Bump the nuget-catalog group with 8 updates

[dependabot]

Updated Azure.Identity from 1.20.0 to 1.21.0.

Release notes

Sourced from Azure.Identity's releases.

1.21.0

1.21.0 (2026-04-10)

Other Changes

• All Azure.Identity types have been moved to Azure.Core and are now available through TypeForwardedTo attributes. This is a non-breaking change — existing code continues to work transparently. The library's version number now aligns with that of Azure.Core. See the Migration Guide for details.

Commits viewable in compare view.

Updated dotenv.net from 4.0.1 to 4.0.2.

Release notes

Sourced from dotenv.net's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.5 to 10.0.7.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.OpenApi from 3.5.1 to 3.5.2.

Release notes

Sourced from Microsoft.OpenApi's releases.

3.5.2

3.5.2 (2026-04-14)

Bug Fixes

• hidi: update Microsoft.OpenApi.OData to 3.2.1 (b0a68fb)
• hidi: update Microsoft.OpenApi.OData to 3.2.1 (8c22ab2), closes #​2811

Commits viewable in compare view.

Updated OpenTelemetry from 1.15.2 to 1.15.3.

Release notes

Sourced from OpenTelemetry's releases.

1.15.3

For highlights and announcements pertaining to this release see: Release Notes > 1.15.3.

The following changes are from the previous release 1.15.2.

• NuGet: OpenTelemetry v1.15.3

  • Fix resource leak in batch and periodic exporting task workers for Blazor/WASM.
    (#​7069)

  • Fixed LogRecord.LogLevel to preserve LogLevel.None and handle
    unspecified or out-of-range severities without returning invalid enum values.
    (#​7092)

  • Fixed OTEL_TRACES_SAMPLER_ARG handling to treat out-of-range, NaN, and
    infinite values as invalid and fall back to the default ratio when using
    traceidratio and parentbased_traceidratio samplers.
    (#​7103)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.15.3

  • Fix baggage and trace headers not respecting the maximum length in some cases.
    (#​7061)

  • Improve efficiency of parsing of baggage and B3 propagation headers.
    (#​7061)

  • Breaking change: Fixed tracestate parsing to reject keys that do not
    begin with a lowercase letter, including keys beginning with digits, to
    align with the W3C Trace Context specification.
    (#​7065)

  • Fixed BaggagePropagator to trim optional whitespace (OWS) around =
    separators when parsing the baggage header, as required by the
    W3C Baggage specification.
    (#​7009)

  • Fixed BaggagePropagator to strip baggage properties (e.g. ;metadata)
    from values when parsing the baggage header.
    (#​7009)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.15.3

  No notable changes.

  See CHANGELOG for details.

... (truncated)

1.15.3-beta.1

The following changes are from the previous release 1.15.2-beta.1.

• NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.15.3-beta.1

  • Fixed metric unit strings containing invalid Prometheus characters (e.g. # RU)
    not being sanitized, resulting in malformed metric names.
    (#​6187)

  • Fixed Prometheus metric serialization to handle empty label names without
    throwing during scrape rendering.
    (#​7077)

  • Updated OpenTelemetry core component version(s) to 1.15.3.
    (#​7125)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.15.3-beta.1

  • Fixed metric unit strings containing invalid Prometheus characters (e.g. # RU)
    not being sanitized, resulting in malformed metric names.
    (#​6187)

  • Fixed Prometheus metric serialization to handle empty label names without
    throwing during scrape rendering.
    (#​7077)

  • Updated OpenTelemetry core component version(s) to 1.15.3.
    (#​7125)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Shims.OpenTracing v1.15.3-beta.1

  • Fixes support for byte, short, int, and float attributes.
    (#​7080)

  • Updated OpenTelemetry core component version(s) to 1.15.3.
    (#​7125)

  See CHANGELOG for details.

Commits viewable in compare view.

Updated OpenTelemetry.Extensions.Hosting from 1.15.2 to 1.15.3.

Release notes

Sourced from OpenTelemetry.Extensions.Hosting's releases.

1.15.3

For highlights and announcements pertaining to this release see: Release Notes > 1.15.3.

The following changes are from the previous release 1.15.2.

• NuGet: OpenTelemetry v1.15.3

  • Fix resource leak in batch and periodic exporting task workers for Blazor/WASM.
    (#​7069)

  • Fixed LogRecord.LogLevel to preserve LogLevel.None and handle
    unspecified or out-of-range severities without returning invalid enum values.
    (#​7092)

  • Fixed OTEL_TRACES_SAMPLER_ARG handling to treat out-of-range, NaN, and
    infinite values as invalid and fall back to the default ratio when using
    traceidratio and parentbased_traceidratio samplers.
    (#​7103)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.15.3

  • Fix baggage and trace headers not respecting the maximum length in some cases.
    (#​7061)

  • Improve efficiency of parsing of baggage and B3 propagation headers.
    (#​7061)

  • Breaking change: Fixed tracestate parsing to reject keys that do not
    begin with a lowercase letter, including keys beginning with digits, to
    align with the W3C Trace Context specification.
    (#​7065)

  • Fixed BaggagePropagator to trim optional whitespace (OWS) around =
    separators when parsing the baggage header, as required by the
    W3C Baggage specification.
    (#​7009)

  • Fixed BaggagePropagator to strip baggage properties (e.g. ;metadata)
    from values when parsing the baggage header.
    (#​7009)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.15.3

  No notable changes.

  See CHANGELOG for details.

... (truncated)

1.15.3-beta.1

The following changes are from the previous release 1.15.2-beta.1.

• NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.15.3-beta.1

  • Fixed metric unit strings containing invalid Prometheus characters (e.g. # RU)
    not being sanitized, resulting in malformed metric names.
    (#​6187)

  • Fixed Prometheus metric serialization to handle empty label names without
    throwing during scrape rendering.
    (#​7077)

  • Updated OpenTelemetry core component version(s) to 1.15.3.
    (#​7125)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.15.3-beta.1

  • Fixed metric unit strings containing invalid Prometheus characters (e.g. # RU)
    not being sanitized, resulting in malformed metric names.
    (#​6187)

  • Fixed Prometheus metric serialization to handle empty label names without
    throwing during scrape rendering.
    (#​7077)

  • Updated OpenTelemetry core component version(s) to 1.15.3.
    (#​7125)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Shims.OpenTracing v1.15.3-beta.1

  • Fixes support for byte, short, int, and float attributes.
    (#​7080)

  • Updated OpenTelemetry core component version(s) to 1.15.3.
    (#​7125)

  See CHANGELOG for details.

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.AspNetCore from 1.15.1 to 1.15.2.

Release notes

Sourced from OpenTelemetry.Instrumentation.AspNetCore's releases.

1.15.2

• NuGet: OpenTelemetry.Exporter.Geneva v1.15.2

  • Updated OpenTelemetry core component version(s) to 1.15.3.
    (#​4166)

  See CHANGELOG for details.

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.Http from 1.15.0 to 1.15.1.

Release notes

Sourced from OpenTelemetry.Instrumentation.Http's releases.

1.15.1

• NuGet: OpenTelemetry.Instrumentation.AspNet v1.15.1

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Instrumentation.AspNet.TelemetryHttpModule v1.15.1

  • Propagate baggage before Activity is created.
    (#​3820)

  See CHANGELOG for details.

1.15.1-beta.2

• NuGet: OpenTelemetry.Instrumentation.Wcf v1.15.1-beta.2

  • Revert System.Security.Cryptography.Xml dependency version update for
    .NET 8, 9, and 10 to 4.7.1 released in 1.15.1-beta.1 introduced in #​4103.
    (#​4266)

  See CHANGELOG for details.

1.15.1-beta.1

• NuGet: OpenTelemetry.Extensions.Enrichment v1.15.1-beta.1

  • Updated OpenTelemetry core component version(s) to 1.15.3.
    (#​4166)

  • Fixed trace enrichment callbacks so exceptions thrown by user-provided
    enrichers or enrichment actions no longer interrupt trace processing.
    (#​4165)

  See CHANGELOG for details.

1.15.1-alpha.1

• NuGet: OpenTelemetry.Instrumentation.EventCounters v1.15.1-alpha.1

  • Updated OpenTelemetry core component version(s) to 1.15.3.
    (#​4166)

  See CHANGELOG for details.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions