chore: Bump the logging group with 4 updates

[dependabot]

Updated Microsoft.Extensions.Logging from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.3 to 1.16.0.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.16.0

For highlights and announcements pertaining to this release see: Release Notes > 1.16.0.

The following changes are from the previous release 1.16.0-rc.1.

• NuGet: OpenTelemetry v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Console v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.InMemory v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Zipkin v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Extensions.Hosting v1.16.0

  No notable changes.

... (truncated)

1.16.0-rc.1

The following changes are from the previous release 1.15.3.

• NuGet: OpenTelemetry v1.16.0-rc.1

  • Stop validating View-provided metric stream Name against the instrument
    name syntax, per
    spec clarification.
    (#​7300)

  • Fix incorrect validation of OTEL_BSP_* and OTEL_BLRP_* environment
    variables.
    (#​7187)

  • Fix observable instrument callbacks running once per reader instead of
    once per collection cycle.
    (#​7188)

  • Added exception safety for user-supplied ExemplarReservoir implementations.
    Exceptions thrown from Offer are now caught and logged rather than propagating
    out of Counter.Add/Histogram.Record.
    (#​7277)

  • Update OpenTelemetrySdkEventSource to support the W3C randomness flag.
    (#​7301)

  • Added ObservedTimestamp property to LogRecord.
    (#​6979)

  • Breaking Change Explicit histogram boundaries no longer allow more than
    10 million values.
    (#​7165)

  • Fixed a circular reference which could cause a LoggerProvider to fail to
    resolve when one of its dependencies depends on ILogger or ILoggerFactory.
    As part of this fix the LoggerProvider resolved from dependency injection
    is now created lazily when the first logger is created rather than when
    ILoggerProvider or ILoggerFactory is resolved. A consequence is that any
    invalid configuration now surfaces when the first log record is written instead
    of when the logging services are resolved.
    (#​7308)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.16.0-rc.1

  • Experimental (pre-release builds only):
    Add support for using environment variables as context propagation carriers.
    (#​7174)

  • Fix BaggagePropagator to correctly follow Key and Value Encoding rules as per
    ... (truncated)

1.16.0-beta.1

The following changes are from the previous release 1.15.3-beta.1.

• NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.16.0-beta.1

  • Fixed scrape response cache freshness using monotonic time so it is not
    affected by NTP system clock adjustments.
    (#​7253)

  • Breaking Change Removed DisableTimestamp property from
    PrometheusAspNetCoreOptions.
    (#​7176)

  • Fixed the serialization of NaN, PositiveInfinity, and NegativeInfinity
    values in Prometheus metrics to be compliant with the specification.
    (#​7179)

  • Fixed loss of precision when serializing double and float values in
    Prometheus metrics to be compliant with the specification by using 17
    significant digits to represent such values.
    (#​7179)

  • Fix non-ASCII characters in metric names and unit strings not being sanitized
    correctly during Prometheus serialization.
    (#​7184)

  • Fix case where reader tracking could be reset while readers were still active.
    (#​7190)

  • Improve Accept header handling for format negotiation so OpenMetrics is
    selected correctly by considering whitespace and q weights.
    (#​7208)

  • Emit OpenMetrics exemplars for counters and histogram buckets.
    (#​7222)

  • Fix incorrect handling of untyped metrics when using OpenMetrics format.
    (#​7219)

  • Fix Prometheus/OpenMetrics serialization to emit metric and label names
    containing _ instead of dropping them and prefixing leading digits.
    Invalid characters are replaced with _ instead of being dropped.
    (#​7209)

  • Add escaping=underscores to the Accept header handling for content
    negotiation so OpenMetrics are handled correctly.
    (#​7209)

  • Omit histogram _sum and _count in OpenMetrics when negative bucket
    thresholds are present.
    (#​7221)
    ... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Extensions.Hosting from 1.15.3 to 1.16.0.

Release notes

Sourced from OpenTelemetry.Extensions.Hosting's releases.

1.16.0

For highlights and announcements pertaining to this release see: Release Notes > 1.16.0.

The following changes are from the previous release 1.16.0-rc.1.

• NuGet: OpenTelemetry v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Console v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.InMemory v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Zipkin v1.16.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Extensions.Hosting v1.16.0

  No notable changes.

... (truncated)

1.16.0-rc.1

The following changes are from the previous release 1.15.3.

• NuGet: OpenTelemetry v1.16.0-rc.1

  • Stop validating View-provided metric stream Name against the instrument
    name syntax, per
    spec clarification.
    (#​7300)

  • Fix incorrect validation of OTEL_BSP_* and OTEL_BLRP_* environment
    variables.
    (#​7187)

  • Fix observable instrument callbacks running once per reader instead of
    once per collection cycle.
    (#​7188)

  • Added exception safety for user-supplied ExemplarReservoir implementations.
    Exceptions thrown from Offer are now caught and logged rather than propagating
    out of Counter.Add/Histogram.Record.
    (#​7277)

  • Update OpenTelemetrySdkEventSource to support the W3C randomness flag.
    (#​7301)

  • Added ObservedTimestamp property to LogRecord.
    (#​6979)

