Bump the nuget-production-dependencies group with 13 updates #31

Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61623)
The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

Update dependencies from dotnet/arcade (#61832)
This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.
Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61761)
The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

Update branding to 8.0.17 (#61830)
The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.
Merging internal commits for release/8.0 (#61924)
This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Update branding to 8.0.16 by @vseanreesermsft in Update branding to 8.0.16 dotnet/aspnetcore#61283
[release/8.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 dotnet/aspnetcore#61260
[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#61281
[release/8.0] Upgrade to Ubuntu 22 by @wtgodbe in [release/8.0] Upgrade to Ubuntu 22 dotnet/aspnetcore#61216
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#60901
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#60926
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61404
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#61398
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61411
Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by @wtgodbe in Revert "Revert "[release/8.0] Update remnants of azureedge.net"" dotnet/aspnetcore#60352
[release/8.0] Fix preserving messages for stateful reconnect with backplane by @BrennanConroy in [release/8.0] Fix preserving messages for stateful reconnect with backplane dotnet/aspnetcore#61375
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#61442
fetch TLS client hello message from HTTP.SYS by @BrennanConroy in fetch TLS client hello message from HTTP.SYS dotnet/aspnetcore#61494

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#60355
Update branding to 8.0.15 by @vseanreesermsft in Update branding to 8.0.15 dotnet/aspnetcore#60784
Add partitioned to cookie for SignalR browser testing by @BrennanConroy in Add partitioned to cookie for SignalR browser testing dotnet/aspnetcore#60728
[release/8.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 dotnet/aspnetcore#60677
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#60879

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Update branding to 8.0.14 by @vseanreesermsft in Update branding to 8.0.14 dotnet/aspnetcore#60197
[release/8.0] (deps): Bump src/submodules/googletest from 7d76a23 to e235eb3 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 7d76a23 to e235eb3 dotnet/aspnetcore#60150
[release/8.0] Fix java discovery in IdentityModel pipeline by @wtgodbe in [release/8.0] Fix java discovery in IdentityModel pipeline dotnet/aspnetcore#60075
[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#60199
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#59922
[release/8.0] Readd DiagnosticSource to KestrelServerImpl by @github-actions in [release/8.0] Readd DiagnosticSource to KestrelServerImpl dotnet/aspnetcore#60203
[release/8.0] Update to MacOS 15 in Helix by @github-actions in [release/8.0] Update to MacOS 15 in Helix dotnet/aspnetcore#60239
[release/8.0] Use the latest available JDK by @wtgodbe in [release/8.0] Use the latest available JDK dotnet/aspnetcore#60233
[release/8.0] Fix skip condition for java tests by @github-actions in [release/8.0] Fix skip condition for java tests dotnet/aspnetcore#60243
[release/8.0] Update list of helix queues to skip by @wtgodbe in [release/8.0] Update list of helix queues to skip dotnet/aspnetcore#60231
[release/8.0] [Blazor] Allow cascading value subscribers to get added and removed during change notification by @github-actions in [release/8.0] [Blazor] Allow cascading value subscribers to get added and removed during change notification dotnet/aspnetcore#57288
[release/8.0] Update remnants of azureedge.net by @sebastienros in [release/8.0] Update remnants of azureedge.net dotnet/aspnetcore#60264
[release/8.0] Centralize on one docker container by @wtgodbe in [release/8.0] Centralize on one docker container dotnet/aspnetcore#60299
Revert "[release/8.0] Update remnants of azureedge.net" by @wtgodbe in Revert "[release/8.0] Update remnants of azureedge.net" dotnet/aspnetcore#60324
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#60316

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 17.13.0 to 18.0.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.0.1 What's Changed

Fixing an issue with loading covrun64.dll on systems that have .NET 10 SDK installed: https://learn.microsoft.com/en-us/dotnet/core/compatibility/sdk/10.0/code-coverage-dynamic-native-instrumentation

Disable DynamicNative instrumentation by default by @nohwnd in [rel/18.0] Disable DynamicNative instrumentation by default microsoft/vstest#15298
Update MicrosoftInternalCodeCoveragePackageVersion to 18.0.6 by @nohwnd in Update MicrosoftInternalCodeCoveragePackageVersion to 18.0.6 microsoft/vstest#15312

Internal changes

Update VersionPrefix to 18.0.1 by @nohwnd in Update VersionPrefix to 18.0.1 microsoft/vstest#15301
Update build tools to 17.8.43 by @nohwnd in Update build tools to 17.8.43 microsoft/vstest#15305

Full Changelog: microsoft/vstest@v18.0.0...v18.0.1

18.0.0 What's Changed

Update reporting formatting by @martincostello in Update reporting formatting microsoft/vstest#15082
Fix stack trace for Trace.Fail and Debug.Fail by @nohwnd in Fix stack trace for Trace.Fail and Debug.Fail microsoft/vstest#15103
Add documentation of environment variables by @Copilot in Add documentation of environment variables microsoft/vstest#15095
IFrameworkHandle.LaunchProcessWithDebuggerAttached allows null for workingDirectory in signature but throws by @Copilot in [WIP] IFrameworkHandle.LaunchProcessWithDebuggerAttached allows null for workingDirectory in signature but throws microsoft/vstest#15091
Add Dependabot configuration for .NET SDK updates by @JamieMagee in Add Dependabot configuration for .NET SDK updates microsoft/vstest#15114
Handle dotnet_root in testhost version aware way by @nohwnd in Handle dotnet_root in testhost version aware way microsoft/vstest#15184
Add magic bytes validation for Mach-O binaries in DotnetHostHelper by @Copilot in Add magic bytes validation for Mach-O binaries in DotnetHostHelper microsoft/vstest#15230
using globbing pattern doesn't work on windows with forward slashes by @Copilot in using globbing pattern doesn't work on windows with forward slashes microsoft/vstest#15088
Remove tpv0 by @nohwnd in Remove tpv0 microsoft/vstest#15247
Cache AssemblyName in ManagedNameHelper by @Youssef1313 in Cache AssemblyName in ManagedNameHelper microsoft/vstest#15259
Add ARM64 support to GetArchitectureForSource methods by @Copilot in Add ARM64 support to GetArchitectureForSource methods microsoft/vstest#15278

Internal fixes and updates

Fix formatting in two files by @ViktorHofer in Fix formatting in two files microsoft/vstest#15047
Build TestPlatform packages in VMR by @ViktorHofer in Build TestPlatform packages in VMR microsoft/vstest#15055
Condition property on .NET FX MSBuild by @jaredpar in Condition property on .NET FX MSBuild microsoft/vstest#15054
Migrate to awesome assertions by @nohwnd in Migrate to awesome assertions microsoft/vstest#15056
Revert "Build TestPlatform packages in VMR" by @ViktorHofer in Revert "Build TestPlatform packages in VMR" microsoft/vstest#15057
Update package Category by @ViktorHofer in Update package Category microsoft/vstest#15058
Revert "Write props of tests into trx" by @nohwnd in Revert "Write props of tests into trx" microsoft/vstest#15080
Error on unsupported tfms (#15072) by @nohwnd in Error on unsupported tfms (#15072) microsoft/vstest#15073
Use policies from testfx to align by @nohwnd in Use policies from testfx to align microsoft/vstest#15085
Update enable-auto-merge.yml by @nohwnd in Update enable-auto-merge.yml microsoft/vstest#15102
Revert ignoring environment test by @Copilot in [WIP] Revert ignoring environment test microsoft/vstest#15094
unignore tests by @Copilot in [WIP] unignore tests microsoft/vstest#15093
Update MSTest by @Youssef1313 in Update MSTest microsoft/vstest#15108
Bump dotnet-sdk from 9.0.106 to 9.0.301 by @dependabot[bot] in Bump dotnet-sdk from 9.0.106 to 9.0.301 microsoft/vstest#15179
Use Assert.Equals by @nohwnd in Use Assert.Equals microsoft/vstest#15181
Run VSTest tests with MTP by @Youssef1313 in Run VSTest tests with MTP microsoft/vstest#15079
Use the standard sdk for architecture switch test by @nohwnd in Use the standard sdk for architecture switch test microsoft/vstest#15188
Remove CUIT (Coded UI Test) from NuGet packages and test projects by @Copilot in Remove CUIT (Coded UI Test) from NuGet packages and test projects microsoft/vstest#15177
dump-logs? by @nohwnd in dump-logs? microsoft/vstest#15187
Moving to version 18 by @nohwnd in Moving to version 18 microsoft/vstest#15209
Update fakes version by @drognanar in Update fakes version microsoft/vstest#15227
Microsoft.Intellitrace.Core should be taken from nuget by @nohwnd in Microsoft.Intellitrace.Core should be taken from nuget microsoft/vstest#15229
Remove MSTest.Assert.Extensions by @Youssef1313 in Remove MSTest.Assert.Extensions microsoft/vstest#15178
Sourcebuild fix by @nohwnd in Sourcebuild fix microsoft/vstest#15239
Set dotnet_root_ only when the architecture of dotnet in the path is the same by @nohwnd in Set dotnet_root_<arch> only when the architecture of dotnet in the path is the same microsoft/vstest#15250
Remove fakes v1 from FakesUtilities by @drognanar in Remove fakes v1 from FakesUtilities microsoft/vstest#15251
Update fakes dependencies by @drognanar in Update fakes dependencies microsoft/vstest#15254
Do half the work in GetManagedName by @Youssef1313 in Do half the work in GetManagedName microsoft/vstest#15255
check Vsix only when produced by @nohwnd in check Vsix only when produced microsoft/vstest#15261
Set dotnet_root_ always by @nohwnd in Set dotnet_root_<arch> always microsoft/vstest#15266
Don't hardcode old vswhere version in global.json by @akoeplinger in Don't hardcode old vswhere version in global.json microsoft/vstest#15267
Revert dowgrade of fakes by @nohwnd in Revert dowgrade of fakes microsoft/vstest#15263
Update VSSDK to version with code flow guard by @nohwnd in Update VSSDK to version with code flow guard microsoft/vstest#15279
Update Fakes to version with code flow guard by @nohwnd in Update Fakes to version with code flow guard microsoft/vstest#15273
... (truncated)

17.14.1 What's Changed

Error on unsupported target frameworks to prevent silently not running tests by @nohwnd in Warning on unsupported tfms microsoft/vstest#15072 and Make the warning error, and restore previous props so we attempt to run microsoft/vstest#15078
Revert writing additional properties to TRX by @nohwnd in microsoft/vstest@47eb51b

Full Changelog: microsoft/vstest@v17.14.0...v17.14.1

17.14.0 What's Changed

.NET versions updated

This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:

Updating to the latest VS, and running tests from net6.0 test projects.
Updating to the latest .NET SDK, and running tests from net6.0 test projects.

It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.

Drop unsupported frameworks by @nohwnd in Drop unsupported frameworks microsoft/vstest#10565

Changes

Adding Process Query Flag For UWP .NET 9 Support by @adstep in Adding Process Query Flag For UWP .NET 9 Support microsoft/vstest#15003
Fix builds on WinUI and UWP .NET 9 projects by @Sergio0694 in Fix builds on WinUI and UWP .NET 9 projects microsoft/vstest#15004
don't report communication error on discovery abort by @nohwnd in don't report communication error on discovery abort microsoft/vstest#14992
Add dump minitool to vsix by @nohwnd in Add dump minitool to vsix microsoft/vstest#14707
Make test runners long-path aware (#5179) by @peetw in Make test runners long-path aware (#5179) microsoft/vstest#15014
Fix trace in DataCollectionRequestSender.cs by @stan-sz in Fix trace in DataCollectionRequestSender.cs microsoft/vstest#15025
Fix/readme grammar parallelism by @dellch in Fix/readme grammar parallelism microsoft/vstest#15030
Add binding redirects by @nohwnd in Add binding redirects microsoft/vstest#15041
Write props of tests into trx by @nohwnd in Write props of tests into trx microsoft/vstest#14905

Internal version updates and fixes

Update io.redist by @nohwnd in Update io.redist microsoft/vstest#13872
Use preview image for public build by @nohwnd in Use preview image for public build microsoft/vstest#13888
Remove xcopy-msbuild by @nohwnd in Remove xcopy-msbuild microsoft/vstest#14138
Move to macos14 by @nohwnd in Move to macos14 microsoft/vstest#14137
Update diagnose.md by @nohwnd in Update diagnose.md microsoft/vstest#14776
hash with sha2 for mutex lock by @nohwnd in hash with sha2 for mutex lock microsoft/vstest#14777
Update test projects for vmr by @nohwnd in Update test projects for vmr microsoft/vstest#14894
17.14 branding by @nohwnd in 17.14 branding microsoft/vstest#14903
Update filter.md for NUnit by @OsirisTerje in Update filter.md for NUnit microsoft/vstest#14987
Flag netstandard1.x dependencies in source-build by @ViktorHofer in Flag netstandard1.x dependencies in source-build microsoft/vstest#14986
Use VS dependencies versions from release VS to have archived symbols by @nohwnd in Use VS dependencies versions from release VS to have archived symbols microsoft/vstest#14991
Remove extra ; by @nohwnd in Remove extra ; microsoft/vstest#14995
Use dependencymodel 6.0.2 by @nohwnd in Use dependencymodel 6.0.2 microsoft/vstest#14996
Make Testhost packable only on Windows by @mmitche in Make Testhost packable only on Windows microsoft/vstest#15001
Add system text json to vsix by @nohwnd in Add system text json to vsix microsoft/vstest#15034
Add more files to vsix by @nohwnd in Add more files to vsix microsoft/vstest#15038
Remove unnecessary CA2022 suppressions by @Winniexu01 in Remove unnecessary CA2022 suppressions microsoft/vstest#15035
Update package project url by @mmitche in Update package project url microsoft/vstest#15040

New Contributors

@OsirisTerje made their first contribution in Update filter.md for NUnit microsoft/vstest#14987
@adstep made their first contribution in Adding Process Query Flag For UWP .NET 9 Support microsoft/vstest#15003
... (truncated)

17.14.0-preview-25107-01

What's Changed

.NET versions updated

This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:

Updating to the latest VS, and running tests from net6.0 test projects.
Updating to the latest .NET SDK, and running tests from net6.0 test projects.

It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.

Drop unsupported frameworks by @nohwnd in Drop unsupported frameworks microsoft/vstest#10565

New Contributors

@OsirisTerje made their first contribution in Update filter.md for NUnit microsoft/vstest#14987
@adstep made their first contribution in Adding Process Query Flag For UWP .NET 9 Support microsoft/vstest#15003
@Sergio0694 made their first contribution in Fix builds on WinUI and UWP .NET 9 projects microsoft/vstest#15004

Full Changelog: microsoft/vstest@v17.13.0...v17.14.0-preview-25107-01

Commits viewable in compare view.

Updated OpenFeature from 2.9.0 to 2.11.0.

Release notes

Sourced from OpenFeature's releases.

2.11.0 2.11.0 (2025-12-18)

✨ New Features

Upgrade to dotnet version 10 (#658) (c7be7e0)

2.10.0 2.10.0 (2025-12-01)

🐛 Bug Fixes

Address issue with FeatureClient not being resolved when no Provider added (#607) (a8d12ef)
Address issues when evaluating the context in the InMemoryProvider (#615) (94fcdc1)
Ensure AddPolicyName without adding a Provider does not get stuck in infinite loop (#606) (4b965dd)
Ensure EvaluationContext is reliably added to the injected FeatureClient (#605) (c987b58)

✨ New Features

Add DI for multi provider (#621) (ee862f0)
Add disabled flag support to InMemoryProvider (#632) (df1765c)
Add optional CancellationToken parameter to SetProviderAsync (#638) (a1f7ff6)
Add SourceLink configuration for .NET SDK 8+ to enhance debugging experience (1b40391)
Add SourceLink configuration for .NET to enhance debugging experience (#614) (1b40391)
Add tracking to multi-provider (#612) (186b357)

🔧 Refactoring

Clean up project files by removing TargetFrameworks and formatting (#611) (dfbc3ee)
Pass cancellation tokens to Provider Initialization functions (#640) (8b472d8)
Remove deprecated Dependency Injection code (#626) (a36a906)

Commits viewable in compare view.

Updated OpenFeature.Hosting from 2.9.0 to 2.11.0.

Release notes

Sourced from OpenFeature.Hosting's releases.

2.11.0 2.11.0 (2025-12-18)

✨ New Features

Upgrade to dotnet version 10 (#658) (c7be7e0)

2.10.0 2.10.0 (2025-12-01)

🐛 Bug Fixes

Address issue with FeatureClient not being resolved when no Provider added (#607) (a8d12ef)
Address issues when evaluating the context in the InMemoryProvider (#615) (94fcdc1)
Ensure AddPolicyName without adding a Provider does not get stuck in infinite loop (#606) (4b965dd)
Ensure EvaluationContext is reliably added to the injected FeatureClient (#605) (c987b58)

✨ New Features

Add DI for multi provider (#621) (ee862f0)
Add disabled flag support to InMemoryProvider (#632) (df1765c)
Add optional CancellationToken parameter to SetProviderAsync (#638) (a1f7ff6)
Add SourceLink configuration for .NET SDK 8+ to enhance debugging experience (1b40391)
Add SourceLink configuration for .NET to enhance debugging experience (#614) (1b40391)
Add tracking to multi-provider (#612) (186b357)

🔧 Refactoring

Clean up project files by removing TargetFrameworks and formatting (#611) (dfbc3ee)
Pass cancellation tokens to Provider Initialization functions (#640) (8b472d8)
Remove deprecated Dependency Injection code (#626) (a36a906)

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.11.2 to 1.14.0.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.14.0

For highlights and announcements pertaining to this release see: Release Notes > 1.14.0.

The following changes are from the previous release 1.14.0-rc.1.

NuGet: OpenTelemetry v1.14.0
- Breaking Change NuGet packages now use the Sigstore bundle format
  (.sigstore.json) for digital signatures instead of separate signature
  (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
  for verification. See the Digital signing
  section for updated verification instructions.
  (#6623)
- Update to stable versions for .NET 10.0 NuGet packages.
  (#6667)
- Update Microsoft.Extensions.* dependencies to 10.0.0 for .NET Framework
  and .NET Standard.
  (#6667)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.14.0
- Breaking Change NuGet packages now use the Sigstore bundle format
  (.sigstore.json) for digital signatures instead of separate signature
  (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
  for verification. See the Digital signing
  section for updated verification instructions.
  (#6623)
- Update System.Diagnostics.DiagnosticSource dependency to 10.0.0
  for all target frameworks.
  (#6667)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.14.0
- Breaking Change NuGet packages now use the Sigstore bundle format
  (.sigstore.json) for digital signatures instead of separate signature
  (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
  for verification. See the Digital signing
  section for updated verification instructions.
  (#6623)
- Update to stable versions for .NET 10.0 NuGet packages.
  (#6667)
- Update Microsoft.Extensions.* dependencies to 10.0.0 for .NET Framework
  ... (truncated)

1.14.0-rc.1

The following changes are from the previous release 1.13.1.

NuGet: OpenTelemetry v1.14.0-rc.1
- Breaking Change When targeting net8.0, the package now depends on version
  8.0.0 of the Microsoft.Extensions.DependencyInjection.Abstractions,
  Microsoft.Extensions.Diagnostics.Abstractions and
  Microsoft.Extensions.Logging.Configuration NuGet packages.
  (#6327)
- Add support for .NET 10.0.
  (#6307)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.14.0-rc.1
- Add support for .NET 10.0.
  (#6307)
- Update System.Diagnostics.DiagnosticSource dependency to 10.0.0
  for all target frameworks.
  (#6307)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.14.0-rc.1
- Breaking Change When targeting net8.0, the package now depends on version
  8.0.0 of the Microsoft.Extensions.DependencyInjection.Abstractions NuGet package.
  (#6327)
- Add support for .NET 10.0.
  (#6307)
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.14.0-rc.1
- Breaking Change When targeting net8.0, the package now depends on version
  8.0.0 of the Microsoft.Extensions.DependencyInjection.Abstractions,
  Microsoft.Extensions.Diagnostics.Abstractions and
  Microsoft.Extensions.Logging.Configuration NuGet packages.
  (#6327)
- Add support for .NET 10.0.
  (#6307)
See CHANGELOG for details.

... (truncated)

1.14.0-beta.1

The following changes are from the previous release 1.13.1-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.14.0-beta.1
- Breaking Change When targeting net8.0, the package now depends on version
  8.0.0 of the Microsoft.Extensions.DependencyInjection.Abstractions,
  Microsoft.Extensions.Diagnostics.Abstractions and
  Microsoft.Extensions.Logging.Configuration NuGet packages.
  (#6327)
- Add support for .NET 10.0.
  (#6307)
- Added the possibility to disable timestamps via the PrometheusAspNetCoreOptions.
  (#6600)
- Breaking Change NuGet packages now use the Sigstore bundle format
  (.sigstore.json) for digital signatures instead of separate signature
  (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
  for verification. See the Digital signing
  section for updated verification instructions.
  (#6623)
- Updated OpenTelemetry core component version(s) to 1.14.0.
  (#6689)
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.14.0-beta.1
- Breaking Change When targeting net8.0, the package now depends on version
  8.0.0 of the Microsoft.Extensions.DependencyInjection.Abstractions,
  Microsoft.Extensions.Diagnostics.Abstractions and
  Microsoft.Extensions.Logging.Configuration NuGet packages.
  (#6327)
- Add support for .NET 10.0.
  (#6307)
- Added the possibility to disable timestamps via the PrometheusHttpListenerOptions.
  (#6600)
- Breaking Change NuGet packages now use the Sigstore bundle format
  (.sigstore.json) for digital signatures instead of separate signature
  (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
  for verification. See the Digital signing
  section for updated verification instructions.
  (#6623)
- Updated OpenTelemetry core component version(s) to 1.14.0.
  ... (truncated)

1.13.1

For highlights and announcements pertaining to this release see: Release Notes > 1.13.1.

The following changes are from the previous release 1.13.0.

NuGet: OpenTelemetry v1.13.1
- Fixed an issue where the Base2 Exponential Bucket Histogram did not reset its
  scale to 20 after each collection cycle when using delta aggregation temporality.
  (#6557)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.13.1

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.13.1

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.13.1

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.InMemory v1.13.1

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.13.1

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Zipkin v1.13.1

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Extensions.Hosting v1.13.1

... (truncated)

1.13.1-beta.1

The following changes are from the previous release 1.13.0-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.13.1-beta.1
- Updated OpenTelemetry core component version(s) to 1.13.1.
  (#6598)
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.13.1-beta.1
- Updated OpenTelemetry core component version(s) to 1.13.1.
  (#6598)
See CHANGELOG for details.
NuGet: OpenTelemetry.Shims.OpenTracing v1.13.1-beta.1
- Updated OpenTelemetry core component version(s) to 1.13.1.
  (#6598)
See CHANGELOG for details.

1.13.0

For highlights and announcements pertaining to this release see: Release Notes > 1.13.0.

The following changes are from the previous release 1.12.0.

NuGet: OpenTelemetry v1.13.0
- Added a verification to ensure that a MetricReader can only be registered
  to a single MeterProvider, as required by the OpenTelemetry specification.
  (#6458)
- Added FormatMessage configuration option to self-diagnostics feature. When
  set to true (default is false), log messages will be formatted by replacing
  placeholders with actual parameter values for improved readability.
  
  Example OTEL_DIAGNOSTICS.json:
```
{
    "LogDirectory": ".",
    "FileSize": 32768,
    "LogLevel": "Warning",
    "FormatMessage": true
}
```
- Fixed parsing of OTEL_TRACES_SAMPLER_ARG decimal values to always use .
  as the delimiter when using the traceidratio sampler, preventing
  locale-specific parsing issues.
  (#6444)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.13.0
- Added AddLink(SpanContext, SpanAttributes?) to TelemetrySpan to support
  linking spans and associating optional attributes for advanced trace relationships.
  (#6305)
- Experimental (only in pre-release versions): Added the EventName property
  to LogRecordData
  (#6306)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.13.0

No notable changes.

See CHANGELOG for details.

... (truncated)

1.13.0-beta.1

The following changes are from the previous release 1.12.0-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.13.0-beta.1
- Updated OpenTelemetry core component version(s) to 1.13.0.
  (#6552)
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.13.0-beta.1
- Updated OpenTelemetry core component version(s) to 1.13.0.
  (#6552)
See CHANGELOG for details.
NuGet: OpenTelemetry.Shims.OpenTracing v1.13.0-beta.1
- Updated OpenTelemetry core component version(s) to 1.13.0.
  (#6552)
See CHANGELOG for details.

1.12.0

For highlights and announcements pertaining to this release see: Release Notes > 1.12.0.

The following changes are from the previous release 1.11.2.

NuGet: OpenTelemetry v1.12.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.12.0
- Added a new overload for TracerProvider.GetTracer which accepts an optional
  IEnumerable<KeyValuePair<string, object?>>? tags parameter, allowing
  additional attributes to be associated with the Tracer.
  (#6137)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.12.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.12.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.InMemory v1.12.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.12.0
- Breaking Change: .NET Framework and .NET Standard builds now default to
  exporting over OTLP/HTTP instead of OTLP/gRPC. This change could result in a
  failure to export telemetry unless appropriate measures are taken.
  Additionally, if you explicitly configure the exporter to use OTLP/gRPC it may
  result in a NotSupportedException without further configuration. Please
  carefully review issue
  (#6209)
  for additional information and workarounds.
  (#6229)
See CHANGELOG for details.
... (truncated)

1.12.0-beta.1

The following changes are from the previous release 1.11.2-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.12.0-beta.1
- Updated OpenTelemetry core component version(s) to 1.12.0.
  (#6269)
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.12.0-beta.1
- Updated OpenTelemetry core component version(s) to 1.12.0.
  (#6269)
See CHANGELOG for details.
NuGet: [OpenTelemetry.Shims.OpenTracing v...
...

Description has been truncated

Bumps Grpc.AspNetCore from 2.67.0 to 2.71.0 Bumps Grpc.AspNetCore.HealthChecks from 2.67.0 to 2.71.0 Bumps Microsoft.AspNetCore.TestHost from 8.0.13 to 8.0.22 Bumps Microsoft.NET.Test.Sdk from 17.13.0 to 18.0.1 Bumps OpenFeature from 2.9.0 to 2.11.0 Bumps OpenFeature.Hosting from 2.9.0 to 2.11.0 Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.11.2 to 1.14.0 Bumps OpenTelemetry.Extensions.Hosting from 1.11.2 to 1.14.0 Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.11.1 to 1.14.0 Bumps OpenTelemetry.Instrumentation.Http from 1.11.1 to 1.14.0 Bumps OpenTelemetry.Instrumentation.Runtime from 1.11.1 to 1.14.0 Bumps StackExchange.Redis from 2.8.31 to 2.10.1 Bumps xunit.runner.visualstudio from 3.0.2 to 3.1.5 --- updated-dependencies: - dependency-name: Grpc.AspNetCore dependency-version: 2.71.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: Grpc.AspNetCore.HealthChecks dependency-version: 2.71.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: Microsoft.AspNetCore.TestHost dependency-version: 8.0.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-production-dependencies - dependency-name: OpenFeature dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenFeature.Hosting dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: StackExchange.Redis dependency-version: 2.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: xunit.runner.visualstudio dependency-version: 3.1.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: Grpc.AspNetCore dependency-version: 2.71.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: Grpc.AspNetCore.HealthChecks dependency-version: 2.71.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenFeature dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenFeature.Hosting dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: StackExchange.Redis dependency-version: 2.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: Grpc.AspNetCore dependency-version: 2.71.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: Grpc.AspNetCore.HealthChecks dependency-version: 2.71.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: Microsoft.AspNetCore.TestHost dependency-version: 8.0.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-production-dependencies - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-production-dependencies - dependency-name: OpenFeature dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenFeature.Hosting dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: StackExchange.Redis dependency-version: 2.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies - dependency-name: xunit.runner.visualstudio dependency-version: 3.1.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-production-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Dec 19, 2025

This was referenced Dec 19, 2025

Bump the nuget-production-dependencies group with 13 updates #28

Closed

Bump Grpc.AspNetCore and 9 others #29

Closed

Bump Microsoft.AspNetCore.TestHost and 2 others #30

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the nuget-production-dependencies group with 13 updates #31

Bump the nuget-production-dependencies group with 13 updates #31

dependabot bot commented on behalf of github Dec 19, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the nuget-production-dependencies group with 13 updates #31

Are you sure you want to change the base?

Bump the nuget-production-dependencies group with 13 updates #31

Conversation

dependabot bot commented on behalf of github Dec 19, 2025

2.71.0

What's Changed

2.71.0-pre1

What's Changed

2.70.0

What's Changed

New Contributors

2.71.0

What's Changed

2.71.0-pre1

What's Changed

2.70.0

What's Changed

New Contributors

8.0.22

What's Changed

8.0.21

What's Changed

8.0.20

What's Changed

8.0.18

What's Changed

8.0.17

Bug Fixes

Dependency Updates

Miscellaneous

8.0.16

What's Changed

8.0.15

What's Changed

8.0.14

What's Changed

18.0.1

What's Changed

Internal changes

18.0.0

What's Changed

Internal fixes and updates

17.14.1

What's Changed

17.14.0

What's Changed

.NET versions updated

Changes

Internal version updates and fixes

New Contributors

17.14.0-preview-25107-01

What's Changed

.NET versions updated

Changes

Internal version updates and fixes

Will probably revert before release:

New Contributors

2.11.0

2.11.0 (2025-12-18)

✨ New Features

2.10.0

2.10.0 (2025-12-01)

🐛 Bug Fixes

✨ New Features

🔧 Refactoring

2.11.0

2.11.0 (2025-12-18)

✨ New Features

2.10.0

2.10.0 (2025-12-01)

🐛 Bug Fixes

✨ New Features

🔧 Refactoring

1.14.0

1.14.0-rc.1

1.14.0-beta.1

1.13.1

1.13.1-beta.1

1.13.0