chore(deps): Bump OpenTelemetry.Instrumentation.Http from 1.10.0 to 1.13.0 #158

dependabot · 2025-10-31T21:06:05Z

Updated OpenTelemetry.Instrumentation.Http from 1.10.0 to 1.13.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.Http's releases.

1.13.0

NuGet: OpenTelemetry.Exporter.Geneva v1.13.0
- Updated OpenTelemetry core component version(s) to 1.13.1.
  (#3218)
See CHANGELOG for details.

1.13.0-rc.1

NuGet: OpenTelemetry.Instrumentation.AspNet v1.13.0-rc.1

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Instrumentation.AspNet.TelemetryHttpModule v1.13.0-rc.1

No notable changes.

See CHANGELOG for details.

1.13.0-beta.2

NuGet: OpenTelemetry.Instrumentation.Wcf v1.13.0-beta.2
- Fixes possible infinite recursion when WCF is hosted in ASP.NET.
  (#3248)
See CHANGELOG for details.

1.13.0-beta.1

NuGet: OpenTelemetry.Resources.Host v1.13.0-beta.1
Added support for the host.arch resource attribute in HostDetector
for .NET only.
(#3147)
Updated OpenTelemetry core component version(s) to 1.13.1.
(#3218)

See CHANGELOG for details.

1.13.0-alpha.1

NuGet: OpenTelemetry.Exporter.Geneva v1.13.0-alpha.1
- Experimental: Added an option for configuring a custom string size limit in
  the MessagePack serializer. The maximum string length, in characters, can be
  set using the PrivatePreviewLogMessagePackStringSizeLimit=<CharCount>
  connection string parameter.
  (#2813)
- Add httpUrl for HTTP server spans mapped from multiple attributes.
  (#2818)
See CHANGELOG for details.

1.12.1

NuGet: OpenTelemetry.Extensions.AWS v1.12.1

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Instrumentation.AWS v1.12.1

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Instrumentation.AWSLambda v1.12.1
Add faas.instance and faas.max_memory resource/span attributes.
(#2928)

See CHANGELOG for details.

1.12.0

NuGet: OpenTelemetry.Instrumentation.AspNetCore v1.12.0
- Updated OpenTelemetry core component version(s) to 1.12.0.
  (#2725)
See CHANGELOG for details.

1.12.0-beta.3

NuGet: OpenTelemetry.Instrumentation.SqlClient v1.12.0-beta.3
- Add db.query.parameter.<key> attribute(s) to query spans if opted into using
  the OTEL_DOTNET_EXPERIMENTAL_SQLCLIENT_ENABLE_TRACE_DB_QUERY_PARAMETERS
  environment variable. Not supported on .NET Framework.
  (#3015,
  #3081)
- Fix activities not being stopped on .NET Framework when using a global activity
  listener.
  (#3041)
- Breaking change: The SetDbStatementForText property has been removed.
  Behaviors related to this option are now always enabled.
  (#3072)
- Breaking change: The Enrich, Filter and RecordException properties have
  been removed for .NET Framework where they were non-functional.
  (#3079)
- Breaking change: The Enrich property has been renamed to
  EnrichWithSqlCommand and no longer passes an event name to the delegate.
  (#3080)
See CHANGELOG for details.

1.12.0-beta.2

NuGet: OpenTelemetry.Instrumentation.EntityFrameworkCore v1.12.0-beta.2
- Support use with SqlClient instrumentation.
  (#2280,
  #2829)
See CHANGELOG for details.

1.12.0-beta.1

NuGet: OpenTelemetry.Instrumentation.AspNet v1.12.0-beta.1
- Updated OpenTelemetry core component version(s) to 1.12.0.
  (#2725)
See CHANGELOG for details.
NuGet: OpenTelemetry.Instrumentation.AspNet.TelemetryHttpModule v1.12.0-beta.1
- Updated OpenTelemetry core component version(s) to 1.12.0.
  (#2725)
See CHANGELOG for details.

1.12.0-alpha.1

NuGet: OpenTelemetry.Extensions.Enrichment v1.12.0-alpha.1
- Updated OpenTelemetry core component version(s) to 1.12.0.
  (#2725)
See CHANGELOG for details.

1.11.3

NuGet: OpenTelemetry.Exporter.Geneva v1.11.3
- Fixed an issue where accessing an unset AFDCorrelationId in RuntimeContext
  would throw unhandled exceptions.
  (#2708)
See CHANGELOG for details.

1.11.2

NuGet: OpenTelemetry.Extensions.AWS v1.11.2

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Instrumentation.AWS v1.11.2
- Set itinital capacity for AWS Semantic Convention Attribute Builder
  (#2653)
See CHANGELOG for details.
NuGet: OpenTelemetry.Instrumentation.AWSLambda v1.11.2
- Set itinital capacity for AWS Semantic Convention Attribute Builder
  (#2653)
See CHANGELOG for details.

1.11.1

NuGet: OpenTelemetry.Exporter.Geneva v1.11.1
- Updated OpenTelemetry core component version(s) to 1.11.2.
  (#2582)
See CHANGELOG for details.

1.11.0

NuGet: OpenTelemetry.Exporter.OneCollector v1.11.0

No notable changes.

See CHANGELOG for details.

1.11.0-beta.2

NuGet: OpenTelemetry.Instrumentation.AspNet v1.11.0-beta.2
- Updated OpenTelemetry core component version(s) to 1.11.2.
  (#2582)
See CHANGELOG for details.
NuGet: OpenTelemetry.Instrumentation.AspNet.TelemetryHttpModule v1.11.0-beta.2
- Updated OpenTelemetry core component version(s) to 1.11.2.
  (#2582)
See CHANGELOG for details.

1.11.0-beta.1

NuGet: OpenTelemetry.Extensions v1.11.0-beta.1
- Updated OpenTelemetry core component version(s) to 1.11.2.
  (#2582)
See CHANGELOG for details.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

….13.0 --- updated-dependencies: - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.13.0 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.13.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-10-31T21:06:06Z

Labels

The following labels could not be found: .NET, dependencies, nuget. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

github-actions · 2025-10-31T21:07:06Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package

Version

Score

Details

nuget/OpenTelemetry.Instrumentation.Http

1.13.0

🟢 8.5

Details

Check	Score	Reason
Code-Review	🟢 10	all changesets reviewed
Dependency-Update-Tool	🟢 10	update tool detected
Maintained	🟢 10	30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
CII-Best-Practices	🟢 5	badge detected: Passing
Vulnerabilities	🟢 10	0 existing vulnerabilities detected
Packaging	🟢 10	packaging workflow detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
SAST	🟢 10	SAST tool is run on all commits
License	🟢 10	license file detected
Security-Policy	🟢 10	security policy file detected
Branch-Protection	🟢 8	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	30 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors	🟢 10	project has 20 contributing companies or organizations

nuget/OpenTelemetry.Instrumentation.Http

1.13.0

🟢 8.5

Details

Check	Score	Reason
Code-Review	🟢 10	all changesets reviewed
Dependency-Update-Tool	🟢 10	update tool detected
Maintained	🟢 10	30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
CII-Best-Practices	🟢 5	badge detected: Passing
Vulnerabilities	🟢 10	0 existing vulnerabilities detected
Packaging	🟢 10	packaging workflow detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
SAST	🟢 10	SAST tool is run on all commits
License	🟢 10	license file detected
Security-Policy	🟢 10	security policy file detected
Branch-Protection	🟢 8	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	30 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors	🟢 10	project has 20 contributing companies or organizations

Scanned Files

src/ControlPlane.Api/ControlPlane.Api.csproj
src/Node.Runtime/Node.Runtime.csproj

dylan-mccarthy merged commit bc32124 into main Oct 31, 2025
15 checks passed

dylan-mccarthy deleted the dependabot/nuget/src/ControlPlane.Api/multi-15dd780243 branch October 31, 2025 21:12

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): Bump OpenTelemetry.Instrumentation.Http from 1.10.0 to 1.13.0 #158

chore(deps): Bump OpenTelemetry.Instrumentation.Http from 1.10.0 to 1.13.0 #158

Uh oh!

dependabot bot commented on behalf of github Oct 31, 2025

Uh oh!

dependabot bot commented on behalf of github Oct 31, 2025

Uh oh!

github-actions bot commented Oct 31, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps): Bump OpenTelemetry.Instrumentation.Http from 1.10.0 to 1.13.0 #158

chore(deps): Bump OpenTelemetry.Instrumentation.Http from 1.10.0 to 1.13.0 #158

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 31, 2025

1.13.0

1.13.0-rc.1

1.13.0-beta.2

1.13.0-beta.1

1.13.0-alpha.1

1.12.1

1.12.0

1.12.0-beta.3

1.12.0-beta.2

1.12.0-beta.1

1.12.0-alpha.1

1.11.3

1.11.2

1.11.1

1.11.0

1.11.0-beta.2

1.11.0-beta.1

Uh oh!

dependabot bot commented on behalf of github Oct 31, 2025

Labels

Uh oh!

github-actions bot commented Oct 31, 2025

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants