Skip to content

fix(csharp): update OpenTelemetry to remediate CVE-2026-40894 - #4981

Closed
davidhcoe wants to merge 2 commits into
apache:mainfrom
davidhcoe:dev/davidcoe/fix-opentelemetry-cve-2026-40894
Closed

davidhcoe wants to merge 2 commits into
apache:mainfrom
davidhcoe:dev/davidcoe/fix-opentelemetry-cve-2026-40894

Conversation

@davidhcoe

Copy link
Copy Markdown
Contributor

Require patched OpenTelemetry dependencies while retaining the core and listener DiagnosticSource minimums.

Generated-by: GitHub Copilot

davidhcoe and others added 2 commits October 30, 2026 09:50
Require patched OpenTelemetry dependencies while retaining the core and listener DiagnosticSource minimums.

Generated-by: GitHub Copilot

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Retain upstream production exporter dependency declarations and clarify the helper-specific DiagnosticSource requirement.

Refs apache#4980

Generated-by: GitHub Copilot

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@davidhcoe
davidhcoe marked this pull request as draft October 30, 2026 14:05
@davidhcoe davidhcoe closed this Oct 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant