Bump the azure group with 6 updates

[dependabot]

Updated Azure.Monitor.OpenTelemetry.Exporter from 1.6.0 to 1.8.3.

Release notes

Sourced from Azure.Monitor.OpenTelemetry.Exporter's releases.

1.8.3

1.8.3 (2026-07-24)

Bugs Fixed

• Hardened ingestion and Live Metrics redirect handling to reject untrusted destinations before replaying telemetry or caching the redirect. Redirect targets must now use HTTPS and match an approved Azure Monitor trust boundary, preventing credentials and telemetry from being forwarded to attacker-controlled endpoints.
  (#​61244)

Other Changes

• Customer SDK stats are now on by default; opt out with APPLICATIONINSIGHTS_SDKSTATS_DISABLED=true. dropCode/retryCode dimension values now use the spec's SCREAMING_SNAKE_CASE (e.g. CLIENT_EXCEPTION).

1.8.2

1.8.2 (2026-06-30)

Features Added

• Added support for the Microsoft OpenTelemetry distro's SDK statistics: a new internal meter subscription and an AppContext switch (Azure.Monitor.OpenTelemetry.Exporter.RouteSdkStatsToDistroEndpoint) that lets the distro redirect SDK statistics to its own ingestion path. The ingestion destination and an on/off signal are resolved at startup by fetching a remote configuration; on success the configured destination is used, an explicit remote disable signal turns SDK statistics off, and any other outcome falls back to the existing region-derived ingestion endpoint so SDK statistics keep flowing. The AppContext switch has no effect on Statsbeat for callers that do not opt in.
  (#​59811)

• Subscribed the Statsbeat MeterProvider to the Microsoft OpenTelemetry distro's Network SDKStats meter (MicrosoftOpenTelemetryNetworkSdkStatsMeter) so distro-emitted Network statistics flow through the existing Statsbeat cadence when the distro runs with a non-Azure-Monitor exporter.
  (#​60209)

• Subscribed the Statsbeat MeterProvider to the Microsoft OpenTelemetry distro's Feature SDKStats meter (MicrosoftOpenTelemetryFeatureSdkStatsMeter) so distro-emitted Feature statistics reach the Statsbeat ingestion path. The distro uses an independent, spec-aligned bit map to avoid collisions with the classic Application Insights SDK's FeatureStatsbeatMeter.
  (#​59529)

• Added Network SDKStats reporting, emitting the short-interval Network statistics defined in the Application Insights SDKStats spec on a 15-minute cadence: Request_Success_Count, Request_Failure_Count, Request_Duration, Retry_Count, Throttle_Count, and Exception_Count, each with the spec-defined dimensions (including host, statusCode, and exceptionType).
  (#​59909, #​60018)

Other Changes

• Updated customer SDK stats dimension key names to use camelCase (computeType, telemetryType, dropCode, dropReason, retryCode, retryReason).
  (#​59902)

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker from 2.51.0 to 2.52.0.

Release notes

Sourced from Microsoft.Azure.Functions.Worker's releases.

2.52.0

What's Changed

Microsoft.Azure.Functions.Worker (metapackage) 2.52.0

• Update Microsoft.Azure.Functions.Worker.Core to 2.52.0
• Update Microsoft.Azure.Functions.Worker.Grpc to 2.52.0

Microsoft.Azure.Functions.Worker.Core 2.52.0

• Add support for propagating trace context tags from worker to host (#​3303)
• Add support for propagating OpenTelemetry Baggage to the worker. Requires use with the OpenTelemetry Extension to work end to end (#​3319).

Microsoft.Azure.Functions.Worker.Grpc 2.52.0

• Update protobuf version to v1.12.0-protofile and add support for propagating tags from the worker to the functions host (#​3303).
• Update protobuf version to v1.13.0-protofile to add support for propagating OpenTelemetry baggage to the worker (#​3319).

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore from 2.1.0 to 2.1.1.

Release notes

Sourced from Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore's releases.

2.1.1

What's Changed

Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore 2.1.1

• Fix response cookie duplication in ASP.NET Core integration by giving IHeaderDictionary indexer setters replace semantics, including removing the header when assigned StringValues.Empty (#​3353)
• Pass cancellation tokens (RequestAborted / CancellationToken) through to WaitAsync calls so cancelled HTTP
  requests propagate promptly instead of waiting for timeout (#​3415)
• Fix intermittent InvalidOperationException due to race condition between SetResult call on TCS and HTTP request cancellation/timeout (#​3415)

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker.OpenTelemetry from 1.1.0 to 1.2.0.

Release notes

Sourced from Microsoft.Azure.Functions.Worker.OpenTelemetry's releases.

1.2.0

What's Changed

Microsoft.Azure.Functions.Worker.OpenTelemetry 1.2.0

• Add support for propagating OpenTelemetry baggage to the worker (#​3319).
• FunctionsResourceDetector now respects OTEL_SERVICE_NAME and OTEL_RESOURCE_ATTRIBUTES — when either is set, the detector skips adding service.name and/or service.version so the OTel SDK picks them up without duplication (#​3362).

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker.Sdk from 2.0.7 to 2.1.0.

Release notes

Sourced from Microsoft.Azure.Functions.Worker.Sdk's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated OpenTelemetry.Extensions.Hosting from 1.15.0 to 1.15.3.

Release notes

Sourced from OpenTelemetry.Extensions.Hosting's releases.

1.15.3

For highlights and announcements pertaining to this release see: Release Notes > 1.15.3.

The following changes are from the previous release 1.15.2.

• NuGet: OpenTelemetry v1.15.3

  • Fix resource leak in batch and periodic exporting task workers for Blazor/WASM.
    (#​7069)

  • Fixed LogRecord.LogLevel to preserve LogLevel.None and handle
    unspecified or out-of-range severities without returning invalid enum values.
    (#​7092)

  • Fixed OTEL_TRACES_SAMPLER_ARG handling to treat out-of-range, NaN, and
    infinite values as invalid and fall back to the default ratio when using
    traceidratio and parentbased_traceidratio samplers.
    (#​7103)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.15.3

  • Fix baggage and trace headers not respecting the maximum length in some cases
    to resolve GHSA-g94r-2vxg-569j.
    (#​7061)

  • Improve efficiency of parsing of baggage and B3 propagation headers
    to resolve GHSA-g94r-2vxg-569j.
    (#​7061)

  • Breaking change: Fixed tracestate parsing to reject keys that do not
    begin with a lowercase letter, including keys beginning with digits, to
    align with the W3C Trace Context specification.
    (#​7065)

  • Fixed BaggagePropagator to trim optional whitespace (OWS) around =
    separators when parsing the baggage header, as required by the
    W3C Baggage specification.
    (#​7009)

  • Fixed BaggagePropagator to strip baggage properties (e.g. ;metadata)
    from values when parsing the baggage header.
    (#​7009)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.15.3

  No notable changes.

... (truncated)

1.15.3-beta.1

The following changes are from the previous release 1.15.2-beta.1.

• NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.15.3-beta.1

  • Fixed metric unit strings containing invalid Prometheus characters (e.g. # RU)
    not being sanitized, resulting in malformed metric names.
    (#​6187)

  • Fixed Prometheus metric serialization to handle empty label names without
    throwing during scrape rendering.
    (#​7077)

  • Updated OpenTelemetry core component version(s) to 1.15.3.
    (#​7125)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.15.3-beta.1

  • Fixed metric unit strings containing invalid Prometheus characters (e.g. # RU)
    not being sanitized, resulting in malformed metric names.
    (#​6187)

  • Fixed Prometheus metric serialization to handle empty label names without
    throwing during scrape rendering.
    (#​7077)

  • Updated OpenTelemetry core component version(s) to 1.15.3.
    (#​7125)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Shims.OpenTracing v1.15.3-beta.1

  • Fixes support for byte, short, int, and float attributes.
    (#​7080)

  • Updated OpenTelemetry core component version(s) to 1.15.3.
    (#​7125)

  See CHANGELOG for details.

1.15.2

For highlights and announcements pertaining to this release see: Release Notes > 1.15.2.

The following changes are from the previous release 1.15.1.

• NuGet: OpenTelemetry v1.15.2

  • Added Task-based worker support for BatchExportProcessor and
    PeriodicExportingMetricReader to enable OpenTelemetry to work in
    single-threaded WebAssembly environments such as Blazor and Uno Platform.
    The implementation automatically detects the WebAssembly runtime and switches
    to Task-based workers accordingly; the Thread-based approach remains the
    default on all other platforms.
    (#​6379)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.15.2

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.15.2

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Console v1.15.2

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.InMemory v1.15.2

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.15.2

  • Limit how much of the response body is read when export fails and
    error logging is enabled to resolve
    GHSA-q834-8qmm-v933.
    (#​7017)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Zipkin v1.15.2
  ... (truncated)

1.15.2-beta.1

The following changes are from the previous release 1.15.1-beta.1.

• NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.15.2-beta.1

  • Updated OpenTelemetry core component version(s) to 1.15.2.
    (#​7049)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.15.2-beta.1

  • Updated OpenTelemetry core component version(s) to 1.15.2.
    (#​7049)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Shims.OpenTracing v1.15.2-beta.1

  • Updated OpenTelemetry core component version(s) to 1.15.2.
    (#​7049)

  See CHANGELOG for details.

1.15.1

For highlights and announcements pertaining to this release see: Release Notes > 1.15.1.

The following changes are from the previous release 1.15.0.

• NuGet: OpenTelemetry v1.15.1

  • Fixed Tracer.StartSpan() leaving the new span as Activity.Current when
    the previous activity was stopped by another thread during span creation.
    (#​6257)

  • Fixed OverflowException in TraceIdRatioBasedSampler when trace ID bytes
    produced long.MinValue.
    ([#​6928])

  • Fixed precision issues when using Histogram<float> with custom
    HistogramBucketBoundaries.
    (#​6866)

  • Fixed a thread-safety issue in LogRecordSharedPool.Rent().
    (#​6833)

  • Fixed observable instruments (ObservableCounter, ObservableUpDownCounter,
    ObservableGauge) continuing to export stale data points after a callback
    stops reporting a series.
    (#​5950)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.15.1

  • Breaking change: The Baggage API implements the latest Baggage API
    specification,
    which disallows empty baggage names and treats baggage names and values as case
    sensitive.
    (#​6931)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.15.1

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Console v1.15.1

  No notable changes.

  See CHANGELOG for details.

... (truncated)

1.15.1-beta.1

The following changes are from the previous release 1.15.0-beta.1.

• NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.15.1-beta.1

  • Updated OpenTelemetry core component version(s) to 1.15.1.
    (#​7010)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.15.1-beta.1

  • Updated OpenTelemetry core component version(s) to 1.15.1.
    (#​7010)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Shims.OpenTracing v1.15.1-beta.1

  • This package is deprecated and it will stop receiving any updates in
    March 2027. Use the OpenTelemetry API and SDK directly instead of the OpenTracing
    shims.
    (#​6976)

  • Updated OpenTelemetry core component version(s) to 1.15.1.
    (#​7010)

  See CHANGELOG for details.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions