Merge branch 'main' into remove-hardcoded-tfm

open-telemetry · Oct 10, 2024 · f747f57 · f747f57
2 parents 44bd034 + 5127c95
commit f747f57
Show file tree

Hide file tree

Showing 47 changed files with 991 additions and 121 deletions.
diff --git a/build/Common.nonprod.props b/build/Common.nonprod.props
@@ -25,7 +25,8 @@
  Refer to https://docs.microsoft.com/en-us/nuget/concepts/package-versioning for semver syntax.
  -->
  <BenchmarkDotNetPkgVer>[0.13.12,0.14)</BenchmarkDotNetPkgVer>
- <MicrosoftExtensionsHostingPkgVer>8.0.0</MicrosoftExtensionsHostingPkgVer>
+ <MicrosoftExtensionsConfigurationJsonPkgVer>8.0.1</MicrosoftExtensionsConfigurationJsonPkgVer>
+ <MicrosoftExtensionsHostingPkgVer>8.0.1</MicrosoftExtensionsHostingPkgVer>
  <MicrosoftNETTestSdkPkgVer>[17.11.1,18.0)</MicrosoftNETTestSdkPkgVer>
  <OpenTelemetryExporterInMemoryPkgVer>$(OpenTelemetryCoreLatestVersion)</OpenTelemetryExporterInMemoryPkgVer>
  <SupportedNetTargets>net8.0;net6.0</SupportedNetTargets>

diff --git a/build/Common.props b/build/Common.props
@@ -35,8 +35,8 @@
  <MinVerPkgVer>[5.0.0,6.0)</MinVerPkgVer>
  <MicrosoftExtensionsConfigurationBinderPkgVer>[8.0.1,)</MicrosoftExtensionsConfigurationBinderPkgVer>
  <MicrosoftExtensionsHostingAbstractionsPkgVer>[2.1.0,5.0)</MicrosoftExtensionsHostingAbstractionsPkgVer>
- <MicrosoftExtensionsConfigurationPkgVer>8.0.0</MicrosoftExtensionsConfigurationPkgVer>
- <MicrosoftExtensionsOptionsPkgVer>8.0.0</MicrosoftExtensionsOptionsPkgVer>
+ <MicrosoftExtensionsConfigurationPkgVer>[8.0.0,)</MicrosoftExtensionsConfigurationPkgVer>
+ <MicrosoftExtensionsOptionsPkgVer>[8.0.0,)</MicrosoftExtensionsOptionsPkgVer>
  <MicrosoftNETFrameworkReferenceAssembliesPkgVer>[1.0.3,2.0)</MicrosoftNETFrameworkReferenceAssembliesPkgVer>
  <MicrosoftOwinPkgVer>[4.2.2,5.0)</MicrosoftOwinPkgVer>
  <MicrosoftPublicApiAnalyzersPkgVer>[3.11.0-beta1.23525.2]</MicrosoftPublicApiAnalyzersPkgVer>
@@ -49,8 +49,13 @@
  <CassandraCSharpDriverPkgVer>[3.16.0,4.0)</CassandraCSharpDriverPkgVer>
  <StyleCopAnalyzersPkgVer>[1.2.0-beta.556,2.0)</StyleCopAnalyzersPkgVer>
  <SystemNetHttp>[4.3.4,)</SystemNetHttp>
- <SystemReflectionEmitLightweightPkgVer>4.7.0</SystemReflectionEmitLightweightPkgVer>
- <SystemTextJsonPkgVer>[6.0.0,)</SystemTextJsonPkgVer>
+ <SystemReflectionEmitLightweightPkgVer>[4.7.0,)</SystemReflectionEmitLightweightPkgVer>
+
+ <!-- Note: Special handling is performed for System.Text.Json. -->
+ <SystemTextEncodingsWebMinimumOutOfBandPkgVer>[4.7.2,)</SystemTextEncodingsWebMinimumOutOfBandPkgVer>
+ <SystemTextJsonMinimumOutOfBandPkgVer>[4.7.2,)</SystemTextJsonMinimumOutOfBandPkgVer>
+ <SystemTextJsonLatestNet6OutOfBandPkgVer>[6.0.10,)</SystemTextJsonLatestNet6OutOfBandPkgVer>
+ <SystemTextJsonLatestNet8OutOfBandPkgVer>[8.0.5,)</SystemTextJsonLatestNet8OutOfBandPkgVer>
  </PropertyGroup>
 
  <ItemGroup>

diff --git a/build/Common.targets b/build/Common.targets
@@ -1,3 +1,23 @@
 <Project>
 
+ <ItemGroup Condition="'$(SystemTextJsonMinimumRequiredPkgVer)' != ''">
+ <!--
+ Note: System.Text.Encodings.Web is referenced when System.Text.Json is
+ using v4.7.2 because System.Text.Json v4.7.2 depends on
+ System.Text.Encodings.Web
+ >= v4.7.1 but System.Text.Encodings.Web needs to be at v4.7.2 to be
+ safe.
+ -->
+ <PackageReference Include="System.Text.Encodings.Web"
+ Version="$(SystemTextEncodingsWebMinimumOutOfBandPkgVer)"
+ Condition="($(SystemTextJsonMinimumRequiredPkgVer.StartsWith('[4.7.2')) OR '$(SystemTextJsonMinimumRequiredPkgVer)' == '4.7.2') AND '$(TargetFrameworkIdentifier)' != '.NETCoreApp'" />
+ <PackageReference Include="System.Text.Json"
+ Version="$(SystemTextJsonMinimumRequiredPkgVer)"
+ Condition="'$(TargetFrameworkIdentifier)' != '.NETCoreApp'" />
+
+ <PackageReference Include="System.Text.Json"
+ Version="$(SystemTextJsonLatestNet8OutOfBandPkgVer)"
+ Condition="'$(TargetFramework)' == 'net8.0'" />
+ </ItemGroup>
+
 </Project>
diff --git a/examples/kafka/Examples.ConfluentKafka.csproj b/examples/kafka/Examples.ConfluentKafka.csproj
@@ -10,12 +10,10 @@
  </ItemGroup>
 
  <ItemGroup>
- <PackageReference Include="Microsoft.Extensions.Hosting" Version="8.0.0" />
+ <PackageReference Include="Microsoft.Extensions.Hosting" Version="$(MicrosoftExtensionsHostingPkgVer)" />
  <PackageReference Include="OpenTelemetry.Extensions.Hosting" Version="$(OpenTelemetryCoreLatestVersion)" />
  <PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="$(OpenTelemetryCoreLatestVersion)" />
  <PackageReference Include="OpenTelemetry.Exporter.Console" Version="$(OpenTelemetryCoreLatestVersion)" />
- <!-- System.Text.Json is indirect reference. It is needed to upgrade it directly to avoid https://github.com/advisories/GHSA-hh2w-p6rv-4g7w -->
- <PackageReference Include="System.Text.Json" Version="8.0.4" />
  </ItemGroup>
 
 </Project>
diff --git a/examples/wcf/client-core/Examples.Wcf.Client.DotNet.csproj b/examples/wcf/client-core/Examples.Wcf.Client.DotNet.csproj
@@ -8,11 +8,9 @@
  <ItemGroup>
  <PackageReference Include="System.ServiceModel.Http" Version="4.7.0" />
  <PackageReference Include="System.ServiceModel.NetTcp" Version="4.7.0" />
- <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="8.0.0" />
- <PackageReference Include="Microsoft.Extensions.Configuration.Binder" Version="8.0.2" />
+ <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="$(MicrosoftExtensionsConfigurationJsonPkgVer)" />
+ <PackageReference Include="Microsoft.Extensions.Configuration.Binder" Version="$(MicrosoftExtensionsConfigurationBinderPkgVer)" />
  <PackageReference Include="OpenTelemetry.Exporter.Zipkin" Version="$(OpenTelemetryCoreLatestVersion)" />
- <!-- System.Text.Json is indirect reference. It is needed to upgrade it directly to avoid https://github.com/advisories/GHSA-hh2w-p6rv-4g7w -->
- <PackageReference Include="System.Text.Json" Version="8.0.4" />
  </ItemGroup>
 
  <ItemGroup>

diff --git a/src/OpenTelemetry.Exporter.OneCollector/CHANGELOG.md b/src/OpenTelemetry.Exporter.OneCollector/CHANGELOG.md
@@ -5,6 +5,12 @@
 * Drop support for .NET 6 as this target is no longer supported.
  ([#2123](https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/2123))
 
+* Bumped the `System.Text.Json` reference to `6.0.10` for runtimes older than
+ `net8.0` and added a direct reference for `System.Text.Json` at `8.0.5` on
+ `net8.0` in response to
+ [CVE-2024-43485](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43485).
+ ([#2196](https://github.com/open-telemetry/opentelemetry-dotnet/pull/2196))
+
 ## 1.10.0-alpha.1
 
 Released 2024-Sep-06

diff --git a/src/OpenTelemetry.Exporter.OneCollector/OpenTelemetry.Exporter.OneCollector.csproj b/src/OpenTelemetry.Exporter.OneCollector/OpenTelemetry.Exporter.OneCollector.csproj
@@ -14,6 +14,7 @@
  in the future (hopefully .NET 9) see https://github.com/dotnet/runtime/issues/92509 -->
  <NoWarn>$(NoWarn);SYSLIB1100;SYSLIB1101</NoWarn>
  <PackageValidationBaselineVersion>1.9.2</PackageValidationBaselineVersion>
+ <SystemTextJsonMinimumRequiredPkgVer>$(SystemTextJsonLatestNet6OutOfBandPkgVer)</SystemTextJsonMinimumRequiredPkgVer>
  </PropertyGroup>
 
  <PropertyGroup>
@@ -23,12 +24,11 @@
 
  <ItemGroup>
  <PackageReference Include="OpenTelemetry" Version="$(OTelSdkVersion)" />
- <PackageReference Include="System.Text.Json" Version="$(SystemTextJsonPkgVer)" Condition="'$(TargetFrameworkIdentifier)' != '.NETCoreApp'" />
  <PackageReference Include="Microsoft.Extensions.Configuration.Binder" Version="$(MicrosoftExtensionsConfigurationBinderPkgVer)" />
  </ItemGroup>
 
  <ItemGroup>
- <Reference Include="System.Net.Http" Condition="'$(TargetFramework)' == 'net462'" />
+ <Reference Include="System.Net.Http" Condition="'$(TargetFramework)' == '$(NetFrameworkMinimumSupportedVersion)'" />
  </ItemGroup>
 
  <ItemGroup>

diff --git a/src/OpenTelemetry.Extensions.AWS/CHANGELOG.md b/src/OpenTelemetry.Extensions.AWS/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 ## Unreleased
 
+* Bumped the `System.Text.Json` reference to `6.0.10` for runtimes older than
+ `net8.0` and added a direct reference for `System.Text.Json` at `8.0.5` on
+ `net8.0` in response to
+ [CVE-2024-43485](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43485).
+ ([#2197](https://github.com/open-telemetry/opentelemetry-dotnet/pull/2197))
+
 ## 1.3.0-beta.2
 
 Released 2024-Sep-24

diff --git a/src/OpenTelemetry.Extensions.AWS/OpenTelemetry.Extensions.AWS.csproj b/src/OpenTelemetry.Extensions.AWS/OpenTelemetry.Extensions.AWS.csproj
@@ -6,6 +6,7 @@
  <TargetFrameworks Condition="$(OS) == 'Windows_NT'">$(TargetFrameworks);$(NetFrameworkMinimumSupportedVersion)</TargetFrameworks>
  <Description>OpenTelemetry extensions for AWS.</Description>
  <MinVerTagPrefix>Extensions.AWS-</MinVerTagPrefix>
+ <SystemTextJsonMinimumRequiredPkgVer>$(SystemTextJsonLatestNet6OutOfBandPkgVer)</SystemTextJsonMinimumRequiredPkgVer>
  </PropertyGroup>
 
  <!-- Do not run Package Baseline Validation as this package has never released a stable version.
@@ -16,7 +17,6 @@
 
  <ItemGroup>
  <PackageReference Include="OpenTelemetry" Version="$(OpenTelemetryCoreLatestVersion)" />
- <PackageReference Include="System.Text.Json" Version="6.0.0" Condition="'$(TargetFrameworkIdentifier)' != '.NETCoreApp'" />
  </ItemGroup>
 
  <ItemGroup>

diff --git a/src/OpenTelemetry.Instrumentation.ElasticsearchClient/CHANGELOG.md b/src/OpenTelemetry.Instrumentation.ElasticsearchClient/CHANGELOG.md
@@ -15,6 +15,11 @@
 * Updated OpenTelemetry core component version(s) to `1.9.0`.
  ([#1888](https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/1888))
 
+* Lowered the `System.Text.Json` reference to `4.7.2` for `net462` and
+ `netstandard2.0` targets in response to
+ [CVE-2024-43485](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43485).
+ ([#2198](https://github.com/open-telemetry/opentelemetry-dotnet/pull/2198))
+
 ## 1.0.0-beta.5
 
 Released 2023-Oct-24

diff --git a/...trumentation.ElasticsearchClient/OpenTelemetry.Instrumentation.ElasticsearchClient.csproj b/...trumentation.ElasticsearchClient/OpenTelemetry.Instrumentation.ElasticsearchClient.csproj
@@ -7,17 +7,17 @@
  <Description>Elasticsearch instrumentation for OpenTelemetry .NET.</Description>
  <PackageTags>$(PackageTags);distributed-tracing</PackageTags>
  <MinVerTagPrefix>Instrumentation.ElasticsearchClient-</MinVerTagPrefix>
+ <SystemTextJsonMinimumRequiredPkgVer>$(SystemTextJsonMinimumOutOfBandPkgVer)</SystemTextJsonMinimumRequiredPkgVer>
  </PropertyGroup>
 
- <!-- Do not run Package Baseline Validation as this package has never released a stable version.
+ <!-- Do not run Package Baseline Validation as this package has never released a stable version.
  Remove this property once we have released a stable version and add PackageValidationBaselineVersion property. -->
  <PropertyGroup>
  <DisablePackageBaselineValidation>true</DisablePackageBaselineValidation>
  </PropertyGroup>
 
  <ItemGroup>
  <PackageReference Include="OpenTelemetry" Version="$(OpenTelemetryCoreLatestVersion)" />
- <PackageReference Include="System.Text.Json" Version="6.0.4" />
  </ItemGroup>
 
  <ItemGroup>

diff --git a/src/OpenTelemetry.Resources.AWS/CHANGELOG.md b/src/OpenTelemetry.Resources.AWS/CHANGELOG.md
@@ -9,6 +9,12 @@
  and add .NET Standard 2.0 target.
  ([#2164](https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/2164))
 
+* Bumped the `System.Text.Json` reference to `6.0.10` for runtimes older than
+ `net8.0` and added a direct reference for `System.Text.Json` at `8.0.5` on
+ `net8.0` in response to
+ [CVE-2024-43485](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43485).
+ ([#2196](https://github.com/open-telemetry/opentelemetry-dotnet/pull/2196))
+
 ## 1.5.0-beta.1
 
 Released 2024-Jun-04

diff --git a/src/OpenTelemetry.Resources.AWS/OpenTelemetry.Resources.AWS.csproj b/src/OpenTelemetry.Resources.AWS/OpenTelemetry.Resources.AWS.csproj
@@ -6,6 +6,7 @@
  <TargetFrameworks Condition="$(OS) == 'Windows_NT'">$(TargetFrameworks);$(NetFrameworkMinimumSupportedVersion)</TargetFrameworks>
  <Description>OpenTelemetry Resource Detectors for AWS ElasticBeanstalk, EC2, ECS, EKS.</Description>
  <MinVerTagPrefix>Resources.AWS-</MinVerTagPrefix>
+ <SystemTextJsonMinimumRequiredPkgVer>$(SystemTextJsonLatestNet6OutOfBandPkgVer)</SystemTextJsonMinimumRequiredPkgVer>
  </PropertyGroup>
 
  <!-- Do not run Package Baseline Validation as this package has never released a stable version.
@@ -16,7 +17,6 @@
 
  <ItemGroup>
  <PackageReference Include="OpenTelemetry" Version="$(OpenTelemetryCoreLatestVersion)" />
- <PackageReference Include="System.Text.Json" Version="$(SystemTextJsonPkgVer)" Condition="'$(TargetFrameworkIdentifier)' != '.NETCoreApp'" />
  </ItemGroup>
 
  <ItemGroup>

diff --git a/src/OpenTelemetry.Resources.Azure/CHANGELOG.md b/src/OpenTelemetry.Resources.Azure/CHANGELOG.md
@@ -5,6 +5,11 @@
 * Drop support for .NET 6 as this target is no longer supported and add .NET 8 target.
  ([#2165](https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/2165))
 
+* Added direct reference to `System.Text.Json` for the `net8.0` target with
+ minimum version of `8.0.5` in response to
+ [CVE-2024-43485](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43485).
+ ([#2198](https://github.com/open-telemetry/opentelemetry-dotnet/pull/2198))
+
 ## 1.0.0-beta.9
 
 Released 2024-Sep-24

diff --git a/src/OpenTelemetry.Resources.Azure/OpenTelemetry.Resources.Azure.csproj b/src/OpenTelemetry.Resources.Azure/OpenTelemetry.Resources.Azure.csproj
@@ -5,6 +5,7 @@
  <Description>OpenTelemetry Resource Detectors for Azure cloud environments.</Description>
  <PackageTags>$(PackageTags);ResourceDetector</PackageTags>
  <MinVerTagPrefix>Resources.Azure-</MinVerTagPrefix>
+ <SystemTextJsonMinimumRequiredPkgVer>$(SystemTextJsonMinimumOutOfBandPkgVer)</SystemTextJsonMinimumRequiredPkgVer>
  </PropertyGroup>
 
  <!-- Do not run Package Baseline Validation as this package has never released a stable version.
@@ -15,9 +16,6 @@
 
  <ItemGroup>
  <PackageReference Include="OpenTelemetry" Version="$(OpenTelemetryCoreLatestVersion)" />
- <PackageReference Include="System.Text.Json" Version="4.7.2" />
- <!-- System.Text.Encodings.Web is indirect reference. It is needed to upgrade it directly to avoid https://github.com/advisories/GHSA-ghhp-997w-qr28 -->
- <PackageReference Include="System.Text.Encodings.Web" Version="4.7.2" />
  </ItemGroup>
 
  <ItemGroup>

diff --git a/src/OpenTelemetry.Resources.Gcp/CHANGELOG.md b/src/OpenTelemetry.Resources.Gcp/CHANGELOG.md
@@ -6,7 +6,13 @@
  is accessible via `AddGcpDetector` extension method on `ResourceBuilder`.
  ([#1691](https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/1691))
 
-For more details, please refer to the [README](README.md).
-
 * Updated OpenTelemetry core component version(s) to `1.9.0`.
  ([#1888](https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/1888))
+
+* Drop support for .NET 6 as this target is no longer supported and add .NET 8 target.
+ ([#2167](https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/2167))
+
+* Added direct reference to `System.Text.Json` for the `net8.0` target with
+ minimum version of `8.0.5` in response to
+ [CVE-2024-43485](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43485).
+ ([#2198](https://github.com/open-telemetry/opentelemetry-dotnet/pull/2198))
diff --git a/src/OpenTelemetry.Resources.Gcp/OpenTelemetry.Resources.Gcp.csproj b/src/OpenTelemetry.Resources.Gcp/OpenTelemetry.Resources.Gcp.csproj
@@ -5,6 +5,7 @@
  <Description>OpenTelemetry Resource Detectors for Google Cloud Platform environments.</Description>
  <PackageTags>$(PackageTags);ResourceDetector</PackageTags>
  <MinVerTagPrefix>Resources.Gcp-</MinVerTagPrefix>
+ <SystemTextJsonMinimumRequiredPkgVer>$(SystemTextJsonMinimumOutOfBandPkgVer)</SystemTextJsonMinimumRequiredPkgVer>
  </PropertyGroup>
 
  <!-- Do not run Package Baseline Validation as this package has never released a stable version.
@@ -16,9 +17,6 @@
  <ItemGroup>
  <PackageReference Include="Google.Api.Gax" Version="4.8.0" />
  <PackageReference Include="OpenTelemetry" Version="$(OpenTelemetryCoreLatestVersion)" />
- <PackageReference Include="System.Text.Json" Version="4.7.2" />
- <!-- System.Text.Encodings.Web is indirect reference. It is needed to upgrade it directly to avoid https://github.com/advisories/GHSA-ghhp-997w-qr28 -->
- <PackageReference Include="System.Text.Encodings.Web" Version="4.7.2" />
  </ItemGroup>
 
  <ItemGroup>

diff --git a/src/OpenTelemetry.Sampler.AWS/CHANGELOG.md b/src/OpenTelemetry.Sampler.AWS/CHANGELOG.md
@@ -5,6 +5,15 @@
 * Drop support for .NET 6 as this target is no longer supported and add .NET 8 target.
  ([#2172](https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/2172))
 
+* Bumped the `System.Text.Json` reference to `6.0.10` for runtimes older than
+ `net8.0` and added a direct reference for `System.Text.Json` at `8.0.5` on
+ `net8.0` in response to
+ [CVE-2024-43485](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43485).
+ ([#2197](https://github.com/open-telemetry/opentelemetry-dotnet/pull/2197))
+
+* Removed the `System.Net.Http` package reference from all targets.
+ ([#2197](https://github.com/open-telemetry/opentelemetry-dotnet/pull/2197))
+
 ## 0.1.0-alpha.2
 
 Released 2024-Sep-09

diff --git a/src/OpenTelemetry.Sampler.AWS/OpenTelemetry.Sampler.AWS.csproj b/src/OpenTelemetry.Sampler.AWS/OpenTelemetry.Sampler.AWS.csproj
@@ -6,6 +6,7 @@
  <TargetFrameworks Condition="$(OS) == 'Windows_NT'">$(TargetFrameworks);$(NetFrameworkMinimumSupportedVersion)</TargetFrameworks>
  <Description>OpenTelemetry remote sampler for AWS X-Ray.</Description>
  <MinVerTagPrefix>Sampler.AWS-</MinVerTagPrefix>
+ <SystemTextJsonMinimumRequiredPkgVer>$(SystemTextJsonLatestNet6OutOfBandPkgVer)</SystemTextJsonMinimumRequiredPkgVer>
  </PropertyGroup>
 
  <!-- Do not run Package Baseline Validation as this package has never released a stable version.
@@ -16,11 +17,10 @@
 
  <ItemGroup>
  <PackageReference Include="OpenTelemetry" Version="$(OpenTelemetryCoreLatestVersion)" />
- <PackageReference Include="System.Net.Http" Version="4.3.4" />
  </ItemGroup>
 
- <ItemGroup Condition="'$(TargetFramework)' == '$(NetStandardMinimumSupportedVersion)' Or '$(TargetFramework)' == '$(NetFrameworkMinimumSupportedVersion)'">
- <PackageReference Include="System.Text.Json" Version="6.0.0" />
+ <ItemGroup Condition="'$(TargetFramework)' == '$(NetFrameworkMinimumSupportedVersion)'">
+ <Reference Include="System.Net.Http" />
  </ItemGroup>
 
  <ItemGroup>