Bump the nuget-dependencies group with 13 updates by dependabot[bot] · Pull Request #55 · violetweather/Certael

NATS .NET 3.0 is now stable. This release has been in the works since early this year and brings OpenTelemetry tracing and metrics, .NET 10 target, and a number of API and behavior changes refined over the preview series. Thanks to everyone who tried the previews and reported issues along the way. There are no changes since 3.0.0-preview.11.

.NET 10 Target

3.0 targets netstandard2.0, netstandard2.1, net8.0, and net10.0. net6.0 has been dropped.

OpenTelemetry

Add OTel metrics support Add OTel metrics support nats-io/nats.net#1154
Add OpenTelemetry package (tracing) Add OpenTelemetry Package nats-io/nats.net#1172
Add custom span destination name formatter Add custom span destination name formatter nats-io/nats.net#1201
Add OTel ack/dropped metrics and collapse inbox trace tags Add OTel ack/dropped metrics and collapse inbox trace tags nats-io/nats.net#1194
Exclude NATS status frames from consumed metrics Exclude NATS status frames from consumed metrics nats-io/nats.net#1195
Fix server.port type and trace tag source Fix server.port type and trace tag source nats-io/nats.net#1175
Fix null-key tag in OpenTelemetry receive fallback Fix null-key tag in OpenTelemetry receive fallback nats-io/nats.net#1205
Match OpenTelemetry subject filters without per-message allocation Match OpenTelemetry subject filters without per-message allocation nats-io/nats.net#1206
Make shared OpenTelemetry instrumentation options thread-visible Make shared OpenTelemetry instrumentation options thread-visible nats-io/nats.net#1207

API and behavior changes

Add message context to serialization interfaces Add message context to serialization interfaces nats-io/nats.net#1082
Move socket connection interfaces to NATS.Client.Abstractions Move socket connection interfaces to NATS.Client.Abstractions nats-io/nats.net#1192
Default request-reply to Direct mode Default request-reply to Direct mode nats-io/nats.net#1182
Add explicit subscription and consumer drain Add explicit subscription and consumer drain nats-io/nats.net#1177
Deprecate SkipSubjectValidation Deprecate SkipSubjectValidation nats-io/nats.net#1180
Unify subscription channel overflow defaults Unify subscription channel overflow defaults nats-io/nats.net#1181
Use System.Threading.Lock on NET9_0_OR_GREATER Use System.Threading.Lock on NET9_0_OR_GREATER nats-io/nats.net#1118
Clean up NET6 and optimize NETSTANDARD Clean up NET6 and optimize NETSTANDARD nats-io/nats.net#1072
Update DI package dependencies and documentation Update DI package dependencies and documentation nats-io/nats.net#1075

Performance and internals

Optimize header handling with SearchValues Optimize header handling with SearchValues nats-io/nats.net#1203
Simplify object store base64url encoder Simplify object store base64url encoder nats-io/nats.net#1199

Tests and docs

Add abstractions package boundary test Add abstractions package boundary test nats-io/nats.net#1197
Gate positive-path test connections with ConnectRetryAsync Gate positive-path test connections with ConnectRetryAsync nats-io/nats.net#1198
Fix flaky CI tests Fix flaky CI tests nats-io/nats.net#1179
Remove stale net6.0 references Remove stale net6.0 references nats-io/nats.net#1196
Clarify AddNats vs AddNatsClient Clarify AddNats vs AddNatsClient nats-io/nats.net#1210

Thanks

Thanks to the community for the contributions and issue reports behind this release:

@colprog for the header handling optimization (#1203), the custom span destination name formatter (#1201), and requesting the explicit drain API (#1176)
... (truncated)

3.0.0-preview.11

Last planned preview on the 3.0 line centered on OpenTelemetry: a new NATS.Client.OpenTelemetry package, richer metrics, and lower-overhead tracing. Also moves the socket connection interfaces into NATS.Client.Abstractions and tightens the header-parsing hot path.

OpenTelemetry:

Add OpenTelemetry package (#1172)
Add custom span destination name formatter (#1201)
Add ack/dropped metrics and collapse inbox trace tags (#1194)
Exclude NATS status frames from consumed metrics (#1195)
Make shared instrumentation options thread-visible (#1207)
Match subject filters without per-message allocation (#1206)
Fix null-key tag in receive fallback (#1205)

Core & packaging:

Move socket connection interfaces to NATS.Client.Abstractions (#1192)
Add abstractions package boundary test (#1197)
Optimize header handling with SearchValues (#1203)
Simplify object store base64url encoder (#1199)
Gate positive-path test connections with ConnectRetryAsync (#1198)
Remove stale net6.0 references (#1196)

Thanks to @colprog for the custom span destination name formatter (#1201) and the SearchValues header optimization (#1203).

