Update nuget non-major dependencies (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
Azure.Monitor.OpenTelemetry.Exporter (source)	1.8.1 → 1.8.3			nuget	patch
Microsoft.AspNetCore.Mvc.Testing (source)	8.0.28 → 8.0.29			nuget	patch	8.0.30
Microsoft.AspNetCore.TestHost (source)	8.0.28 → 8.0.29			nuget	patch	8.0.30
System.Formats.Asn1 (source)	10.0.9 → 10.0.10			nuget	patch	10.0.11
System.IO.Hashing (source)	10.0.9 → 10.0.10			nuget	patch	10.0.11
dotnet-sdk	8.0.422 → 8.0.424			dotnet-sdk	patch

---

Release Notes

Azure/azure-sdk-for-net (Azure.Monitor.OpenTelemetry.Exporter)

v1.8.3

1.8.3 (2026-07-24)

Bugs Fixed

• Hardened ingestion and Live Metrics redirect handling to reject untrusted destinations before replaying telemetry or caching the redirect. Redirect targets must now use HTTPS and match an approved Azure Monitor trust boundary, preventing credentials and telemetry from being forwarded to attacker-controlled endpoints.
  (#​61244)

Other Changes

• Customer SDK stats are now on by default; opt out with APPLICATIONINSIGHTS_SDKSTATS_DISABLED=true. dropCode/retryCode dimension values now use the spec's SCREAMING_SNAKE_CASE (e.g. CLIENT_EXCEPTION).

v1.8.2

1.8.2 (2026-06-30)

Features Added

• Added support for the Microsoft OpenTelemetry distro's SDK statistics: a new internal meter subscription and an AppContext switch (Azure.Monitor.OpenTelemetry.Exporter.RouteSdkStatsToDistroEndpoint) that lets the distro redirect SDK statistics to its own ingestion path. The ingestion destination and an on/off signal are resolved at startup by fetching a remote configuration; on success the configured destination is used, an explicit remote disable signal turns SDK statistics off, and any other outcome falls back to the existing region-derived ingestion endpoint so SDK statistics keep flowing. The AppContext switch has no effect on Statsbeat for callers that do not opt in.
  (#​59811)

• Subscribed the Statsbeat MeterProvider to the Microsoft OpenTelemetry distro's Network SDKStats meter (MicrosoftOpenTelemetryNetworkSdkStatsMeter) so distro-emitted Network statistics flow through the existing Statsbeat cadence when the distro runs with a non-Azure-Monitor exporter.
  (#​60209)

• Subscribed the Statsbeat MeterProvider to the Microsoft OpenTelemetry distro's Feature SDKStats meter (MicrosoftOpenTelemetryFeatureSdkStatsMeter) so distro-emitted Feature statistics reach the Statsbeat ingestion path. The distro uses an independent, spec-aligned bit map to avoid collisions with the classic Application Insights SDK's FeatureStatsbeatMeter.
  (#​59529)

• Added Network SDKStats reporting, emitting the short-interval Network statistics defined in the Application Insights SDKStats spec on a 15-minute cadence: Request_Success_Count, Request_Failure_Count, Request_Duration, Retry_Count, Throttle_Count, and Exception_Count, each with the spec-defined dimensions (including host, statusCode, and exceptionType).
  (#​59909, #​60018)

Other Changes

• Updated customer SDK stats dimension key names to use camelCase (computeType, telemetryType, dropCode, dropReason, retryCode, retryReason).
  (#​59902)

dotnet/dotnet (System.Formats.Asn1)

v10.0.10

dotnet/sdk (dotnet-sdk)

v8.0.424

Compare Source

v8.0.423: .NET 8.0.29

Compare Source

Release

What's Changed

• Fix internal feed auth in unofficial CI pipeline by @​marcpopMSFT in #​54362
• Update branding to 8.0.129 by @​vseanreesermsft in #​54561
• Update branding to 8.0.423 by @​vseanreesermsft in #​54562
• [release/8.0.1xx] Update dependencies from dotnet/roslyn-analyzers by @​dotnet-maestro[bot] in #​54421
• [release/8.0.4xx] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in #​54549
• [release/8.0.4xx] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​54480
• [release/8.0.1xx] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​54479
• [release/8.0.1xx] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in #​54531
• [automated] Merge branch 'release/8.0.1xx' => 'release/8.0.4xx' by @​github-actions[bot] in #​54568
• [release/8.0.1xx] Update dependencies from dotnet/templating by @​dotnet-maestro[bot] in #​54571
• [automated] Merge branch 'release/8.0.1xx' => 'release/8.0.4xx' by @​github-actions[bot] in #​54572
• [release/8.0.4xx] Update dependencies from dotnet/templating by @​dotnet-maestro[bot] in #​54588
• Merging internal commits for release/8.0.4xx by @​vseanreesermsft in #​54666
• [release/8.0.4xx] Update dependencies from dotnet/format by @​dotnet-maestro[bot] in #​54697
• [automated] Merge branch 'release/8.0.1xx' => 'release/8.0.4xx' by @​github-actions[bot] in #​54721

Full Changelog: dotnet/sdk@v8.0.422...v8.0.423

---

Configuration

📅 Schedule: (in timezone Europe/Oslo)

• Branch creation
  • "before 07:00 on Thursday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud