovery's releases.

10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #7610 by @jozkee (co-authored by @jeffhandley @Copilot)
New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #7549 by @javiercn (co-authored by @Copilot)

What's Changed

AI

Upgrade OpenAI dependency to 2.12.0 #7608 by @jozkee (co-authored by @Copilot)
Auto-detect audio format in OpenAISpeechToTextClient #7575 by @jozkee (co-authored by @Copilot)
Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #7624 by @jozkee (co-authored by @Copilot)

Vector Data

Make all test methods virtual in VectorData.ConformanceTests #7606 by @adamsitnik (co-authored by @Copilot)

Documentation Updates

Remove links to ai-samples repo #7574 by @gewarren
Fix up docs with Copilot (MEVD) #7597 by @gewarren
Fix up docs with Copilot (M.E.ServiceDiscovery) #7598 by @gewarren (co-authored by @Copilot)
Fix up docs with Copilot (MEAI) #7600 by @gewarren
Fix up docs with Copilot #7601 by @gewarren

Test Improvements

Fix flaky StampedeTests and harden related test waits #7572 by @jeffhandley (co-authored by @Copilot)
Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #7579 by @adamsitnik (co-authored by @Copilot)
Removing SemanticKernel Connectors dependency and replacing it #7584 by @adamsitnik (co-authored by @Copilot)
Migrate to xUnit v3 #7607 by @adamsitnik (co-authored by @shyamnamboodiripad @Copilot)

Repository Infrastructure Updates

Update OTel GenAI conventions skill for standalone semconv-genai repo #7519 by @jeffhandley (co-authored by @Copilot)
Bump dotnet-coverage from 18.7.0 to 18.8.0 #7552
[main] Update dependencies from dotnet/arcade #7559
Fix transitive MessagePack vulnerability in AI template AppHost projects #7561 by @adamsitnik (co-authored by @Copilot)
Bump esbuild, @vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7564
Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7569
Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7570
Bump PowerShell from 7.6.2 to 7.6.3 #7576
Remove duplicate 'WebAPI' classification from template #7577 by @danroth27
[main] Update dependencies from dotnet/arcade #7590
Eliminate redundant Correctness CI stage by merging into Build #7594 by @adamsitnik (co-authored by @Copilot)
Update Agent Framework to 1.13.0 #7613 by @jeffhandley (co-authored by @Copilot)
... (truncated)

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1 What's Changed

Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) by @nohwnd in Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) microsoft/vstest#16281

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0 What's Changed

Migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) by @nohwnd in feat: migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) microsoft/vstest#15687
- For more detail refer to https://devblogs.microsoft.com/dotnet/vs-test-is-removing-its-newtonsoft-json-dependency/
Create source-only filter package by @Youssef1313 in Create source-only filter package microsoft/vstest#15638
Add ARM64 msdia140.dll support to test platform packages by @nohwnd in Cherry-pick: Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15692
Fix mutex cleanup crash on macOS/Linux by @nohwnd in Fix mutex cleanup crash on macOS/Linux microsoft/vstest#15684
Restrict artifact temp directory permissions on Unix by @nohwnd in Restrict artifact temp directory permissions on Unix microsoft/vstest#15729
Add support for filtering uncategorized tests with TestCategory=None by @Evangelink in Add support for filtering uncategorized tests with TestCategory=None microsoft/vstest#15727
Fix SCI binding failure in DTA hosts (main) by @nohwnd in Fix SCI binding failure in DTA hosts (main) microsoft/vstest#15724
Fix HTML logger parallel file collision by @nohwnd in [fix] Fix HTML logger parallel file collision microsoft/vstest#15435
Improve error message when testhost cannot be found by @nohwnd in [fix] Improve error message when testhost cannot be found microsoft/vstest#16053
Fix HTML logger exception on invalid XML chars in test display names by @nohwnd in [fix] Fix HTML logger exception on invalid XML chars in test display names microsoft/vstest#16051

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.2 to 10.0.3.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned OpenTelemetry.Exporter.OpenTelemetryProtocol at 1.17.0.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.17.0

For highlights and announcements pertaining to this release see: Release Notes > 1.17.0.

The following changes are from the previous release 1.17.0-rc.1.

NuGet: OpenTelemetry v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.InMemory v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Zipkin v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Extensions.Hosting v1.17.0

No notable changes.

... (truncated)

1.17.0-rc.1

The following changes are from the previous release 1.16.0.

NuGet: OpenTelemetry v1.17.0-rc.1
- Fixed a metric point reclaim data race on CPU ARM architectures.
  (#7401)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Replaced the vendored copy of
  EnvironmentVariablesConfigurationProvider with a direct
  Microsoft.Extensions.Configuration.EnvironmentVariables package dependency.
  Consumers gain automatic pickup of upstream bug fixes and security patches;
  no public API or behavioural change.
  (#7146)
- Added a verbose OpenTelemetry-Sdk self-diagnostics event that is emitted
  when an activity is dropped because its local (in-process) parent is not
  recorded.
  (#7427)
- Added support for a Schema URL on Resource instances.
  (#7472)
- Fixed a metric storage leak that occurred when meters and instruments were
  repeatedly created and disposed.
  (#7466)
- Added ExcludedTagKeys property to MetricStreamConfiguration to support
  excluding specific tag keys from metric streams.
  (#7373)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0-rc.1
- Fixed TraceContextPropagator to normalize empty tracestate header values
  to null when extracting trace context.
  (#7407,
  #7433)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Experimental (pre-release builds only): Updated EnvironmentVariableCarrier.Get
  to read only the normalized environment variable name, following the updated
  environment variable carrier specification.
  Non-normalized carrier keys are no longer matched, even when they would
  normalize to the requested key.
  ... (truncated)

1.17.0-beta.1

The following changes are from the previous release 1.16.0-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.17.0-beta.1
- Added a verbose-level diagnostic event for ignored metrics.
  (#7429)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Fix double unit suffixes in metric names when using OpenMetrics.
  (#7454)
- Fix incorrect handling of leading digits in metric names for OpenMetrics.
  (#7454)
- Add PrometheusAspNetCoreOptions.ScopeInfoEnabled property to enable or
  disable scope labels in Prometheus metrics. Defaults to true.
  (#7436)
- Added support for the dots and values Prometheus UTF-8 name escaping
  schemes when negotiated via the Accept header.
  (#7439)
- Add PrometheusAspNetCoreOptions.TargetInfoEnabled property to enable or
  disable the target_info metric in Prometheus metrics. Defaults to true.
  (#7438)
- Added support for the allow-utf-8 Prometheus UTF-8 name escaping scheme
  when negotiated via the Accept header.
  (#7440)
- Add PrometheusAspNetCoreOptions.ResourceConstantLabels property to select
  resource attributes to add to each metric as constant labels. Defaults to
  null (no resource attributes are added as metric labels).
  (#7471)
- Add PrometheusAspNetCoreOptions.MaxScrapeResponseSizeBytes to configure
  the maximum size of a scrape response. The default is now ~166 MiB.
  (#7487)
- A scrape whose serialized output exceeds the maximum scrape response size
  limit now responds with HTTP 500.
  (#7487)
- Fixed the Prometheus text exposition format emitting redundant comments.
  (#7491)
- Made Accept header content negotiation consistent with the
  PrometheusHttpListener endpoint.
  ... (truncated)

1.16.0

For highlights and announcements pertaining to this release see: Release Notes > 1.16.0.

The following changes are from the previous release 1.16.0-rc.1.

NuGet: OpenTelemetry v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.InMemory v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Zipkin v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Extensions.Hosting v1.16.0

No notable changes.

... (truncated)

1.16.0-rc.1

The following changes are from the previous release 1.15.3.

NuGet: OpenTelemetry v1.16.0-rc.1
- Stop validating View-provided metric stream Name against the instrument
  name syntax, per
  spec clarification.
  (#7300)
- Fix incorrect validation of OTEL_BSP_* and OTEL_BLRP_* environment
  variables.
  (#7187)
- Fix observable instrument callbacks running once per reader instead of
  once per collection cycle.
  (#7188)
- Added exception safety for user-supplied ExemplarReservoir implementations.
  Exceptions thrown from Offer are now caught and logged rather than propagating
  out of Counter.Add/Histogram.Record.
  (#7277)
- Update OpenTelemetrySdkEventSource to support the W3C randomness flag.
  (#7301)
- Added ObservedTimestamp property to LogRecord.
  (#6979)
- Breaking Change Explicit histogram boundaries no longer allow more than
  10 million values.
  (#7165)
- Fixed a circular reference which could cause a LoggerProvider to fail to
  resolve when one of its dependencies depends on ILogger or ILoggerFactory.
  As part of this fix the LoggerProvider resolved from dependency injection
  is now created lazily when the first logger is created rather than when
  ILoggerProvider or ILoggerFactory is resolved. A consequence is that any
  invalid configuration now surfaces when the first log record is written instead
  of when the logging services are resolved.
  (#7308)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.16.0-rc.1
- Experimental (pre-release builds only):
  Add support for using environment variables as context propagation carriers.
  (#7174)
- Fix BaggagePropagator to correctly follow Key and Value Encoding rules as per
  ... (truncated)

1.16.0-beta.1

The following changes are from the previous release 1.15.3-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.16.0-beta.1
- Fixed scrape response cache freshness using monotonic time so it is not
  affected by NTP system clock adjustments.
  (#7253)
- Breaking Change Removed DisableTimestamp property from
  PrometheusAspNetCoreOptions.
  (#7176)
- Fixed the serialization of NaN, PositiveInfinity, and NegativeInfinity
  values in Prometheus metrics to be compliant with the specification.
  (#7179)
- Fixed loss of precision when serializing double and float values in
  Prometheus metrics to be compliant with the specification by using 17
  significant digits to represent such values.
  (#7179)
- Fix non-ASCII characters in metric names and unit strings not being sanitized
  correctly during Prometheus serialization.
  (#7184)
- Fix case where reader tracking could be reset while readers were still active.
  (#7190)
- Improve Accept header handling for format negotiation so OpenMetrics is
  selected correctly by considering whitespace and q weights.
  (#7208)
- Emit OpenMetrics exemplars for counters and histogram buckets.
  (#7222)
- Fix incorrect handling of untyped metrics when using OpenMetrics format.
  (#7219)
- Fix Prometheus/OpenMetrics serialization to emit metric and label names
  containing _ instead of dropping them and prefixing leading digits.
  Invalid characters are replaced with _ instead of being dropped.
  (#7209)
- Add escaping=underscores to the Accept header handling for content
  negotiation so OpenMetrics are handled correctly.
  (#7209)
- Omit histogram _sum and _count in OpenMetrics when negative bucket
  thresholds are present.
  (#7221)
  ... (truncated)

Commits viewable in compare view.

Pinned OpenTelemetry.Exporter.OpenTelemetryProtocol at 1.17.0.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.17.0

For highlights and announcements pertaining to this release see: Release Notes > 1.17.0.

The following changes are from the previous release 1.17.0-rc.1.

NuGet: OpenTelemetry v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.InMemory v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Zipkin v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Extensions.Hosting v1.17.0

No notable changes.

... (truncated)

1.17.0-rc.1

The following changes are from the previous release 1.16.0.

NuGet: OpenTelemetry v1.17.0-rc.1
- Fixed a metric point reclaim data race on CPU ARM architectures.
  (#7401)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Replaced the vendored copy of
  EnvironmentVariablesConfigurationProvider with a direct
  Microsoft.Extensions.Configuration.EnvironmentVariables package dependency.
  Consumers gain automatic pickup of upstream bug fixes and security patches;
  no public API or behavioural change.
  (#7146)
- Added a verbose OpenTelemetry-Sdk self-diagnostics event that is emitted
  when an activity is dropped because its local (in-process) parent is not
  recorded.
  (#7427)
- Added support for a Schema URL on Resource instances.
  (#7472)
- Fixed a metric storage leak that occurred when meters and instruments were
  repeatedly created and disposed.
  (#7466)
- Added ExcludedTagKeys property to MetricStreamConfiguration to support
  excluding specific tag keys from metric streams.
  (#7373)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0-rc.1
- Fixed TraceContextPropagator to normalize empty tracestate header values
  to null when extracting trace context.
  (#7407,
  #7433)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Experimental (pre-release builds only): Updated EnvironmentVariableCarrier.Get
  to read only the normalized environment variable name, following the updated
  environment variable carrier specification.
  Non-normalized carrier keys are no longer matched, even when they would
  normalize to the requested key.
  ... (truncated)

1.17.0-beta.1

The following changes are from the previous release 1.16.0-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.17.0-beta.1
- Added a verbose-level diagnostic event for ignored metrics.
  (#7429)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Fix double unit suffixes in metric names when using OpenMetrics.
  (#7454)
- Fix incorrect handling of leading digits in metric names for OpenMetrics.
  (#7454)
- Add PrometheusAspNetCoreOptions.ScopeInfoEnabled property to enable or
  disable scope labels in Prometheus metrics. Defaults to true.
  (#7436)
- Added support for the dots and values Prometheus UTF-8 name escaping
  schemes when negotiated via the Accept header.
  (#7439)
- Add PrometheusAspNetCoreOptions.TargetInfoEnabled property to enable or
  disable the target_info metric in Prometheus metrics. Defaults to true.
  (#7438)
- Added support for the allow-utf-8 Prometheus UTF-8 name escaping scheme
  when negotiated via the Accept header.
  (#7440)
- Add PrometheusAspNetCoreOptions.ResourceConstantLabels property to select
  resource attributes to add to each metric as constant labels. Defaults to
  null (no resource attributes are added as metric labels).
  (#7471)
- Add PrometheusAspNetCoreOptions.MaxScrapeResponseSizeBytes to configure
  the maximum size of a scrape response. The default is now ~166 MiB.
  (#7487)
- A scrape whose serialized output exceeds the maximum scrape response size
  limit now responds with HTTP 500.
  (#7487)
- Fixed the Prometheus text exposition format emitting redundant comments.
  (#7491)
- Made Accept header content negotiation consistent with the
  PrometheusHttpListener endpoint.
  ... (truncated)

Commits viewable in compare view.

Pinned OpenTelemetry.Extensions.Hosting at 1.17.0.

Release notes

Sourced from OpenTelemetry.Extensions.Hosting's releases.

1.17.0

For highlights and announcements pertaining to this release see: Release Notes > 1.17.0.

The following changes are from the previous release 1.17.0-rc.1.

NuGet: OpenTelemetry v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.InMemory v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Zipkin v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Extensions.Hosting v1.17.0

No notable changes.

... (truncated)

1.17.0-rc.1

The following changes are from the previous release 1.16.0.

NuGet: OpenTelemetry v1.17.0-rc.1
- Fixed a metric point reclaim data race on CPU ARM architectures.
  (#7401)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Replaced the vendored copy of
  EnvironmentVariablesConfigurationProvider with a direct
  Microsoft.Extensions.Configuration.EnvironmentVariables package dependency.
  Consumers gain automatic pickup of upstream bug fixes and security patches;
  no public API or behavioural change.
  (#7146)
- Added a verbose OpenTelemetry-Sdk self-diagnostics event that is emitted
  when an activity is dropped because its local (in-process) parent is not
  recorded.
  (#7427)
- Added support for a Schema URL on Resource instances.
  (#7472)
- Fixed a metric storage leak that occurred when meters and instruments were
  repeatedly created and disposed.
  (#7466)
- Added ExcludedTagKeys property to MetricStreamConfiguration to support
  excluding specific tag keys from metric streams.
  (#7373)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0-rc.1
- Fixed TraceContextPropagator to normalize empty tracestate header values
  to null when extracting trace context.
  (#7407,
  #7433)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Experimental (pre-release builds only): Updated EnvironmentVariableCarrier.Get
  to read only the normalized environment variable name, following the updated
  environment variable carrier specification.
  Non-normalized carrier keys are no longer matched, even when they would
  normalize to the requested key.
  ... (truncated)

1.17.0-beta.1

The following changes are from the previous release 1.16.0-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.17.0-beta.1
- Added a verbose-level diagnostic event for ignored metrics.
  (#7429)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Fix double unit suffixes in metric names when using OpenMetrics.
  (#7454)
- Fix incorrect handling of leading digits in metric names for OpenMetrics.
  (#7454)
- Add PrometheusAspNetCoreOptions.ScopeInfoEnabled property to enable or
  disable scope labels in Prometheus metrics. Defaults to true.
  (#7436)
- Added support for the dots and values Prometheus UTF-8 name escaping
  schemes when negotiated via the Accept header.
  (#7439)
- Add PrometheusAspNetCoreOptions.TargetInfoEnabled property to enable or
  disable the target_info metric in Prometheus metrics. Defaults to true.
  (#7438)
- Added support for the allow-utf-8 Prometheus UTF-8 name escaping scheme
  when negotiated via the Accept header.
  (#7440)
- Add PrometheusAspNetCoreOptions.ResourceConstantLabels property to select
  resource attributes to add to each metric as constant labels. Defaults to
  null (no resource attributes are added as metric labels).
  (#7471)
- Add PrometheusAspNetCoreOptions.MaxScrapeResponseSizeBytes to configure
  the maximum size of a scrape response. The default is now ~166 MiB.
  (#7487)
- A scrape whose serialized output exceeds the maximum scrape response size
  limit now responds with HTTP 500.
  (#7487)
- Fixed the Prometheus text exposition format emitting redundant comments.
  (#7491)
- Made Accept header content negotiation consistent with the
  PrometheusHttpListener endpoint.
  ... (truncated)

1.16.0

For highlights and announcements pertaining to this release see: Release Notes > 1.16.0.

The following changes are from the previous release 1.16.0-rc.1.

NuGet: OpenTelemetry v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.InMemory v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Zipkin v1.16.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Extensions.Hosting v1.16.0

No notable changes.

... (truncated)

1.16.0-rc.1

The following changes are from the previous release 1.15.3.

NuGet: OpenTelemetry v1.16.0-rc.1
- Stop validating View-provided metric stream Name against the instrument
  name syntax, per
  spec clarification.
  (#7300)
- Fix incorrect validation of OTEL_BSP_* and OTEL_BLRP_* environment
  variables.
  (#7187)
- Fix observable instrument callbacks running once per reader instead of
  once per collection cycle.
  (#7188)
- Added exception safety for user-supplied ExemplarReservoir implementations.
  Exceptions thrown from Offer are now caught and logged rather than propagating
  out of Counter.Add/Histogram.Record.
  (#7277)
- Update OpenTelemetrySdkEventSource to support the W3C randomness flag.
  (#7301)
- Added ObservedTimestamp property to LogRecord.
  (#6979)
- Breaking Change Explicit histogram boundaries no longer allow more than
  10 million values.
  (#7165)
- Fixed a circular reference which could cause a LoggerProvider to fail to
  resolve when one of its dependencies depends on ILogger or ILoggerFactory.
  As part of this fix the LoggerProvider resolved from dependency injection
  is now created lazily when the first logger is created rather than when
  ILoggerProvider or ILoggerFactory is resolved. A consequence is that any
  invalid configuration now surfaces when the first log record is written instead
  of when the logging services are resolved.
  (#7308)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.16.0-rc.1
- Experimental (pre-release builds only):
  Add support for using environment variables as context propagation carriers.
  (#7174)
- Fix BaggagePropagator to correctly follow Key and Value Encoding rules as per
  ... (truncated)

1.16.0-beta.1

The following changes are from the previous release 1.15.3-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.16.0-beta.1
- Fixed scrape response cache freshness using monotonic time so it is not
  affected by NTP system clock adjustments.
  (#7253)
- Breaking Change Removed DisableTimestamp property from
  PrometheusAspNetCoreOptions.
  (#7176)
- Fixed the serialization of NaN, PositiveInfinity, and NegativeInfinity
  values in Prometheus metrics to be compliant with the specification.
  (#7179)
- Fixed loss of precision when serializing double and float values in
  Prometheus metrics to be compliant with the specification by using 17
  significant digits to represent such values.
  (#7179)
- Fix non-ASCII characters in metric names and unit strings not being sanitized
  correctly during Prometheus serialization.
  (#7184)
- Fix case where reader tracking could be reset while readers were still active.
  (#7190)
- Improve Accept header handling for format negotiation so OpenMetrics is
  selected correctly by considering whitespace and q weights.
  (#7208)
- Emit OpenMetrics exemplars for counters and histogram buckets.
  (#7222)
- Fix incorrect handling of untyped metrics when using OpenMetrics format.
  (#7219)
- Fix Prometheus/OpenMetrics serialization to emit metric and label names
  containing _ instead of dropping them and prefixing leading digits.
  Invalid characters are replaced with _ instead of being dropped.
  (#7209)
- Add escaping=underscores to the Accept header handling for content
  negotiation so OpenMetrics are handled correctly.
  (#7209)
- Omit histogram _sum and _count in OpenMetrics when negative bucket
  thresholds are present.
  (#7221)
  ... (truncated)

Commits viewable in compare view.

Pinned OpenTelemetry.Extensions.Hosting at 1.17.0.

Release notes

Sourced from OpenTelemetry.Extensions.Hosting's releases.

1.17.0

For highlights and announcements pertaining to this release see: Release Notes > 1.17.0.

The following changes are from the previous release 1.17.0-rc.1.

NuGet: OpenTelemetry v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0

No notable changes.

See [CHANGELOG](https://github.com/open-telemetry/opentelemetry-dotnet/blob/core-1.17.0/src/OpenTelemetry.Api/CHANGELOG....

Description has been truncated

Bumps AWSSDK.S3 from 4.0.100.2 to 4.0.102 Bumps Meziantou.Analyzer from 3.0.121 to 3.0.141 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.9 to 10.0.10 Bumps Microsoft.AspNetCore.DataProtection.EntityFrameworkCore from 10.0.9 to 10.0.10 Bumps Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.9 to 10.0.10 Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.9 to 10.0.10 Bumps Microsoft.AspNetCore.OpenApi from 10.0.9 to 10.0.10 Bumps Microsoft.EntityFrameworkCore.Design from 10.0.9 to 10.0.10 Bumps Microsoft.EntityFrameworkCore.Tools from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Hosting from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Http.Resilience from 10.7.0 to 10.8.0 Bumps Microsoft.Extensions.Identity.Stores from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.ServiceDiscovery from 10.7.0 to 10.8.0 Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1 Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.2 to 10.0.3 Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol to 1.17.0 Bumps OpenTelemetry.Extensions.Hosting to 1.17.0 Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.16.0 to 1.17.0 Bumps OpenTelemetry.Instrumentation.Http from 1.16.0 to 1.17.0 Bumps OpenTelemetry.Instrumentation.Runtime from 1.15.1 to 1.17.0 Bumps Sentry.AspNetCore from 6.6.0 to 6.8.0 --- updated-dependencies: - dependency-name: AWSSDK.S3 dependency-version: 4.0.102 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Meziantou.Analyzer dependency-version: 3.0.141 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.AspNetCore.DataProtection.EntityFrameworkCore dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.AspNetCore.Identity.EntityFrameworkCore dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore.Tools dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Hosting dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Http.Resilience dependency-version: 10.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Identity.Stores dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.ServiceDiscovery dependency-version: 10.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL dependency-version: 10.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Sentry.AspNetCore dependency-version: 6.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2026-08-10T04:42:42Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 9, 2026

dependabot Bot mentioned this pull request Aug 9, 2026

Bump the minor-and-patch group with 22 updates #294

Closed

dependabot Bot force-pushed the dependabot/nuget/minor-and-patch-7fa94d432a branch from 80b8582 to 65ef3db Compare August 10, 2026 04:41

Navigation Menu

Uh oh!

Bump AWSSDK.S3 and 21 others - #333

Bump AWSSDK.S3 and 21 others#333
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/nuget/minor-and-patch-7fa94d432a

dependabot Bot commented on behalf of github Aug 9, 2026 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Aug 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.0.141

What's Changed

3.0.140

What's Changed

3.0.139

What's Changed

3.0.138

What's Changed

3.0.137

What's Changed

3.0.136

What's Changed

3.0.135

What's Changed

3.0.134

What's Changed

3.0.133

What's Changed

3.0.132

What's Changed

3.0.131

What's Changed

3.0.130

What's Changed

3.0.129

What's Changed

3.0.128

What's Changed

3.0.127

What's Changed

3.0.126

What's Changed

3.0.125

What's Changed

3.0.124

What's Changed

3.0.123

What's Changed

3.0.122

What's Changed

10.8.0

Experimental API Changes

New Experimental APIs

What's Changed

AI

Vector Data

Documentation Updates

Test Improvements

Repository Infrastructure Updates

10.8.0

Experimental API Changes

New Experimental APIs

What's Changed

AI

Vector Data

Documentation Updates

Test Improvements

Repository Infrastructure Updates

18.8.1

What's Changed

18.8.0

What's Changed

1.17.0

1.17.0-rc.1

1.17.0-beta.1

1.16.0

1.16.0-rc.1

1.16.0-beta.1

1.17.0

1.17.0-rc.1

1.17.0-beta.1

1.17.0

1.17.0-rc.1

1.17.0-beta.1

1.16.0

1.16.0-rc.1

dependabot Bot commented on behalf of github Aug 9, 2026 •

edited

Loading