Thanks to everyone testing the previews so far. This should be the last one; please give it one more round of testing, and if no bugs turn up we'll cut the stable 3.0 release in about a week.

Full Changelog: nats-io/nats.net@v3.0.0-preview.10...v3.0.0-preview.11

3.0.0-preview.10

Bug-fix preview on the 3.0 line. Carries the ordered push consumer subscription teardown fixes from the 2.x line; no 3.0-only changes this round.

From the 2.x line:

jetstream: simplify ordered push consumer sub teardown (#1191)
jetstream: dispose ordered push consumer sub on teardown (#1188)

Full Changelog: nats-io/nats.net@v3.0.0-preview.9...v3.0.0-preview.10

3.0.0-preview.9

Ninth preview of NATS .NET 3.0. Request-reply now defaults to Direct mode, and subscriptions and consumers can be drained explicitly.

Heads-up: the default request-reply mode is now NatsRequestReplyMode.Direct (previously SharedInbox). Direct uses the same inbox prefix but skips per-reply muxer processing, making RequestAsync more resource-efficient. At the default it still throws NatsNoRespondersException on a no-responders reply, so existing RequestAsync behavior is preserved. If you already set RequestReplyMode explicitly to either mode, nothing changes for you. To keep the old default mechanism, set NatsOpts.RequestReplyMode = NatsRequestReplyMode.SharedInbox.

3.0-only changes:

Default request-reply to Direct mode (#1182)
Add explicit subscription and consumer drain (#1177)
Unify subscription channel overflow defaults (#1181)
Deprecate SkipSubjectValidation (#1180)
Fix OTel server.port tag type and source (#1175)

Also from the 2.x line:

Bump MessagePack 3.1.1 -> 3.1.7 (#1183)

Full Changelog: nats-io/nats.net@v3.0.0-preview.8...v3.0.0-preview.9

3.0.0-preview.8

Eighth preview of NATS .NET 3.0. Adds OpenTelemetry metrics support.

3.0-only changes:

Add OTel metrics support (#1154)

Thanks to @divyeshio (#629) and @thompson-tomo (#871) for earlier work toward OTel metrics, and @aradalvand for the OpenTelemetry tracing groundwork (#859, #907, #911) this builds on. Long-requested feature (#316); thanks also to @Cooksauce and @iby-dev for weighing in along the way.

Full Changelog: nats-io/nats.net@v3.0.0-preview.7...v3.0.0-preview.8

3.0.0-preview.7

Seventh preview of NATS .NET 3.0. Brings in everything released in 2.8.1: a Services helper for detecting error responses on the requester side, plus bug fixes across JetStream, KV, subscriptions, and connection logging. No 3.0-only changes.

From main (via 2.8.1):

Add helpers to detect Nats-Service-Error on responses (#1152)
Fix durable consumer create when only DurableName is set (#1150)
kv: cap duplicate_window at max_age (#1149)
Quiet recoverable server-error logs (#1148) (thanks @garrett-sutton)
Fix subscription timeout overflow (#1134) (thanks @Prochy)
test: fix Windows CI flaps (#1147)
docs: add JetStream basic example (#1138)

Full Changelog: nats-io/nats.net@v3.0.0-preview.6...v3.0.0-preview.7

3.0.0-preview.6

Sixth preview of NATS .NET 3.0. Brings in everything merged to main since preview.5: a new server error event on NatsConnection, slnx solution-format migration, README and example docs additions, and a CI matrix bump to nats-server v2.12. No 3.0-only changes.

From main:

Add server error event (#745)
Migrate solution to slnx format (#1131)
Add Client and Orbit section to README (#1133)
Add Example Docs (#1119)
ci: test against v2.12, drop v2.10 (#1136)

Full Changelog: nats-io/nats.net@v3.0.0-preview.5...v3.0.0-preview.6

3.0.0-preview.5

Fifth preview of NATS .NET 3.0. Brings in everything from 2.8.0-preview.3 via a main sync (nats-server 2.14 features and a fix for in-flight message loss on consumer dispose). No 3.0-only changes since preview.4.

From main (also in 2.8.0-preview.3):

Add consumer reset API (#1126, server 2.14)
Add $JS.FC support to JS metadata parser (#1127, server 2.14)
Add consumer field on stream source/mirror (#1128, server 2.14)
Fix message loss on consumer dispose (#1085)

Full Changelog: nats-io/nats.net@v3.0.0-preview.4...v3.0.0-preview.5

3.0.0-preview.4

Fourth preview of NATS .NET 3.0 ships nats-server v2.14 support: streams that opt into fast-ingest batch publishing per ADR-50 can now set the new AllowBatchPublish field on StreamConfig (the fast-ingest publisher itself will live in orbit.net alongside the existing atomic batch publisher). Also brings in everything from 2.8.0-preview.2 via the main sync, and switches to System.Threading.Lock on net9.0+ on the 3.0 line.

3.0-only since preview.3:

Use System.Threading.Lock on NET9_0_OR_GREATER (#1118)

From main (also in 2.8.0-preview.2):

Add AllowBatchPublish stream config field (#1120)
Bump OpenTelemetry and OpenTelemetry.Exporter.OpenTelemetryProtocol (#1121)
Fix setting wrong pin id from status header (#1116) (thanks @colprog)
Fix slow-consumer test first-ping RTT flap (#1115)
Fix net481 TLS test flakes (#1111)
Rewrite README intro (#1114)

Full Changelog: nats-io/nats.net@v3.0.0-preview.3...v3.0.0-preview.4

3.0.0-preview.3

Preview release on the 3.0 line. Brings in everything from 2.8.0-preview.1 via the main syncs, plus context-aware serialization. Three breaking changes in total, all intentional on the preview channel before stable 3.0. Please try it and report anything odd.

Package on NuGet: https://www.nuget.org/packages/NATS.Net

Breaking changes:

Subject validation is on by default. Subjects containing whitespace (space, tab, CR, LF) now throw. Opt out with SkipSubjectValidation = true on NatsOpts. Closes a class of CRLF injection issues from malformed subjects.
NATS.Client.Core.NKeys and NKeyPair are removed. Signing now goes through the NATS.NKeys package (https://www.nuget.org/packages/NATS.NKeys), which lets the nkey/Ed25519 code be versioned independently of the client.
Serializers that want access to message context during (de)serialization opt in via the new INatsSerializeWithContext<T> / INatsDeserializeWithContext<T> interfaces (or the combined INatsSerializerWithContext<T>). Existing serializers keep working unchanged; the library dispatches via runtime type check and falls back to the standard interface. Built-in serializers propagate the context through chains. The read-only flag on NatsHeaders is removed so context-aware serializers can mutate headers; a single NatsHeaders instance is no longer safe to share across concurrent publishes.

Also includes protocol size checks (64MB incoming payload cap, in line with nats.js), KV watcher cancellation fix, credential loading state reset on failure, and Pin ID handling improvements.

Thanks to the NATS community who contributed PRs, reviews, bug reports on this one ❤️

3.0-only since preview.2:

Add message context to serialization interfaces (#1082) [breaking] (thanks @adminnz)

From main (also in 2.8.0-preview.1):

auth: sign nonce regardless of auth_required (#1109) (thanks @Lionel-Zieminski)
auth: use NATS.NKeys package for nkey signing (#1101) [breaking]
conn: reset state on credential loading failure (#1107) (thanks @Prochy)
Improve package metadata and README (#1103)
tests: fix TlsPreferTest flap on net481 (#1108)
Fix release workflow (#1106)
Fix test flaps (#1083)
ci: add contents and actions read permissions to Claude workflow (#1102)
tls: document Prefer mode plaintext behavior (#1094)
tests: increase NuidTests thread join timeouts (#1100)
Improve Pin ID handling (#1099) (thanks @colprog)
Fix KV watcher cancellation behavior (#1084)
Clear ArrayPool buffers before returning to pool (#1097)
Enable subject validation by default (#1093) [breaking]
Add protocol size checks (#1095)
Fix Range attribute for MaxBytes property (#1096) (thanks @partnerRuiSilva)
Add CC reviews (#1092)

Full Changelog: nats-io/nats.net@v3.0.0-preview.2...v3.0.0-preview.3

3.0.0-preview.2

This is a main branch sync release.

Please see 2.7.3 release for details.

What's Changed

Fix error logs URI rewritten by OnConnectingAsync by @mtmk in Fix error logs URI rewritten by OnConnectingAsync nats-io/nats.net#1067
Add slow consumer docs by @mtmk in Add slow consumer docs nats-io/nats.net#1073
Add Synadia.Orbit.Testing.NatsServerProcessManager by @mtmk in Add Synadia.Orbit.Testing.NatsServerProcessManager nats-io/nats.net#1065
Add see-also references to Orbit packages by @mtmk in Add see-also references to Orbit packages nats-io/nats.net#1077
Add validation for unsupported PinnedClient calls by @mtmk in Add validation for unsupported PinnedClient calls nats-io/nats.net#1063
Add cancelled token handling for consumers by @mtmk in Add cancelled token handling for consumers nats-io/nats.net#1068
Fix code analyzer warning by @mtmk in Fix code analyzer warning nats-io/nats.net#1076
Add TermWithReason support to AckTerminateAsync by @mtmk in Add TermWithReason support to AckTerminateAsync nats-io/nats.net#1048
Add consumer info usage warnings by @mtmk in Add consumer info usage warnings nats-io/nats.net#1079
Clean up NET6 and optimize NETSTANDARD by @mtmk in Clean up NET6 and optimize NETSTANDARD nats-io/nats.net#1072
Update DI package dependencies and documentation by @mtmk in Update DI package dependencies and documentation nats-io/nats.net#1075
Fix OTel network telemetry tags by @mtmk in Fix OTel network telemetry tags nats-io/nats.net#1078
Rework TermWithReason by @rickdotnet in Rework TermWithReason nats-io/nats.net#1081
Fix PingCommand cancellation by @mtmk in Fix PingCommand cancellation nats-io/nats.net#1086
Bump Microsoft.Bcl.Memory from 9.0.0 to 9.0.14 by @dependabot[bot] in Bump Microsoft.Bcl.Memory from 9.0.0 to 9.0.14 nats-io/nats.net#1089
Add optional window_size parameter to StreamSnapshotRequest by @darkwatchuk in Add optional window_size parameter to StreamSnapshotRequest nats-io/nats.net#1088
Release 2.7.3 by @mtmk in Release 2.7.3 nats-io/nats.net#1090
Release 3.0.0-preview.2 by @mtmk in Release 3.0.0-preview.2 nats-io/nats.net#1091

Full Changelog: nats-io/nats.net@v3.0.0-preview.1...v3.0.0-preview.2

2.8.2

Patch release on the 2.8 line. Fixes ordered push consumer subscription teardown. Thanks to @haoguanjun for the fix.

What's Changed

Bump MessagePack from 3.1.1 to 3.1.7 Bump MessagePack from 3.1.1 to 3.1.7 nats-io/nats.net#1183
Clarify DI package descriptions Clarify DI package descriptions nats-io/nats.net#1163
Fix ordered push consumer subscription leak on teardown Fix ordered push consumer subscription leak on teardown nats-io/nats.net#1188
Simplify ordered push consumer sub teardown Simplify ordered push consumer sub teardown nats-io/nats.net#1191
Release 2.8.2 Release 2.8.2 nats-io/nats.net#1189

Full Changelog: nats-io/nats.net@v2.8.1...v2.8.2

2.8.1

Patch release on the 2.8 line. Bug fixes across JetStream, KV, subscriptions, and connection logging, plus a small Services helper for handling error responses on the requester side.

What's Changed

Add helpers to detect Nats-Service-Error on responses (#1152)
Fix durable consumer create when only DurableName is set (#1150)
kv: cap duplicate_window at max_age (#1149)
Quiet recoverable server-error logs (#1148) (thanks @garrett-sutton)
Fix subscription timeout overflow (#1134) (thanks @Prochy)
test: fix Windows CI flaps (#1147)
docs: add JetStream basic example (#1138)

New Services Extensions

Detect service errors on responses (#1152)

Services signal failures using Nats-Service-Error / Nats-Service-Error-Code response headers. The requester side previously had to read those headers by hand. New extensions on NatsMsg<T> (in the NATS.Net namespace) cover the common patterns:

var reply = await nats.RequestAsync<MyReq, MyResp>("svc.echo", req);

if (reply.IsServiceSuccess())
{
    // use reply.Data
}

// or throw on error
reply.EnsureServiceSuccess();

// or inspect the status
var status = reply.GetServiceStatus();
// status.IsSuccess, status.Code, status.Message, status.HasNoResponders

Full Changelog: nats-io/nats.net@v2.8.0...v2.8.1

Download from NuGet at https://www.nuget.org/packages/NATS.Net/2.8.1

2.8.0

Happy to announce the NATS .NET 2.8.0 stable release of the 2.8 line. It picks up the NATS Server v2.14 client surface (consumer reset, $JS.FC.* flow-control replies, Consumer field on stream source/mirror, AllowBatchPublish on stream config), ships two breaking changes that landed in the preview cycle, and fixes in-flight message loss on consumer/connection dispose behind an opt-in drain.

A big thank you to all NATS contributors and community members who helped make this release possible. <3

NATS Server v2.14 Features

ResetConsumerAsync on INatsJSContext and INatsJSConsumer (ADR-60), to reset a pinned consumer's state (#1126).
$JS.FC.* flow-control replies are parsed by the JS metadata layer, for streams that publish with the js_ack_fc_v2 flag (#1127).
Consumer field on StreamSource and stream mirror config, for pre-created mirror/source consumers (#1128).
AllowBatchPublish on StreamConfig (JSON allow_batched), required by streams that opt into fast-ingest batch publishing per ADR-50 (#1120). The fast-ingest publisher itself lives in orbit.net alongside the existing atomic batch publisher.

Breaking Changes

Subject Validation On By Default (#1093)

Subjects containing whitespace (space, tab, CR, LF) now throw NatsException. This closes a class of CRLF injection issues from malformed subjects.

Opt out if you rely on legacy subjects that contain whitespace:

var opts = NatsOpts.Default with { SkipSubjectValidation = true };

NKeyPair Removed From NATS.Client.Core (#1101)

NATS.Client.Core.NKeys and NKeyPair are removed. Signing now goes through the NATS.NKeys package, which lets the nkey/Ed25519 code be versioned independently of the client.

For typical users this is transparent: keep using NatsAuthOpts.NKeyFile, CredsFile, Jwt + Seed, or AuthCredCallback and the client wires up the new signer automatically.

Only direct callers of NATS.Client.Core.NKeyPair need to switch:

// Before
using NATS.Client.Core;
var kp = NKeyPair.FromSeed(seed);
var sig = kp.Sign(nonce);

// After
using NATS.NKeys;
var kp = KeyPair.FromSeed(seed);
var sig = kp.Sign(nonce);

Other Notable Changes

Server error event (#745): a new event on NatsConnection surfaces server-side errors to client code.
Message loss on consumer dispose (#1085): opt-in drain keeps in-flight messages from being dropped when a consumer or connection is disposed. Enable with:

... (truncated)

2.8.0-preview.3

Third preview of NATS .NET 2.8 completes the nats-server v2.14 feature set for the client. See PRs below for specifics.

This release also includes a fix for in-flight message loss on consumer/connection dispose. The new drain path is opt-in, so defaults preserve current behavior. The dispose ordering refactor touches a hot path though, so please give your workloads a once-over and report anything that looks off.

Opt in:

var opts = NatsOpts.Default with
{
    DrainSubscriptionsOnDispose = true,
    ConsumerDrainOnDisposeTimeout = TimeSpan.FromSeconds(10),
};

Changes:

Add consumer reset API (#1126)
Add $JS.FC support to JS metadata parser (#1127)
Add consumer field on stream source/mirror (#1128)
Fix message loss on consumer dispose (#1085)

Full Changelog: nats-io/nats.net@v2.8.0-preview.2...v2.8.0-preview.3

2.8.0-preview.2

Second preview of NATS .NET 2.8 ships nats-server v2.14 support: streams that opt into fast-ingest batch publishing per ADR-50 can now set the new AllowBatchPublish field on StreamConfig (the fast-ingest publisher itself will live in orbit.net alongside the existing atomic batch publisher). Also picks up a Pin ID handling fix for duplicate status headers, the new flat README intro, and assorted CI and test flake fixes.

Changes:

Add AllowBatchPublish stream config field (#1120)
Bump OpenTelemetry and OpenTelemetry.Exporter.OpenTelemetryProtocol (#1121)
Fix setting wrong pin id from status header (#1116) (thanks @colprog)
Fix slow-consumer test first-ping RTT flap (#1115)
Fix net481 TLS test flakes (#1111)
Rewrite README intro (#1114)

Full Changelog: nats-io/nats.net@v2.8.0-preview.1...v2.8.0-preview.2

2.8.0-preview.1

Happy to ship the first preview of NATS .NET 2.8. The theme of this release is tightening the protocol layer and shrinking the core API surface, so this preview carries two breaking changes. Please try it and report anything odd before we cut the stable.

Package on NuGet: https://www.nuget.org/packages/NATS.Net

Breaking changes:

Subject validation is on by default. Subjects containing whitespace (space, tab, CR, LF) now throw. This closes a class of CRLF injection issues from malformed subjects. Opt out with SkipSubjectValidation = true on NatsOpts.
NATS.Client.Core.NKeys and NKeyPair are removed. Signing now goes through the NATS.NKeys package (https://www.nuget.org/packages/NATS.NKeys), which lets the nkey/Ed25519 code be versioned independently of the client.

Also includes protocol size checks (64MB incoming payload cap, in line with nats.js), KV watcher cancellation fix, credential loading state reset on failure, and Pin ID handling improvements.

Thanks to the NATS community who contributed PRs, reviews, and bug reports on this one ❤️

auth: sign nonce regardless of auth_required (#1109) (thanks @Lionel-Zieminski)
auth: use NATS.NKeys package for nkey signing (#1101) [breaking]
conn: reset state on credential loading failure (#1107) (thanks @Prochy)
Improve package metadata and README (#1103)
tests: fix TlsPreferTest flap on net481 (#1108)
Fix release workflow (#1106)
Fix test flaps (#1083)
ci: add contents and actions read permissions to Claude workflow (#1102)
tls: document Prefer mode plaintext behavior (#1094)
tests: increase NuidTests thread join timeouts (#1100)
Improve Pin ID handling (#1099) (thanks @colprog)
Fix KV watcher cancellation behavior (#1084)
Clear ArrayPool buffers before returning to pool (#1097)
Enable subject validation by default (#1093) [breaking]
Add protocol size checks (#1095)
Fix Range attribute for MaxBytes property (#1096) (thanks @partnerRuiSilva)
Add CC reviews (#1092)

Full Changelog: nats-io/nats.net@v2.7.3...v2.8.0-preview.1

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.16.0 to 1.17.0.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.17.0

For highlights and announcements pertaining to this release see: Release Notes > 1.17.0.

The following changes are from the previous release 1.17.0-rc.1.

NuGet: OpenTelemetry v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.InMemory v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Zipkin v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Extensions.Hosting v1.17.0

No notable changes.

... (truncated)

1.17.0-rc.1

The following changes are from the previous release 1.16.0.

NuGet: OpenTelemetry v1.17.0-rc.1
- Fixed a metric point reclaim data race on CPU ARM architectures.
  (#7401)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Replaced the vendored copy of
  EnvironmentVariablesConfigurationProvider with a direct
  Microsoft.Extensions.Configuration.EnvironmentVariables package dependency.
  Consumers gain automatic pickup of upstream bug fixes and security patches;
  no public API or behavioural change.
  (#7146)
- Added a verbose OpenTelemetry-Sdk self-diagnostics event that is emitted
  when an activity is dropped because its local (in-process) parent is not
  recorded.
  (#7427)
- Added support for a Schema URL on Resource instances.
  (#7472)
- Fixed a metric storage leak that occurred when meters and instruments were
  repeatedly created and disposed.
  (#7466)
- Added ExcludedTagKeys property to MetricStreamConfiguration to support
  excluding specific tag keys from metric streams.
  (#7373)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0-rc.1
- Fixed TraceContextPropagator to normalize empty tracestate header values
  to null when extracting trace context.
  (#7407,
  #7433)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Experimental (pre-release builds only): Updated EnvironmentVariableCarrier.Get
  to read only the normalized environment variable name, following the updated
  environment variable carrier specification.
  Non-normalized carrier keys are no longer matched, even when they would
  normalize to the requested key.
  ... (truncated)

1.17.0-beta.1

The following changes are from the previous release 1.16.0-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.17.0-beta.1
- Added a verbose-level diagnostic event for ignored metrics.
  (#7429)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Fix double unit suffixes in metric names when using OpenMetrics.
  (#7454)
- Fix incorrect handling of leading digits in metric names for OpenMetrics.
  (#7454)
- Add PrometheusAspNetCoreOptions.ScopeInfoEnabled property to enable or
  disable scope labels in Prometheus metrics. Defaults to true.
  (#7436)
- Added support for the dots and values Prometheus UTF-8 name escaping
  schemes when negotiated via the Accept header.
  (#7439)
- Add PrometheusAspNetCoreOptions.TargetInfoEnabled property to enable or
  disable the target_info metric in Prometheus metrics. Defaults to true.
  (#7438)
- Added support for the allow-utf-8 Prometheus UTF-8 name escaping scheme
  when negotiated via the Accept header.
  (#7440)
- Add PrometheusAspNetCoreOptions.ResourceConstantLabels property to select
  resource attributes to add to each metric as constant labels. Defaults to
  null (no resource attributes are added as metric labels).
  (#7471)
- Add PrometheusAspNetCoreOptions.MaxScrapeResponseSizeBytes to configure
  the maximum size of a scrape response. The default is now ~166 MiB.
  (#7487)
- A scrape whose serialized output exceeds the maximum scrape response size
  limit now responds with HTTP 500.
  (#7487)
- Fixed the Prometheus text exposition format emitting redundant comments.
  (#7491)
- Made Accept header content negotiation consistent with the
  PrometheusHttpListener endpoint.
  ... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Extensions.Hosting from 1.16.0 to 1.17.0.

Release notes

Sourced from OpenTelemetry.Extensions.Hosting's releases.

1.17.0

For highlights and announcements pertaining to this release see: Release Notes > 1.17.0.

The following changes are from the previous release 1.17.0-rc.1.

NuGet: OpenTelemetry v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.InMemory v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Zipkin v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Extensions.Hosting v1.17.0

No notable changes.

... (truncated)

1.17.0-rc.1

The following changes are from the previous release 1.16.0.

NuGet: OpenTelemetry v1.17.0-rc.1
- Fixed a metric point reclaim data race on CPU ARM architectures.
  (#7401)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Replaced the vendored copy of
  EnvironmentVariablesConfigurationProvider with a direct
  Microsoft.Extensions.Configuration.EnvironmentVariables package dependency.
  Consumers gain automatic pickup of upstream bug fixes and security patches;
  no public API or behavioural change.
  (#7146)
- Added a verbose OpenTelemetry-Sdk self-diagnostics event that is emitted
  when an activity is dropped because its local (in-process) parent is not
  recorded.
  (#7427)
- Added support for a Schema URL on Resource instances.
  (#7472)
- Fixed a metric storage leak that occurred when meters and instruments were
  repeatedly created and disposed.
  (#7466)
- Added ExcludedTagKeys property to MetricStreamConfiguration to support
  excluding specific tag keys from metric streams.
  (#7373)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0-rc.1
- Fixed TraceContextPropagator to normalize empty tracestate header values
  to null when extracting trace context.
  (#7407,
  #7433)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Experimental (pre-release builds only): Updated EnvironmentVariableCarrier.Get
  to read only the normalized environment variable name, following the updated
  environment variable carrier specification.
  Non-normalized carrier keys are no longer matched, even when they would
  normalize to the requested key.
  ... (truncated)

1.17.0-beta.1

The following changes are from the previous release 1.16.0-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.17.0-beta.1
- Added a verbose-level diagnostic event for ignored metrics.
  (#7429)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Fix double unit suffixes in metric names when using OpenMetrics.
  (#7454)
- Fix incorrect handling of leading digits in metric names for OpenMetrics.
  (#7454)
- Add PrometheusAspNetCoreOptions.ScopeInfoEnabled property to enable or
  disable scope labels in Prometheus metrics. Defaults to true.
  (#7436)
- Added support for the dots and values Prometheus UTF-8 name escaping
  schemes when negotiated via the Accept header.
  (#7439)
- Add PrometheusAspNetCoreOptions.TargetInfoEnabled property to enable or
  disable the target_info metric in Prometheus metrics. Defaults to true.
  (#7438)
- Added support for the allow-utf-8 Prometheus UTF-8 name escaping scheme
  when negotiated via the Accept header.
  (#7440)
- Add PrometheusAspNetCoreOptions.ResourceConstantLabels property to select
  resource attributes to add to each metric as constant labels. Defaults to
  null (no resource attributes are added as metric labels).
  (#7471)
- Add PrometheusAspNetCoreOptions.MaxScrapeResponseSizeBytes to configure
  the maximum size of a scrape response. The default is now ~166 MiB.
  (#7487)
- A scrape whose serialized output exceeds the maximum scrape response size
  limit now responds with HTTP 500.
  (#7487)
- Fixed the Prometheus text exposition format emitting redundant comments.
  (#7491)
- Made Accept header content negotiation consistent with the
  PrometheusHttpListener endpoint.
  ... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.AspNetCore from 1.16.0 to 1.17.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.AspNetCore's releases.

1.17.0

NuGet: OpenTelemetry.Exporter.Geneva v1.17.0
- Updated OpenTelemetry core component version(s) to 1.17.0.
  (#4773)
- Updated ETW manifest and payload in EtwDataTransport
  with synthetic payload so that the runtime-generated .NET
  ETW manifest matches the actual payload.
  (#4729
See CHANGELOG for details.

1.17.0-rc.1

NuGet: OpenTelemetry.Instrumentation.Process v1.17.0-rc.1
- Updated OpenTelemetry core component version(s) to 1.17.0.
  (#4773)
See CHANGELOG for details.

1.17.0-beta.1

NuGet: [OpenTelemetry.Exte...

Description has been truncated

Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.1 to 10.0.10 Bumps Microsoft.AspNetCore.Authentication.OpenIdConnect from 10.0.3 to 10.0.10 Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.1 to 10.0.10 Bumps Microsoft.Extensions.Hosting from 10.0.3 to 10.0.10 Bumps Microsoft.Extensions.Http from 10.0.3 to 10.0.10 Bumps Microsoft.NET.Test.Sdk from 17.14.1 to 18.8.1 Bumps NATS.Net from 2.7.3 to 3.0.0 Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.16.0 to 1.17.0 Bumps OpenTelemetry.Extensions.Hosting from 1.16.0 to 1.17.0 Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.16.0 to 1.17.0 Bumps OpenTelemetry.Instrumentation.Runtime from 1.16.0 to 1.17.0 Bumps xunit.runner.visualstudio from 3.1.1 to 3.1.5 Bumps xunit.v3 from 3.0.1 to 3.2.2 --- updated-dependencies: - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.AspNetCore.Authentication.OpenIdConnect dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.Extensions.Hosting dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.Extensions.Hosting dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.Extensions.Http dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-dependencies - dependency-name: NATS.Net dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-dependencies - dependency-name: NATS.Net dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-dependencies - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: xunit.runner.visualstudio dependency-version: 3.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: xunit.v3 dependency-version: 3.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-18T18:49:47Z

Dependabot attempted to update this pull request, but because the branch dependabot/nuget/backend/Certael.AnalyticsWorker/nuget-dependencies-b4da9026aa is protected it was unable to do so.

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 18, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the nuget-dependencies group with 13 updates#55

Bump the nuget-dependencies group with 13 updates#55
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/backend/Certael.AnalyticsWorker/nuget-dependencies-b4da9026aa

dependabot Bot commented on behalf of github Jul 18, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

18.8.1

What's Changed

18.8.0

What's Changed

18.7.0

What's Changed

New Contributors

18.6.0

What's Changed

Changes to tests and infra

18.5.1

What's Changed

18.5.0

What's Changed

18.4.0

What's Changed

New Contributors

18.3.0

What's Changed

Internal fixes and updates

New Contributors

18.0.1

What's Changed

Internal changes

18.0.0

What's Changed

Internal fixes and updates

3.0.0

.NET 10 Target

OpenTelemetry

API and behavior changes

Performance and internals

Tests and docs

Thanks

3.0.0-preview.11

3.0.0-preview.10

3.0.0-preview.9

3.0.0-preview.8

3.0.0-preview.7

3.0.0-preview.6

3.0.0-preview.5

3.0.0-preview.4

3.0.0-preview.3

3.0.0-preview.2

What's Changed

2.8.2

What's Changed

2.8.1

What's Changed

New Services Extensions

Detect service errors on responses (#​1152)

2.8.0

NATS Server v2.14 Features

Breaking Changes

Subject Validation On By Default (#​1093)

NKeyPair Removed From NATS.Client.Core (#​1101)

Other Notable Changes

2.8.0-preview.3

2.8.0-preview.2

2.8.0-preview.1

1.17.0

1.17.0-rc.1

1.17.0-beta.1

1.17.0

1.17.0-rc.1

1.17.0-beta.1

1.17.0

1.17.0-rc.1

1.17.0-beta.1

Uh oh!

dependabot Bot commented on behalf of github Jul 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

dependabot Bot commented on behalf of github Jul 18, 2026 •

edited

Loading

Detect service errors on responses (#1152)

Subject Validation On By Default (#1093)

NKeyPair Removed From NATS.Client.Core (#1101)