Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 22, 2025

Updated Microsoft.ApplicationInsights.AspNetCore from 2.1.1 to 2.23.0.

Release notes

Sourced from Microsoft.ApplicationInsights.AspNetCore's releases.

2.23.0

  • no changes since beta.

2.23.0-beta1

2.22.0

  • no changes since beta.

2.22.0-beta4

2.22.0-beta3

2.22.0-beta2

2.22.0-beta1

2.21.0

  • no changes since beta.

2.21.0-beta3

2.21.0-beta2

2.21.0-beta1

2.20.0

2.20.0-beta1

2.19.0

2.19.0-beta1

2.18.0

2.18.0-beta3

2.18.0-beta2

2.18.0-beta1

2.17.0

2.17.0-beta1

2.16.0

2.16.0-beta1

2.15.0

  • EventCounterCollector module does not add AggregationInterval as a dimension to the metric.

2.15.0-beta3

2.15.0-beta2

2.15.0-beta1

2.14.0

  • no changes since beta.

2.14.0-beta5

2.14.0-beta3

2.14.0-beta2

2.14.0-beta1

2.13.1

2.13.0

2.13.0-beta2

2.13.0-beta1

2.12.2

2.12.1

2.12.0

2.12.0-beta4

2.12.0-beta3

2.12.0-beta2

2.12.0-beta1

2.11.0

2.11.0-beta2

2.11.0-beta1

2.10.0

2.10.0-beta4

2.10.0-beta3

  • No changes. Bumping version to match WebSDK release.

2.10.0-beta2

2.9.1

2.9.0

2.9.0-beta3

2.9.0-beta2

Important: The 2.9.0-beta2 has a known issue - Installing this package will create ApplicationInsights.config file, but it'll not set it to be copied to output directory. Users are advised to set this file to 'Copy if newer' so that build output will have the ApplicationInsights.config file.
This is expected to be fixed in next beta.

Perf Improvements.

2.8.1

Patch release addressing perf regression.

2.8.0

2.8.0-beta2

2.8.0-beta1

2.7.2

2.7.1

2.7.0-beta4

2.7.0-beta3

2.7.0-beta2

2.7.0-beta1

2.6.4

2.6.1

Extend the Beta period for Metrics Pre-Aggregation features shipped in 2.6.0-beta3.

2.6.0-beta4

2.6.0-beta3

2.6.0-beta2

2.5.1

2.5.0

2.5.0-beta2

2.5.0-beta1

  • Method Sanitize on classes implementing ITelemetry no longer modifies the TelemetryContext fields. Serialized event json and ETW event will still have context tags sanitized.
  • Application Insights SDK supports multiple telemetry sinks. You can configure more than one channel for telemetry now.
  • New method DeepClone on ITelemetry interface. Implemented by all supported telemetry items.
  • Server telemetry channel NuGet support a netstandard1.3 target with fixed rate sampling and adaptive sampling telemetry processors.
  • Instrumentation key is no longer required for TelemetryClient to send data to channel(s). This makes it easier to use the SDK with channels other than native Application Insights channels.
  • .NET 4.0 targets were removed. Please use the version 2.4.0 if you cannot upgrade your application to the latest framework version.
  • Removed wp8, portable-win81+wpa81 and uap10.0 targets.

2.4.0

Includes all changes since 2.3.0 stable release.
Updated reference to System.Diagnostics.DiagnosticSource version 4.4.0

2.4.0-beta4

This release contains the following changes:

  • Made Metric class private and fixed various metrics related issues.

You should also include an explicit reference to System.Diagnostics.DiagnosticSource 4.4.0-preview2-25330-01 since it contains a critical bug fix this release relies on (you can remove this reference when 2.4.0 stable ships with an updated reference).

2.4.0-beta3

  • No product changes since beta2. Named changed to beta3 for consistent naming with ApplicationInsights Web SDK

2.4.0-beta2

  • Removed metric aggregation functionality as there is not enough feedback on the API surface yet.

2.4.0-beta1

  • Event telemetry is set to be sampled separately from all other telemetry types. It potentially can double the bill. The reason for this change is that Events are mostly used for usage analysis and should not be subject to sampling on high load of requests and dependencies. Edit ApplicationInsights.config file to revert to the previous behavior.
  • Added dependency on System.Diagnostics.DiagnosticsSource package. It is still possible to use standalone Microsoft.ApplicationInsights.dll to track telemetry.
  • StartOperation starts a new System.Diagnostics.Activity and stores operation context in it. StartOperation overwrites OperationTelemetry.Id set before or during telemetry initialization for the dependency correlation purposes.
  • OperationCorrelationTelemetryInitializer initializes telemetry from the Activity.Current. Please refer to https://github.com/dotnet/corefx/blob/master/src/System.Diagnostics.DiagnosticSource/src/ActivityUserGuide.md for more details about Activity and how to use it
  • Request.Success field will not be populated based on ResponseCode. It needs to be set explicitly.
  • New "ProblemId" property on ExceptionTelemetry. It can be used to set a custom ProblemId value.
  • Metric Aggregation functionality (originally added in 2.3.0-beta1 but removed in 2.3.0) is re-introduced.
  • Improved exception stack trace data collection for .NET Core applications.

2.3.0

Includes all changes since 2.2.0 stable release.
Removed metric aggregation functionality added in 2.3.0-beta1 release.
Fixed a bug which caused SDK to stop sending telemetry.

