Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 19, 2025

Updated Grpc.AspNetCore from 2.67.0 to 2.71.0.

Release notes

Sourced from Grpc.AspNetCore's releases.

2.71.0

What's Changed

Full Changelog: grpc/grpc-dotnet@v2.70.0...v2.71.0

2.71.0-pre1

What's Changed

Full Changelog: grpc/grpc-dotnet@v2.70.0...v2.71.0-pre1

2.70.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.67.0...v2.70.0

Commits viewable in compare view.

Updated Grpc.AspNetCore.HealthChecks from 2.67.0 to 2.71.0.

Release notes

Sourced from Grpc.AspNetCore.HealthChecks's releases.

2.71.0

What's Changed

Full Changelog: grpc/grpc-dotnet@v2.70.0...v2.71.0

2.71.0-pre1

What's Changed

Full Changelog: grpc/grpc-dotnet@v2.70.0...v2.71.0-pre1

2.70.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.67.0...v2.70.0

Commits viewable in compare view.

Updated OpenFeature from 2.9.0 to 2.11.0.

Release notes

Sourced from OpenFeature's releases.

2.11.0

2.11.0 (2025-12-18)

✨ New Features

2.10.0

2.10.0 (2025-12-01)

🐛 Bug Fixes

  • Address issue with FeatureClient not being resolved when no Provider added (#​607) (a8d12ef)
  • Address issues when evaluating the context in the InMemoryProvider (#​615) (94fcdc1)
  • Ensure AddPolicyName without adding a Provider does not get stuck in infinite loop (#​606) (4b965dd)
  • Ensure EvaluationContext is reliably added to the injected FeatureClient (#​605) (c987b58)

✨ New Features

  • Add DI for multi provider (#​621) (ee862f0)
  • Add disabled flag support to InMemoryProvider (#​632) (df1765c)
  • Add optional CancellationToken parameter to SetProviderAsync (#​638) (a1f7ff6)
  • Add SourceLink configuration for .NET SDK 8+ to enhance debugging experience (1b40391)
  • Add SourceLink configuration for .NET to enhance debugging experience (#​614) (1b40391)
  • Add tracking to multi-provider (#​612) (186b357)

🔧 Refactoring

  • Clean up project files by removing TargetFrameworks and formatting (#​611) (dfbc3ee)
  • Pass cancellation tokens to Provider Initialization functions (#​640) (8b472d8)
  • Remove deprecated Dependency Injection code (#​626) (a36a906)

Commits viewable in compare view.

Updated OpenFeature.Hosting from 2.9.0 to 2.11.0.

Release notes

Sourced from OpenFeature.Hosting's releases.

2.11.0

2.11.0 (2025-12-18)

✨ New Features

2.10.0

2.10.0 (2025-12-01)

🐛 Bug Fixes

  • Address issue with FeatureClient not being resolved when no Provider added (#​607) (a8d12ef)
  • Address issues when evaluating the context in the InMemoryProvider (#​615) (94fcdc1)
  • Ensure AddPolicyName without adding a Provider does not get stuck in infinite loop (#​606) (4b965dd)
  • Ensure EvaluationContext is reliably added to the injected FeatureClient (#​605) (c987b58)

✨ New Features

  • Add DI for multi provider (#​621) (ee862f0)
  • Add disabled flag support to InMemoryProvider (#​632) (df1765c)
  • Add optional CancellationToken parameter to SetProviderAsync (#​638) (a1f7ff6)
  • Add SourceLink configuration for .NET SDK 8+ to enhance debugging experience (1b40391)
  • Add SourceLink configuration for .NET to enhance debugging experience (#​614) (1b40391)
  • Add tracking to multi-provider (#​612) (186b357)

🔧 Refactoring

  • Clean up project files by removing TargetFrameworks and formatting (#​611) (dfbc3ee)
  • Pass cancellation tokens to Provider Initialization functions (#​640) (8b472d8)
  • Remove deprecated Dependency Injection code (#​626) (a36a906)

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.11.2 to 1.14.0.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.14.0

For highlights and announcements pertaining to this release see: Release Notes > 1.14.0.

The following changes are from the previous release 1.14.0-rc.1.

  • NuGet: OpenTelemetry v1.14.0

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section
      for updated verification instructions.
      (#​6623)

    • Update to stable versions for .NET 10.0 NuGet packages.
      (#​6667)

    • Update Microsoft.Extensions.* dependencies to 10.0.0 for .NET Framework
      and .NET Standard.
      (#​6667)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api v1.14.0

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section
      for updated verification instructions.
      (#​6623)

    • Update System.Diagnostics.DiagnosticSource dependency to 10.0.0
      for all target frameworks.
      (#​6667)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.14.0

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section
      for updated verification instructions.
      (#​6623)

    • Update to stable versions for .NET 10.0 NuGet packages.
      (#​6667)

    • Update Microsoft.Extensions.* dependencies to 10.0.0 for .NET Framework
      ... (truncated)

1.14.0-rc.1

The following changes are from the previous release 1.13.1.

... (truncated)

1.14.0-beta.1

The following changes are from the previous release 1.13.1-beta.1.

  • NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.14.0-beta.1

    • Breaking Change When targeting net8.0, the package now depends on version
      8.0.0 of the Microsoft.Extensions.DependencyInjection.Abstractions,
      Microsoft.Extensions.Diagnostics.Abstractions and
      Microsoft.Extensions.Logging.Configuration NuGet packages.
      (#​6327)

    • Add support for .NET 10.0.
      (#​6307)

    • Added the possibility to disable timestamps via the PrometheusAspNetCoreOptions.
      (#​6600)

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section
      for updated verification instructions.
      (#​6623)

    • Updated OpenTelemetry core component version(s) to 1.14.0.
      (#​6689)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.14.0-beta.1

    • Breaking Change When targeting net8.0, the package now depends on version
      8.0.0 of the Microsoft.Extensions.DependencyInjection.Abstractions,
      Microsoft.Extensions.Diagnostics.Abstractions and
      Microsoft.Extensions.Logging.Configuration NuGet packages.
      (#​6327)

    • Add support for .NET 10.0.
      (#​6307)

    • Added the possibility to disable timestamps via the PrometheusHttpListenerOptions.
      (#​6600)

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section
      for updated verification instructions.
      (#​6623)

    • Updated OpenTelemetry core component version(s) to 1.14.0.
      ... (truncated)

1.13.1

For highlights and announcements pertaining to this release see: Release Notes > 1.13.1.

The following changes are from the previous release 1.13.0.

... (truncated)

1.13.1-beta.1

The following changes are from the previous release 1.13.0-beta.1.

1.13.0

For highlights and announcements pertaining to this release see: Release Notes > 1.13.0.

The following changes are from the previous release 1.12.0.

  • NuGet: OpenTelemetry v1.13.0

    • Added a verification to ensure that a MetricReader can only be registered
      to a single MeterProvider, as required by the OpenTelemetry specification.
      (#​6458)

    • Added FormatMessage configuration option to self-diagnostics feature. When
      set to true (default is false), log messages will be formatted by replacing
      placeholders with actual parameter values for improved readability.

      Example OTEL_DIAGNOSTICS.json:

      {
          "LogDirectory": ".",
          "FileSize": 32768,
          "LogLevel": "Warning",
          "FormatMessage": true
      }
    • Fixed parsing of OTEL_TRACES_SAMPLER_ARG decimal values to always use .
      as the delimiter when using the traceidratio sampler, preventing
      locale-specific parsing issues.
      (#​6444)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api v1.13.0

    • Added AddLink(SpanContext, SpanAttributes?) to TelemetrySpan to support
      linking spans and associating optional attributes for advanced trace relationships.
      (#​6305)

    • Experimental (only in pre-release versions): Added the EventName property
      to LogRecordData
      (#​6306)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.13.0

    No notable changes.

    See CHANGELOG for details.

... (truncated)

1.13.0-beta.1

The following changes are from the previous release 1.12.0-beta.1.

1.12.0

For highlights and announcements pertaining to this release see: Release Notes > 1.12.0.

The following changes are from the previous release 1.11.2.

1.12.0-beta.1

The following changes are from the previous release 1.11.2-beta.1.

Commits viewable in compare view.

Updated OpenTelemetry.Extensions.Hosting from 1.11.2 to 1.14.0.

Release notes

Sourced from OpenTelemetry.Extensions.Hosting's releases.

1.14.0

For highlights and announcements pertaining to this release see: Release Notes > 1.14.0.

The following changes are from the previous release 1.14.0-rc.1.

  • NuGet: OpenTelemetry v1.14.0

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section
      for updated verification instructions.
      (#​6623)

    • Update to stable versions for .NET 10.0 NuGet packages.
      (#​6667)

    • Update Microsoft.Extensions.* dependencies to 10.0.0 for .NET Framework
      and .NET Standard.
      (#​6667)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api v1.14.0

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section
      for updated verification instructions.
      (#​6623)

    • Update System.Diagnostics.DiagnosticSource dependency to 10.0.0
      for all target frameworks.
      (#​6667)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.14.0

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section
      for updated verification instructions.
      (#​6623)

    • Update to stable versions for .NET 10.0 NuGet packages.
      (#​6667)

    • Update Microsoft.Extensions.* dependencies to 10.0.0 for .NET Framework
      ... (truncated)

1.14.0-rc.1

The following changes are from the previous release 1.13.1.

... (truncated)

1.14.0-beta.1

The following changes are from the previous release 1.13.1-beta.1.

  • NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.14.0-beta.1

    • Breaking Change When targeting net8.0, the package now depends on version
      8.0.0 of the Microsoft.Extensions.DependencyInjection.Abstractions,
      Microsoft.Extensions.Diagnostics.Abstractions and
      Microsoft.Extensions.Logging.Configuration NuGet packages.
      (#​6327)

    • Add support for .NET 10.0.
      (#​6307)

    • Added the possibility to disable timestamps via the PrometheusAspNetCoreOptions.
      (#​6600)

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section
      for updated verification instructions.
      (#​6623)

    • Updated OpenTelemetry core component version(s) to 1.14.0.
      (#​6689)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.14.0-beta.1

    • Breaking Change When targeting net8.0, the package now depends on version
      8.0.0 of the Microsoft.Extensions.DependencyInjection.Abstractions,
      Microsoft.Extensions.Diagnostics.Abstractions and
      Microsoft.Extensions.Logging.Configuration NuGet packages.
      (#​6327)

    • Add support for .NET 10.0.
      (#​6307)

    • Added the possibility to disable timestamps via the PrometheusHttpListenerOptions.
      (#​6600)

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section
      for updated verification instructions.
      (#​6623)

    • Updated OpenTelemetry core component version(s) to 1.14.0.
      ... (truncated)

1.13.1

For highlights and announcements pertaining to this release see: Release Notes > 1.13.1.

The following changes are from the previous release 1.13.0.

... (truncated)

1.13.1-beta.1

The following changes are from the previous release 1.13.0-beta.1.

1.13.0

For highlights and announcements pertaining to this release see: Release Notes > 1.13.0.

The following changes are from the previous release 1.12.0.

  • NuGet: OpenTelemetry v1.13.0

    • Added a verification to ensure that a MetricReader can only be registered
      to a single MeterProvider, as required by the OpenTelemetry specification.
      (#​6458)

    • Added FormatMessage configuration option to self-diagnostics feature. When
      set to true (default is false), log messages will be formatted by replacing
      placeholders with actual parameter values for improved readability.

      Example OTEL_DIAGNOSTICS.json:

      {
          "LogDirectory": ".",
          "FileSize": 32768,
          "LogLevel": "Warning",
          "FormatMessage": true
      }
    • Fixed parsing of OTEL_TRACES_SAMPLER_ARG decimal values to always use .
      as the delimiter when using the traceidratio sampler, preventing
      locale-specific parsing issues.
      (#​6444)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api v1.13.0

    • Added AddLink(SpanContext, SpanAttributes?) to TelemetrySpan to support
      linking spans and associating optional attributes for advanced trace relationships.
      (#​6305)

    • Experimental (only in pre-release versions): Added the EventName property
      to LogRecordData
      (#​6306)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.13.0

    No notable changes.

    See CHANGELOG for details.

... (truncated)

1.13.0-beta.1

The following changes are from the previous release 1.12.0-beta.1.

1.12.0

For highlights and announcements pertaining to this release see: Release Notes > 1.12.0.

The following changes are from the previous release 1.11.2.

1.12.0-beta.1

The following changes are from the previous release 1.11.2-beta.1.

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.AspNetCore from 1.11.1 to 1.14.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.AspNetCore's releases.

1.14.0

1.14.0-rc.1

1.14.0-beta.2

1.14.0-beta.1

Description has been truncated

Bumps Grpc.AspNetCore from 2.67.0 to 2.71.0
Bumps Grpc.AspNetCore.HealthChecks from 2.67.0 to 2.71.0
Bumps OpenFeature from 2.9.0 to 2.11.0
Bumps OpenFeature.Hosting from 2.9.0 to 2.11.0
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.11.2 to 1.14.0
Bumps OpenTelemetry.Extensions.Hosting from 1.11.2 to 1.14.0
Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.11.1 to 1.14.0
Bumps OpenTelemetry.Instrumentation.Http from 1.11.1 to 1.14.0
Bumps OpenTelemetry.Instrumentation.Runtime from 1.11.1 to 1.14.0
Bumps StackExchange.Redis from 2.8.31 to 2.10.1

---
updated-dependencies:
- dependency-name: Grpc.AspNetCore
  dependency-version: 2.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: Grpc.AspNetCore.HealthChecks
  dependency-version: 2.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenFeature
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenFeature.Hosting
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenTelemetry.Instrumentation.Http
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: OpenTelemetry.Instrumentation.Runtime
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
- dependency-name: StackExchange.Redis
  dependency-version: 2.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Dec 19, 2025
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Dec 19, 2025

Superseded by #31.

@dependabot dependabot bot closed this Dec 19, 2025
@dependabot dependabot bot deleted the dependabot/nuget/src/cart/src/nuget-production-dependencies-442bc302c3 branch December 19, 2025 07:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant