Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updating Otel nuget packages. #10014

Merged
merged 2 commits into from
Apr 15, 2024
Merged

Updating Otel nuget packages. #10014

merged 2 commits into from
Apr 15, 2024

Conversation

RohitRanjanMS
Copy link
Member

The build is failing because of a security vulnerability in OpenTelemetry.Instrumentation.AspNetCore and OpenTelemetry.Instrumentation.Http. These packages are not direct references; they are included because of Azure.Monitor.OpenTelemetry.AspNetCore. We are updating these two packages to their latest versions since the new AzMon Distro package has not been released yet.

Transitive Package Resolved Severity Advisory URL

OpenTelemetry.Instrumentation.AspNetCore 1.7.0 Moderate GHSA-vh2m-22xx-q94f
OpenTelemetry.Instrumentation.Http 1.7.0 Moderate GHSA-vh2m-22xx-q94f

GHSA-vh2m-22xx-q94f

IMPORTANT: Currently, changes must be backported to the in-proc branch to be included in Core Tools and non-Flex deployments.

  • Backporting to the in-proc branch is not required
    • Otherwise: Link to backporting PR
  • My changes do not require documentation changes
    • Otherwise: Documentation issue linked to PR
  • My changes should not be added to the release notes for the next release
    • Otherwise: I've added my notes to release_notes.md
  • My changes do not need to be backported to a previous version
    • Otherwise: Backport tracked by issue/PR #issue_or_pr
  • My changes do not require diagnostic events changes
    • Otherwise: I have added/updated all related diagnostic events and their documentation (Documentation issue linked to PR)
  • I have added all required tests (Unit tests, E2E tests)

@RohitRanjanMS RohitRanjanMS requested a review from a team as a code owner April 15, 2024 17:45
Copy link
Contributor

@jviau jviau left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You will need to update the deps.json

@RohitRanjanMS RohitRanjanMS merged commit adb32d2 into dev Apr 15, 2024
9 checks passed
@RohitRanjanMS RohitRanjanMS deleted the roranjan/OtelBuildFix branch April 15, 2024 19:45
RohitRanjanMS added a commit that referenced this pull request Apr 25, 2024
* Updating Otel nuget packages.
pragnagopa pushed a commit that referenced this pull request May 2, 2024
* OpenTelemetry support (#9985)

Adding support for OpenTelemetry

---------
Co-authored-by: Jacob Viau <javia@microsoft.com>
Co-authored-by: Shyju Krishnankutty <connectshyju@gmail.com>
Co-authored-by: Daniel Castro <castro.daniel@microsoft.com>

* Updating Otel nuget packages. (#10014)

* Updating Otel nuget packages.

* Update Azure.Identity to 1.11.2 (#10037)

* Update Microsoft.Identity.Client to 4.60.3

* Update Azure.Identity to 1.11.2

* Remove Microsoft.Identity.Client

* Update WebJobs package in test projects (#10061)

* Update PowerShell workers to latest (#10016)

* Update Python Worker Version to 4.28.0 (#10009)

Co-authored-by: AzureFunctionsPython <funcdisc@microsoft.com>

* Update Node.js Worker to 3.10.0 (#9999)

* Update Node.js Worker to 3.10.0

* Add PR reference

* Update Python Worker Version to 4.28.1 (#10028)

Co-authored-by: AzureFunctionsPython <funcdisc@microsoft.com>

---------

Co-authored-by: Jacob Viau <javia@microsoft.com>
Co-authored-by: andystaples <77818326+andystaples@users.noreply.github.com>
Co-authored-by: gavin-aguiar <80794152+gavin-aguiar@users.noreply.github.com>
Co-authored-by: AzureFunctionsPython <funcdisc@microsoft.com>
Co-authored-by: Daniel Castro <castro.daniel@microsoft.com>
kshyju pushed a commit that referenced this pull request Jun 18, 2024
* OpenTelemetry support (#9985)

Adding support for OpenTelemetry

---------
Co-authored-by: Jacob Viau <javia@microsoft.com>
Co-authored-by: Shyju Krishnankutty <connectshyju@gmail.com>
Co-authored-by: Daniel Castro <castro.daniel@microsoft.com>

* Updating Otel nuget packages. (#10014)

* Updating Otel nuget packages.

* Update Azure.Identity to 1.11.2 (#10037)

* Update Microsoft.Identity.Client to 4.60.3

* Update Azure.Identity to 1.11.2

* Remove Microsoft.Identity.Client

* Update WebJobs package in test projects (#10061)

* Update PowerShell workers to latest (#10016)

* Update Python Worker Version to 4.28.0 (#10009)

Co-authored-by: AzureFunctionsPython <funcdisc@microsoft.com>

* Update Node.js Worker to 3.10.0 (#9999)

* Update Node.js Worker to 3.10.0

* Add PR reference

* Update Python Worker Version to 4.28.1 (#10028)

Co-authored-by: AzureFunctionsPython <funcdisc@microsoft.com>

---------

Co-authored-by: Jacob Viau <javia@microsoft.com>
Co-authored-by: andystaples <77818326+andystaples@users.noreply.github.com>
Co-authored-by: gavin-aguiar <80794152+gavin-aguiar@users.noreply.github.com>
Co-authored-by: AzureFunctionsPython <funcdisc@microsoft.com>
Co-authored-by: Daniel Castro <castro.daniel@microsoft.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants