Bump the nuget group with 6 updates

[dependabot]

Updated Microsoft.ApplicationInsights from 2.23.0 to 3.1.1.

Release notes

Sourced from Microsoft.ApplicationInsights's releases.

3.1.1

Version 3.1.1

• Update OpenTelemetry and Azure Monitor dependencies to address known security advisories (e.g. GHSA-g94r-2vxg-569j in OpenTelemetry.Api 1.15.1): Update OpenTelemetry and Azure Monitor packages to address vulnerabilities microsoft/ApplicationInsights-dotnet#3174
  • OpenTelemetry 1.15.3
  • OpenTelemetry.Exporter.Console 1.15.3
  • OpenTelemetry.Exporter.InMemory 1.15.3
  • OpenTelemetry.Extensions.Hosting 1.15.3
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.2
  • OpenTelemetry.Instrumentation.AspNet 1.15.2
  • OpenTelemetry.Instrumentation.Http 1.15.1
  • OpenTelemetry.Instrumentation.SqlClient 1.15.2
  • Azure.Monitor.OpenTelemetry.Exporter 1.8.0

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights.WorkerService from 2.23.0 to 3.1.1.

Release notes

Sourced from Microsoft.ApplicationInsights.WorkerService's releases.

3.1.1

Version 3.1.1

• Update OpenTelemetry and Azure Monitor dependencies to address known security advisories (e.g. GHSA-g94r-2vxg-569j in OpenTelemetry.Api 1.15.1): Update OpenTelemetry and Azure Monitor packages to address vulnerabilities microsoft/ApplicationInsights-dotnet#3174
  • OpenTelemetry 1.15.3
  • OpenTelemetry.Exporter.Console 1.15.3
  • OpenTelemetry.Exporter.InMemory 1.15.3
  • OpenTelemetry.Extensions.Hosting 1.15.3
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.2
  • OpenTelemetry.Instrumentation.AspNet 1.15.2
  • OpenTelemetry.Instrumentation.Http 1.15.1
  • OpenTelemetry.Instrumentation.SqlClient 1.15.2
  • Azure.Monitor.OpenTelemetry.Exporter 1.8.0

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker from 2.51.0 to 2.52.0.

Release notes

Sourced from Microsoft.Azure.Functions.Worker's releases.

2.52.0

What's Changed

Microsoft.Azure.Functions.Worker (metapackage) 2.52.0

• Update Microsoft.Azure.Functions.Worker.Core to 2.52.0
• Update Microsoft.Azure.Functions.Worker.Grpc to 2.52.0

Microsoft.Azure.Functions.Worker.Core 2.52.0

• Add support for propagating trace context tags from worker to host (#​3303)
• Add support for propagating OpenTelemetry Baggage to the worker. Requires use with the OpenTelemetry Extension to work end to end (#​3319).

Microsoft.Azure.Functions.Worker.Grpc 2.52.0

• Update protobuf version to v1.12.0-protofile and add support for propagating tags from the worker to the functions host (#​3303).
• Update protobuf version to v1.13.0-protofile to add support for propagating OpenTelemetry baggage to the worker (#​3319).

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.UserSecrets from 10.0.3 to 10.0.7.

Release notes

Sourced from Microsoft.Extensions.Configuration.UserSecrets's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.3 to 10.0.7.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Polly from 8.6.5 to 8.6.6.

Release notes

Sourced from Polly's releases.

8.6.6

Highlights

• Fix ScheduledTaskExecutor deadlock when TrySetResult runs continuations inline by @​crnhrv in Fix ScheduledTaskExecutor deadlock when TrySetResult runs continuations inline App-vNext/Polly#2953

What's Changed

• Add specification tests for jitter by @​martincostello in Add specification tests for jitter App-vNext/Polly#2830
• Refactor property-based tests by @​martincostello in Refactor property-based tests App-vNext/Polly#2831
• .NET 10 preparation by @​martincostello in .NET 10 preparation App-vNext/Polly#2842
• Fix CS7035 warning in dependabot jobs by @​martincostello in Fix CS7035 warning in dependabot jobs App-vNext/Polly#2849
• Remove codecov/test-results-action by @​martincostello in Remove codecov/test-results-action App-vNext/Polly#2872
• Update to .NET 10 SDK by @​martincostello in Update to .NET 10 SDK App-vNext/Polly#2531
• Bump zizmor to v1.19.0 by @​martincostello in Bump zizmor to v1.19.0 App-vNext/Polly#2882
• Fix typo by @​martincostello in Fix typo App-vNext/Polly#2886
• Add RateLimitHeaders library to community resources by @​alexis- in Add RateLimitHeaders library to community resources App-vNext/Polly#2887
• Bump zizmor to 1.21.0 by @​martincostello in Bump zizmor to 1.21.0 App-vNext/Polly#2905
• .NET 11 preparation by @​martincostello in .NET 11 preparation App-vNext/Polly#2932
• Remove Stryker workaround by @​martincostello in Remove Stryker workaround App-vNext/Polly#2933
• Group .NET dependency updates by @​martincostello in Group .NET dependency updates App-vNext/Polly#2944
• Migrate to actions/attest by @​martincostello in Migrate to actions/attest App-vNext/Polly#2952

New Contributors

• @​alexis- made their first contribution in Add RateLimitHeaders library to community resources App-vNext/Polly#2887
• @​crnhrv made their first contribution in Fix ScheduledTaskExecutor deadlock when TrySetResult runs continuations inline App-vNext/Polly#2953

Full Changelog: App-vNext/Polly@8.6.5...8.6.6

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 5 package(s) with unknown licenses.

See the Details below.

License Issues

src/MX.Platform.SiteWatch.App/MX.Platform.SiteWatch.App.csproj

Package	Version	License	Issue Type
Microsoft.ApplicationInsights	3.1.1	Null	Unknown License
Microsoft.ApplicationInsights.WorkerService	3.1.1	Null	Unknown License
Microsoft.Azure.Functions.Worker	2.52.0	Null	Unknown License
Microsoft.Extensions.Configuration.UserSecrets	10.0.7	Null	Unknown License
Microsoft.Extensions.Diagnostics.HealthChecks	10.0.7	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
nuget/Microsoft.ApplicationInsights	3.1.1	Unknown	Unknown
nuget/Microsoft.ApplicationInsights.WorkerService	3.1.1	Unknown	Unknown
nuget/Microsoft.Azure.Functions.Worker	2.52.0	Unknown	Unknown
nuget/Microsoft.Extensions.Configuration.UserSecrets	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.Diagnostics.HealthChecks	10.0.7	Unknown	Unknown
nuget/Polly	8.6.6	🟢 7.8	Details Check Score Reason Code-Review ⚠️ 0 Found 0/4 approved changesets -- score normalized to 0 Dependency-Update-Tool 🟢 10 update tool detected Maintained 🟢 10 30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies 🟢 10 all dependencies are pinned CII-Best-Practices 🟢 5 badge detected: Passing Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Packaging 🟢 10 packaging workflow detected License 🟢 10 license file detected Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Fuzzing ⚠️ 0 project is not fuzzed CI-Tests 🟢 10 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 Contributors 🟢 10 project has 25 contributing companies or organizations

Scanned Files

• src/MX.Platform.SiteWatch.App/MX.Platform.SiteWatch.App.csproj