Skip to content

.Net: Bump Azure.Monitor.OpenTelemetry.Exporter from 1.7.0 to 1.8.3 - #14261

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dotnet/Azure.Monitor.OpenTelemetry.Exporter-1.8.3
Open

.Net: Bump Azure.Monitor.OpenTelemetry.Exporter from 1.7.0 to 1.8.3#14261
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dotnet/Azure.Monitor.OpenTelemetry.Exporter-1.8.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Updated Azure.Monitor.OpenTelemetry.Exporter from 1.7.0 to 1.8.3.

Release notes

Sourced from Azure.Monitor.OpenTelemetry.Exporter's releases.

1.8.3

1.8.3 (2026-07-24)

Bugs Fixed

  • Hardened ingestion and Live Metrics redirect handling to reject untrusted destinations before replaying telemetry or caching the redirect. Redirect targets must now use HTTPS and match an approved Azure Monitor trust boundary, preventing credentials and telemetry from being forwarded to attacker-controlled endpoints.
    (#​61244)

Other Changes

  • Customer SDK stats are now on by default; opt out with APPLICATIONINSIGHTS_SDKSTATS_DISABLED=true. dropCode/retryCode dimension values now use the spec's SCREAMING_SNAKE_CASE (e.g. CLIENT_EXCEPTION).

1.8.2

1.8.2 (2026-06-30)

Features Added

  • Added support for the Microsoft OpenTelemetry distro's SDK statistics: a new internal meter subscription and an AppContext switch (Azure.Monitor.OpenTelemetry.Exporter.RouteSdkStatsToDistroEndpoint) that lets the distro redirect SDK statistics to its own ingestion path. The ingestion destination and an on/off signal are resolved at startup by fetching a remote configuration; on success the configured destination is used, an explicit remote disable signal turns SDK statistics off, and any other outcome falls back to the existing region-derived ingestion endpoint so SDK statistics keep flowing. The AppContext switch has no effect on Statsbeat for callers that do not opt in.
    (#​59811)

  • Subscribed the Statsbeat MeterProvider to the Microsoft OpenTelemetry distro's Network SDKStats meter (MicrosoftOpenTelemetryNetworkSdkStatsMeter) so distro-emitted Network statistics flow through the existing Statsbeat cadence when the distro runs with a non-Azure-Monitor exporter.
    (#​60209)

  • Subscribed the Statsbeat MeterProvider to the Microsoft OpenTelemetry distro's Feature SDKStats meter (MicrosoftOpenTelemetryFeatureSdkStatsMeter) so distro-emitted Feature statistics reach the Statsbeat ingestion path. The distro uses an independent, spec-aligned bit map to avoid collisions with the classic Application Insights SDK's FeatureStatsbeatMeter.
    (#​59529)

  • Added Network SDKStats reporting, emitting the short-interval Network statistics defined in the Application Insights SDKStats spec on a 15-minute cadence: Request_Success_Count, Request_Failure_Count, Request_Duration, Retry_Count, Throttle_Count, and Exception_Count, each with the spec-defined dimensions (including host, statusCode, and exceptionType).
    (#​59909, #​60018)

Other Changes

  • Updated customer SDK stats dimension key names to use camelCase (computeType, telemetryType, dropCode, dropReason, retryCode, retryReason).
    (#​59902)

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: Azure.Monitor.OpenTelemetry.Exporter
  dependency-version: 1.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Issue or Pull requests regarding .NET code dependencies Pull requests that update a dependency file. Used by Dependabot. labels Aug 3, 2026
Copilot AI review requested due to automatic review settings August 3, 2026 22:45
@dependabot
dependabot Bot requested a review from a team as a code owner August 3, 2026 22:45
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file. Used by Dependabot. .NET Issue or Pull requests regarding .NET code labels Aug 3, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates centralized .NET package versioning to use a newer Azure Monitor OpenTelemetry exporter package.

Changes:

  • Bumped Azure.Monitor.OpenTelemetry.Exporter from 1.7.0 to 1.8.3 in Directory.Packages.props.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@github-actions github-actions Bot changed the title Bump Azure.Monitor.OpenTelemetry.Exporter from 1.7.0 to 1.8.3 .Net: Bump Azure.Monitor.OpenTelemetry.Exporter from 1.7.0 to 1.8.3 Aug 3, 2026

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated Code Review

Reviewers: 5 | Confidence: 46% | Result: All clear

Reviewed: Correctness, Security Reliability, Test Coverage, Failure Modes, Design Approach


Automated review by dependabot[bot]'s agents

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file. Used by Dependabot. .NET Issue or Pull requests regarding .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant