chore(deps): update dependency microsoft.applicationinsights.aspnetcore to v3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
Microsoft.ApplicationInsights.AspNetCore (source)	2.23.0 → 3.1.2

---

Release Notes

Microsoft/ApplicationInsights-dotnet (Microsoft.ApplicationInsights.AspNetCore)

v3.1.2

• Fix HttpException: Request is not available in this context in the WEB package when calling TrackDependency from Application_Start in classic ASP.NET. The WEB activity processors now safely handle the case where HttpContext.Request is not yet available.
• Fix #​3163: TelemetryConfiguration.CreateDefault() on classic ASP.NET now returns a configuration already populated from ApplicationInsights.config (connection string, sampling, storage, live metrics, request/dependency tracking, etc.). A new PreApplicationStartMethod (WebApplicationInsightsInitializer) materializes and populates the singleton before Application_Start runs, so customer code calling TelemetryConfiguration.CreateDefault() from Global.asax.cs no longer gets an empty configuration. The ApplicationInsightsHttpModule no longer carries the config-reading bookkeeping. TelemetryConfiguration.PrependOpenTelemetryBuilderConfiguration no longer throws if the configuration was already built — it silently skips, so a second TelemetryClient constructed against an already-built configuration no longer throws InvalidOperationException.

v3.1.1

• [Update OpenTelemetry and Azure Monitor dependencies to address known security advisories (e.g. GHSA-g94r-2vxg-569j in OpenTelemetry.Api 1.15.1).](microsoft#3174)
  • OpenTelemetry 1.15.3
  • OpenTelemetry.Exporter.Console 1.15.3
  • OpenTelemetry.Exporter.InMemory 1.15.3
  • OpenTelemetry.Extensions.Hosting 1.15.3
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.2
  • OpenTelemetry.Instrumentation.AspNet 1.15.2
  • OpenTelemetry.Instrumentation.Http 1.15.1
  • OpenTelemetry.Instrumentation.SqlClient 1.15.2
  • Azure.Monitor.OpenTelemetry.Exporter 1.8.0

v3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

v3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

---

Configuration

📅 Schedule: (in timezone Europe/Oslo)

• Branch creation
  • "before 07:00 on Thursday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 7bd98d76-dc91-4286-a1eb-9d07541574af

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud