Skip to content

.NET: Bump Azure.Monitor.OpenTelemetry.Exporter from 1.5.0 to 1.8.3 - #7887

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dotnet/Azure.Monitor.OpenTelemetry.Exporter-1.8.3
Open

.NET: Bump Azure.Monitor.OpenTelemetry.Exporter from 1.5.0 to 1.8.3#7887
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dotnet/Azure.Monitor.OpenTelemetry.Exporter-1.8.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown
Contributor

Updated Azure.Monitor.OpenTelemetry.Exporter from 1.5.0 to 1.8.3.

Release notes

Sourced from Azure.Monitor.OpenTelemetry.Exporter's releases.

1.8.3

1.8.3 (2026-07-24)

Bugs Fixed

  • Hardened ingestion and Live Metrics redirect handling to reject untrusted destinations before replaying telemetry or caching the redirect. Redirect targets must now use HTTPS and match an approved Azure Monitor trust boundary, preventing credentials and telemetry from being forwarded to attacker-controlled endpoints.
    (#​61244)

Other Changes

  • Customer SDK stats are now on by default; opt out with APPLICATIONINSIGHTS_SDKSTATS_DISABLED=true. dropCode/retryCode dimension values now use the spec's SCREAMING_SNAKE_CASE (e.g. CLIENT_EXCEPTION).

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: Azure.Monitor.OpenTelemetry.Exporter
  dependency-version: 1.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Usage: [Issues, PRs], Target: .Net dependencies Usage: [Issues, PRs], Target: dependencies in the project labels Aug 26, 2026
Copilot AI balanced review requested due to automatic review settings August 26, 2026 15:00
@dependabot dependabot Bot added the .NET Usage: [Issues, PRs], Target: .Net label Aug 26, 2026
@dependabot dependabot Bot added the dependencies Usage: [Issues, PRs], Target: dependencies in the project label Aug 26, 2026
@dependabot
dependabot Bot deployed to github-app-auth August 26, 2026 15:00 Active
@dependabot
dependabot Bot deployed to github-app-auth August 26, 2026 15:00 Active
@github-actions github-actions Bot changed the title Bump Azure.Monitor.OpenTelemetry.Exporter from 1.5.0 to 1.8.3 .NET: Bump Azure.Monitor.OpenTelemetry.Exporter from 1.5.0 to 1.8.3 Aug 26, 2026
@dependabot
dependabot Bot deployed to github-app-auth August 26, 2026 15:00 Active
@dependabot
dependabot Bot deployed to github-app-auth August 26, 2026 15:01 Active

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the centrally managed Azure Monitor OpenTelemetry exporter to include recent security and reliability fixes.

Changes:

  • Bumps Azure.Monitor.OpenTelemetry.Exporter from 1.5.0 to 1.8.3.

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

@westey-m
westey (westey-m) added this pull request to the merge queue Aug 26, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to no response for status checks Aug 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Usage: [Issues, PRs], Target: dependencies in the project .NET Usage: [Issues, PRs], Target: .Net

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants