You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Breaking change: Fixed tracestate parsing to reject keys that do not
begin with a lowercase letter, including keys beginning with digits, to
align with the W3C Trace Context specification.
Breaking change: Fixed an insecure disk retry default for OTLP export.
Disk retry now requires OTEL_DOTNET_EXPERIMENTAL_OTLP_DISK_RETRY_DIRECTORY_PATH
when OTEL_DOTNET_EXPERIMENTAL_OTLP_RETRY=disk is configured.
Improve efficiency of parsing of baggage and B3 propagation headers.
OtlpLogExporter now uses IHttpClientFactory on .NET 8+.
Fixed an issue in OTLP/gRPC retry handling when parsing gRPC statuses.
Fixed OTEL_SPAN_ATTRIBUTE_VALUE_LENGTH_LIMIT not being applied.
Fixed baggage and trace headers not respecting the maximum length in some cases.
Fixed BaggagePropagator to trim optional whitespace (OWS) around =
separators when parsing the baggage header.
Fixed BaggagePropagator to strip baggage properties from values when
parsing the baggage header.
Fixed OTLP persistent storage clean-up handling for malformed filenames.
Fixed resource leak in batch and periodic exporting task workers for Blazor/WASM.
Fixed LogRecord.LogLevel to preserve LogLevel.None.
Fixed OTEL_TRACES_SAMPLER_ARG handling for out-of-range values.
Fixed an issue with OTLP disk retry storage where metrics and logs used the
traces storage directory.
Fixed full OTLP endpoint being logged by internal diagnostics.
Improve efficiency of parsing of baggage, B3 and Jaeger propagation headers.
Hardened Zipkin exporter memory usage for endpoint caching and array tag
serialization.
Limit how much of the response body is read by the OTLP exporter when
export fails and error logging is enabled.
Added Task-based worker support for BatchExportProcessor and PeriodicExportingMetricReader to enable the OpenTelemetry SDK to work
in single-threaded WebAssembly environments such as Blazor and
Uno Platform.
Breaking change: The Baggage API now disallows empty baggage names and
treats baggage names and values as case sensitive, aligning with the latest Baggage API specification.
Various bug fixes across OpenTelemetry.Api and OpenTelemetry SDK,
including fixes for thread-safety, sampler edge cases, metrics precision,
and observable instrument lifecycle handling.
Added support for ActivitySource.TelemetrySchemaUrl
and Meter.TelemetrySchemaUrl properties across exporters.
Improved performance and reduced memory consumption for metrics histograms.
Added mTLS configuration support for the OTLP exporter (client cert/key and
CA certificate options).
OpenTelemetry.Exporter.Zipkin is deprecated and will stop receiving updates
in December 2026. Zipkin already supports OTLP ingestion.
Migrate to OpenTelemetry.Exporter.OpenTelemetryProtocol as stated
in the Deprecating Zipkin Exporter blog post.
Breaking Change When targeting net8.0, the package now depends on version 8.0.0 of the Microsoft.Extensions.DependencyInjection.Abstractions, Microsoft.Extensions.Diagnostics.Abstractions, Microsoft.Extensions.Hosting.Abstractions and Microsoft.Extensions.Logging.Configuration NuGet packages.
Update System.Diagnostics.DiagnosticSource dependency to 10.0.0
for all target frameworks.
Update Microsoft.Extensions.* dependencies to 10.0.0
for .NET Framework and .NET Standard.
Breaking Change NuGet packages now use the Sigstore bundle format
(.sigstore.json) for digital signatures instead of separate signature
(.sig) and certificate (.pem) files. This requires cosign 3.0 or later
for verification. See the Digital signing
section for updated verification instructions.
In version 1.13.0, the digital signature (.dll-keyless.sig) and
certificate (.dll-keyless.pem) files were unintentionally omitted from the
published NuGet packages.
This hotfix restores the Sigstore signing artifacts for all target frameworks
(net462, netstandard2.0, netstandard2.1, net8.0, net9.0), ensuring
the integrity of DLL verification using Sigstore cosign.
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
The PR implementation is fundamentally misaligned with its stated intent. While the title and description specify updates to several OpenTelemetry components, the code changes modify an unrelated package not mentioned in the requirements. Furthermore, the implementation introduces a syntax inconsistency in the configuration file, and all specified acceptance criteria remain unaddressed. Because the core requirements are missing, the PR is not ready for merging.
About this PR
The PR implementation is completely misaligned with the provided title and description. The expected package updates are missing from the code diff, and an unrelated package update was included instead.
Test suggestions
Verify core and hosting packages are updated
Verify instrumentation packages are updated
Verify the additional package update matches intended specifications
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Verify core and hosting packages are updated
2. Verify instrumentation packages are updated
3. Verify the additional package update matches intended specifications
The reason will be displayed to describe this comment to others. Learn more.
🔴 HIGH RISK
The package updated in this file does not match the PR title and description, and the intended updates are missing. Additionally, the XML structure used for this entry is inconsistent with the attribute-based versioning convention applied to other packages in this file.
Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.
You can manually request rebase by checking the rebase/retry box above.
⚠️Warning: custom changes will be lost.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
📦 dependenciesPull requests that update a dependency file
0 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
renovate
Bot
added
the
📦 dependencies
![codacy-production[bot]](https://avatars.githubusercontent.com/in/56611?s=60&v=4){kind=small}
This PR contains the following updates:
1.12.0→1.16.01.12.0→1.16.01.12.0→1.15.21.12.0→1.15.11.12.0→1.15.1Release Notes
open-telemetry/opentelemetry-dotnet (OpenTelemetry)
v1.16.0Release details: 1.16.0
10 million values.
BaggagePropagatorto correctly follow Key and Value Encoding rules.TraceContextPropagatorto deduplicate duplicatetracestatekeys.ObservedTimestampwill now be exported for logs in the console exporter.NullReferenceExceptionwhen exporting OTLP logs if the scope key isnull.
storage retry.
OtlpLogExporterintegration withIHttpClientFactory.IHttpClientFactorywhen mTLS isenabled.
Retry-Afterresponse headers that specify a date instead of a delay.observed_time_unix_nanowill no longer always be identical totime_unix_nanowhen using the logs bridge API.
Nameagainst the instrument namesyntax.
OTEL_BSP_*andOTEL_BLRP_*environment variables.collection cycle.
ExemplarReservoirimplementations.LoggerProviderto fail toresolve when one of its dependencies depends on
ILoggerorILoggerFactory.v1.15.3Release details: 1.15.3
tracestateparsing to reject keys that do notbegin with a lowercase letter, including keys beginning with digits, to
align with the W3C Trace Context specification.
Disk retry now requires
OTEL_DOTNET_EXPERIMENTAL_OTLP_DISK_RETRY_DIRECTORY_PATHwhen
OTEL_DOTNET_EXPERIMENTAL_OTLP_RETRY=diskis configured.OtlpLogExporternow usesIHttpClientFactoryon .NET 8+.OTEL_SPAN_ATTRIBUTE_VALUE_LENGTH_LIMITnot being applied.BaggagePropagatorto trim optional whitespace (OWS) around=separators when parsing the
baggageheader.BaggagePropagatorto strip baggage properties from values whenparsing the
baggageheader.LogRecord.LogLevelto preserveLogLevel.None.OTEL_TRACES_SAMPLER_ARGhandling for out-of-range values.traces storage directory.
serialization.
v1.15.2Release details: 1.15.2
export fails and error logging is enabled.
BatchExportProcessorandPeriodicExportingMetricReaderto enable the OpenTelemetry SDK to workin single-threaded WebAssembly environments such as Blazor and
Uno Platform.
v1.15.1Release details: 1.15.1
treats baggage names and values as case sensitive, aligning with the latest
Baggage API specification.
OpenTelemetry.ApiandOpenTelemetrySDK,including fixes for thread-safety, sampler edge cases, metrics precision,
and observable instrument lifecycle handling.
v1.15.0Release details: 1.15.0
ActivitySource.TelemetrySchemaUrland
Meter.TelemetrySchemaUrlproperties across exporters.CA certificate options).
OpenTelemetry.Exporter.Zipkinis deprecated and will stop receiving updatesin December 2026. Zipkin already supports OTLP ingestion.
Migrate to
OpenTelemetry.Exporter.OpenTelemetryProtocolas statedin the Deprecating Zipkin Exporter blog post.
v1.14.0Release details: 1.14.0
net8.0, the package now depends on version8.0.0of theMicrosoft.Extensions.DependencyInjection.Abstractions,Microsoft.Extensions.Diagnostics.Abstractions,Microsoft.Extensions.Hosting.AbstractionsandMicrosoft.Extensions.Logging.ConfigurationNuGet packages.System.Diagnostics.DiagnosticSourcedependency to10.0.0for all target frameworks.
Microsoft.Extensions.*dependencies to10.0.0for .NET Framework and .NET Standard.
(
.sigstore.json) for digital signatures instead of separate signature(
.sig) and certificate (.pem) files. This requires cosign 3.0 or laterfor verification. See the Digital signing
section for updated verification instructions.
v1.13.1Release details: 1.13.1
1.13.0, the digital signature (.dll-keyless.sig) andcertificate (
.dll-keyless.pem) files were unintentionally omitted from thepublished NuGet packages.
(
net462,netstandard2.0,netstandard2.1,net8.0,net9.0), ensuringthe integrity of DLL verification using Sigstore cosign.
v1.13.0Release details: 1.13.0
OtlpExportProtocol.Grpcnow set the
TE=trailersHTTP request header to improve interoperability.EventNameis now exported by default asEventNameinstead oflogrecord.event.namewhen specified throughILoggeror the experimentallog bridge API.
open-telemetry/opentelemetry-dotnet-contrib (OpenTelemetry.Instrumentation.AspNetCore)
v1.15.1Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.