  • Breaking Change Explicit histogram boundaries no longer allow more than
    10 million values.
    (#​7165)

  • Fixed a circular reference which could cause a LoggerProvider to fail to
    resolve when one of its dependencies depends on ILogger or ILoggerFactory.
    As part of this fix the LoggerProvider resolved from dependency injection
    is now created lazily when the first logger is created rather than when
    ILoggerProvider or ILoggerFactory is resolved. A consequence is that any
    invalid configuration now surfaces when the first log record is written instead
    of when the logging services are resolved.
    (#​7308)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.16.0-rc.1

  • Experimental (pre-release builds only):
    Add support for using environment variables as context propagation carriers.
    (#​7174)

  • Fix BaggagePropagator to correctly follow Key and Value Encoding rules as per
    ... (truncated)

1.16.0-beta.1

The following changes are from the previous release 1.15.3-beta.1.

• NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.16.0-beta.1

  • Fixed scrape response cache freshness using monotonic time so it is not
    affected by NTP system clock adjustments.
    (#​7253)

  • Breaking Change Removed DisableTimestamp property from
    PrometheusAspNetCoreOptions.
    (#​7176)

  • Fixed the serialization of NaN, PositiveInfinity, and NegativeInfinity
    values in Prometheus metrics to be compliant with the specification.
    (#​7179)

  • Fixed loss of precision when serializing double and float values in
    Prometheus metrics to be compliant with the specification by using 17
    significant digits to represent such values.
    (#​7179)

  • Fix non-ASCII characters in metric names and unit strings not being sanitized
    correctly during Prometheus serialization.
    (#​7184)

  • Fix case where reader tracking could be reset while readers were still active.
    (#​7190)

  • Improve Accept header handling for format negotiation so OpenMetrics is
    selected correctly by considering whitespace and q weights.
    (#​7208)

  • Emit OpenMetrics exemplars for counters and histogram buckets.
    (#​7222)

  • Fix incorrect handling of untyped metrics when using OpenMetrics format.
    (#​7219)

  • Fix Prometheus/OpenMetrics serialization to emit metric and label names
    containing _ instead of dropping them and prefixing leading digits.
    Invalid characters are replaced with _ instead of being dropped.
    (#​7209)

  • Add escaping=underscores to the Accept header handling for content
    negotiation so OpenMetrics are handled correctly.
    (#​7209)

  • Omit histogram _sum and _count in OpenMetrics when negative bucket
    thresholds are present.
    (#​7221)
    ... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Assignees

The following users could not be added as assignees: PokManagerApi/maintainers. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: area: build, dependencies, nuget. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 4 package(s) with unknown licenses.

See the Details below.

License Issues

src/Hosting/PokManager.ServiceDefaults/PokManager.ServiceDefaults.csproj

Package	Version	License	Issue Type
OpenTelemetry.Exporter.OpenTelemetryProtocol	1.16.0	Null	Unknown License
OpenTelemetry.Extensions.Hosting	1.16.0	Null	Unknown License

src/Infrastructure/PokManager.Infrastructure/PokManager.Infrastructure.csproj

Package	Version	License	Issue Type
Microsoft.Extensions.Logging	10.0.9	Null	Unknown License
Microsoft.Extensions.Options	10.0.9	Null	Unknown License

Allowed Licenses:

MIT, Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC, 0BSD

OpenSSF Scorecard

Package	Version	Score	Details
nuget/OpenTelemetry.Exporter.OpenTelemetryProtocol	1.16.0	🟢 8.3	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Dependency-Update-Tool 🟢 10 update tool detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Pinned-Dependencies 🟢 10 all dependencies are pinned CII-Best-Practices 🟢 5 badge detected: Passing Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Vulnerabilities 🟢 10 0 existing vulnerabilities detected Packaging 🟢 10 packaging workflow detected Fuzzing ⚠️ 0 project is not fuzzed SAST 🟢 10 SAST tool is run on all commits Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches License 🟢 10 license file detected Security-Policy 🟢 10 security policy file detected CI-Tests 🟢 10 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 Contributors 🟢 10 project has 38 contributing companies or organizations
nuget/OpenTelemetry.Extensions.Hosting	1.16.0	🟢 8.3	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Dependency-Update-Tool 🟢 10 update tool detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Pinned-Dependencies 🟢 10 all dependencies are pinned CII-Best-Practices 🟢 5 badge detected: Passing Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Vulnerabilities 🟢 10 0 existing vulnerabilities detected Packaging 🟢 10 packaging workflow detected Fuzzing ⚠️ 0 project is not fuzzed SAST 🟢 10 SAST tool is run on all commits Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches License 🟢 10 license file detected Security-Policy 🟢 10 security policy file detected CI-Tests 🟢 10 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 Contributors 🟢 10 project has 38 contributing companies or organizations
nuget/Microsoft.Extensions.Logging	10.0.9	Unknown	Unknown
nuget/Microsoft.Extensions.Options	10.0.9	Unknown	Unknown

Scanned Files

• src/Hosting/PokManager.ServiceDefaults/PokManager.ServiceDefaults.csproj
• src/Infrastructure/PokManager.Infrastructure/PokManager.Infrastructure.csproj