[dependabot]

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.19.1 to 1.20.0.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.20.0

For highlights and announcements pertaining to this release see: Release Notes > 1.20.0.

The following changes are from the previous release 1.19.1.

• NuGet: OpenTelemetry v1.20.0

  • Fixed SuppressInstrumentationScope reference counts leaking between inherited asynchronous execution contexts.
    (#​7803)

  • Self-diagnostic features are explicitly disabled on browser-based platforms (e.g. Blazor) and are now non-functional. Previously, attempting to enable self-diagnostics on such platforms would result in an exception at runtime.
    (#​7799)

  • Added TracerProviderBuilder.ConfigureSampler which receives the resolved Sampler whether set programmatically, via OTEL_TRACES_SAMPLER, or by default, and returns a replacement. Intended for library authors who need to influence sampling without overriding a sampler the application has configured.
    (#​7780)

  • Fixed ResourceBuilder.CreateDefault ignoring OTEL_RESOURCE_ATTRIBUTES and OTEL_SERVICE_NAME environment variables when the host IConfiguration does not contain those settings.
    (#​7855)

  • Added improved self-diagnostics logging to improve the support experience. The new SelfDiagnosticsOptions class configures a rolling file sink and a console sink through the standard options pipeline. Sinks are off by default.
    (#​7588)

  • Fixed a race that could incorrectly route a concurrent metric measurement to the overflow point when its tag set was published as the cardinality limit was reached.
    (#​7804)

  • Added OpenTelemetryLoggerOptions.Version and OpenTelemetryLoggerOptions.SchemaUrl options to set an instrumentation library version and schema URL applied to logs emitted via the Microsoft.Extensions.Logging ILogger integration.
    (#​7727)

  • Fixed LogRecord.CategoryName resetting the current Logger's Version to null when set to a new value.
    (#​7727)

  • Bounded the internal cache of Logger scopes keyed by instrumentation to avoid unbounded growth.
    (#​7727)

  • Fixed the MeterProvider and its IServiceProvider being kept alive after the host is disposed when using Microsoft.Extensions.Diagnostics versions prior to 9.0, which never dispose their MetricsSubscriptionManager (and its underlying MeterListener).
    (#​7924)

  • Fixed a race condition between recording a measurement and collecting a histogram with delta temporality that could cause an empty data point (with a count of zero) to be exported in the next collection cycle.
    (#​7923)

  • Improved metric collection performance after metric streams are removed by compacting metric storage during collection.
    (#​7945)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.20.0

  • Added Logger.SchemaUrl and a LoggerProvider.GetLogger overload accepting a schema URL parameter using the new LoggerOptions type.
    (#​7727)

  • Breaking change (pre-release only versions): LoggerProvider's protected TryCreateLogger(string? name, out Logger? logger) extensibility method has been replaced by TryCreateLogger(LoggerOptions options, out Logger? logger). Custom LoggerProvider subclasses that override the previous overload must update to override the new one; the old overload is no longer called.
    ... (truncated)

1.20.0-rc.1

The following changes are from the previous release 1.19.1.

• NuGet: OpenTelemetry v1.20.0-rc.1

  • Fixed SuppressInstrumentationScope reference counts leaking between inherited asynchronous execution contexts.
    (#​7803)

  • Self-diagnostic features are explicitly disabled on browser-based platforms (e.g. Blazor) and are now non-functional. Previously, attempting to enable self-diagnostics on such platforms would result in an exception at runtime.
    (#​7799)

  • Added TracerProviderBuilder.ConfigureSampler which receives the resolved Sampler whether set programmatically, via OTEL_TRACES_SAMPLER, or by default, and returns a replacement. Intended for library authors who need to influence sampling without overriding a sampler the application has configured.
    (#​7780)

  • Fixed ResourceBuilder.CreateDefault ignoring OTEL_RESOURCE_ATTRIBUTES and OTEL_SERVICE_NAME environment variables when the host IConfiguration does not contain those settings.
    (#​7855)

  • Added improved self-diagnostics logging to improve the support experience. The new SelfDiagnosticsOptions class configures a rolling file sink and a console sink through the standard options pipeline. Sinks are off by default.
    (#​7588)

  • Fixed a race that could incorrectly route a concurrent metric measurement to the overflow point when its tag set was published as the cardinality limit was reached.
    (#​7804)

  • Added OpenTelemetryLoggerOptions.Version and OpenTelemetryLoggerOptions.SchemaUrl options to set an instrumentation library version and schema URL applied to logs emitted via the Microsoft.Extensions.Logging ILogger integration.
    (#​7727)

  • Fixed LogRecord.CategoryName resetting the current Logger's Version to null when set to a new value.
    (#​7727)

  • Bounded the internal cache of Logger scopes keyed by instrumentation to avoid unbounded growth.
    (#​7727)

  • Fixed the MeterProvider and its IServiceProvider being kept alive after the host is disposed when using Microsoft.Extensions.Diagnostics versions prior to 9.0, which never dispose their MetricsSubscriptionManager (and its underlying MeterListener).
    (#​7924)

  • Fixed a race condition between recording a measurement and collecting a histogram with delta temporality that could cause an empty data point (with a count of zero) to be exported in the next collection cycle.
    (#​7923)

  • Improved metric collection performance after metric streams are removed by compacting metric storage during collection.
    (#​7945)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.20.0-rc.1

  • Added Logger.SchemaUrl and a LoggerProvider.GetLogger overload accepting a schema URL parameter using the new LoggerOptions type.
    (#​7727)

  • Breaking change (pre-release only versions): LoggerProvider's protected TryCreateLogger(string? name, out Logger? logger) extensibility method has been replaced by TryCreateLogger(LoggerOptions options, out Logger? logger). Custom LoggerProvider subclasses that override the previous overload must update to override the new one; the old overload is no longer called.
    (#​7727)

... (truncated)

1.20.0-beta.1

The following changes are from the previous release 1.19.1-beta.1.

• NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.20.0-beta.1

  • A scrape request whose connection is aborted, or whose X-Prometheus-Scrape-Timeout-Seconds deadline elapses, now stops waiting for an in-progress metrics collection instead of continuing to wait for it to finish. The collection itself is not cancelled and continues running in the background.
    (#​7856)

  • Updated OpenTelemetry core component version(s) to 1.20.0.
    (#​7950)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.20.0-beta.1

  • Updated OpenTelemetry core component version(s) to 1.20.0.
    (#​7950)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Shims.OpenTracing v1.20.0-beta.1

  • Updated OpenTelemetry core component version(s) to 1.20.0.
    (#​7950)

  See CHANGELOG for details.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[ammarheidari]

Governed dependency gate diagnosis (2026-10-19): the CI matrix is failing at dotnet restore --locked-mode, not because dozens of independent product tests failed. The actual error is NU1004, a centrally managed transitive package request mismatch from 1.19.1 to 1.20.0 in tests/Kafdeck.Architecture.Tests/packages.lock.json and tests/Kafdeck.NotificationSender.Lab/packages.lock.json, cascading through Kafdeck.Api. The current PR only changes central version, leaving affected NuGet lock graphs stale. Required action: in a controlled .NET 10 environment regenerate all affected project lockfiles with dotnet restore Kafdeck.slnx --force-evaluate, commit the consistent lockfiles, then prove dotnet restore Kafdeck.slnx --locked-mode and all exact-head CI/CodeQL/Keycloak/HA tests. Do NOT disable locked mode, mark failures flaky, or merge on green CodeQL alone. Prefer a coordinated atomic security-compatible dependency package change if individual updates conflict.

[ammarheidari]

Superseded by fully admitted, protected-main MERGED #343 (affed956bcc7c12dce1cc5e18e87d09bb4d4b9b7). The coordinated .NET 10.0.13 + OpenTelemetry 1.20.0 versions and all regenerated solution project packages.lock.json files have been merged together. #343 exact-head Quality, C#/JS CodeQL, dependency review, benchmarks, real Keycloak, Kafka 3.9/4.x, PostgreSQL and cross-platform lab tests SUCCESS; Codex clean and CODEOWNER approved. Closing this standalone bot PR without merging because its partial central-version update lacks a consistent lock graph and fails NU1004. Not dropping any approved v0.8 capability.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.