2.3.0-beta3

Added overloads of TelemetryClientExtensions.StartOperation.
Fire new ETW events for Operation Start/Stop.

2.3.0-beta2

Added constructor overloads for TelemetryConfiguration and added creation of a default InMemoryChannel when no channel is specified for a new instance. TelemetryClient will no longer create an InMemoryChannel on the configuration instance if TelemetryChannel is null, instead the configuration instances will always have a channel when created.
TelemetryConfiguration will no longer dispose of user provided ITelemetryChannel instances. Users must properly dispose of any channel instances which they create, the configuration will only auto-dispose of default channel instances it creates when none are specified by the user.

All issues from this list:
https://github.com/Microsoft/ApplicationInsights-dotnet/milestone/13?closed=1

2.3.0-beta1

  • Added metric aggregation functionality via MetricManager and Metric classes.
  • Exposed a source field on RequestTelemetry. This can be used to store a representation of the component that issued the incoming http request.

2.2.0

  • Includes all changes since 2.1.0 stable release.

2.2.0-beta6

2.2.0-beta4

  • Payload sanitization for RichPayloadEventSource.
  • Fix to fallback to an environment variable for instrumentation key when not specified when initializing TelemetryConfiguration.
  • RoleInstance and NodeName are initialized with the machine name by default.
  • Read InstrumentationKey from environment variable APPINSIGHTS_INSTRUMENTATIONKEY if it is was not provided inline. If provided it overrides what is set though configuration file. (Feature is not available in PCL version of SDK).
  • Context properties NetworkType, ScreenResolution and Language marked as obsolete. Please use custom properties to report network type, screen resolution and language. Values stored in these properties will be send as custom properties.
  • Dependency type was updated to reflect the latest developments in Applicaiton Insights Applicaiton Map feature. You can set a new field - Target. CommandName was renamed to Data for consistancy with the Application Analytics schema. DependencyKind will never be send any more and will not be set to "Other" by default. Also there are two more constructors for DependencyTelemetry item.
  • Type SessionStateTelemetry was marked obsolete. Use IsFirst flag in SessionContext to indicate that the session is just started.
  • Type PerformanceCounterTelemetry was marked obsolete. Use MetricTelemetry instead.
  • Marked RequestTelemetry.HttpMethod as obsolete. Put http verb as part of the name for the better grouping by name and use custom properties to report http verb as a dimension.
  • Marked RequestTelemetry.StartTime as obsolete. Use TimeStamp instead.
  • Removed BCL dependency
  • Added IPv6 support
  • Fixed an issue where channels sent expired data from storage
  • Fixed an issue where the clock implementation would accumulate error
  • Fixed an issue where telemetry with emptry properties would be dropped
  • Added support for SDK-side throttling

2.2.0-beta2

  • InMemoryChannel has a new override for Flush method that accepts timeout.
  • Local storage folder name was changed. That means that when the application stopped, and the application was updated to the new SDK, then the telemetry from the old local folder will not be send.
  • Allow all characters in property names and measurements names.
  • AdaptiveTelemetryProcessor has a new property IncludedTypes. It gets or sets a semicolon separated list of telemetry types that should be sampled. If left empty all types are included implicitly. Types are not included if they are set in ExcludedTypes.
  • Richpayload event source event is generated for all framework versions of SDK (before it was supported in 4.6 only)
  • TelemetryClient has a new method TrackAvailability. Data posted using this method would be available in AppAnalitics only, Azure portal UI is not available at this moment.

2.2.0-beta1

  • Add ExceptionTelemetry.Message property. If it is provided it is used instead of Exception.Message property for the outer-most exception.
  • Telemetry types can be excluded from sampling by specifying the ExcludedTypes property (Add ExcludedTypes element under AdaptiveSampling telemetry processor node with ';'-separated list. Possible types are "Dependency", "Event", "Exception", "PageView", "Request", "Trace").
  • ServerTelemetryChannel: changed backoff logic to be less aggressive, added diagnostics event when backoff logic kicks in and added more tracing. (Done to address issues when data stops flowing until an application gets restarted)

Commits viewable in compare view.

Updated System.Text.Encodings.Web from 4.5.1 to 4.7.2.

Release notes

Sourced from System.Text.Encodings.Web's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Microsoft.ApplicationInsights.AspNetCore from 2.1.1 to 2.23.0
Bumps System.Text.Encodings.Web from 4.5.1 to 4.7.2

---
updated-dependencies:
- dependency-name: Microsoft.ApplicationInsights.AspNetCore
  dependency-version: 2.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: System.Text.Encodings.Web
  dependency-version: 4.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Dec 22, 2025
@github-actions
Copy link

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 502a479.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

PackageVersionScoreDetails
nuget/Microsoft.ApplicationInsights.AspNetCore 2.23.0 🟢 7.5
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Security-Policy🟢 10security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
License🟢 10license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Packaging🟢 10packaging workflow detected
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
nuget/System.Text.Encodings.Web 4.7.2 🟢 3.8
Details
CheckScoreReason
Pinned-Dependencies⚠️ -1no dependencies found
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ -1No tokens found
Code-Review🟢 5Found 2/4 approved changesets -- score normalized to 5
Maintained⚠️ 0project is archived
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow⚠️ -1no workflows found
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
License⚠️ 0license file not detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Signed-Releases⚠️ -1no releases found

Scanned Files

  • src/PartsUnlimited.Website/PartsUnlimited.Website.csproj

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant