Upgrading Microsoft.ApplicationInsights 2 to 3
Breaking2.23.0 → 3.2.0Breaking3Security1New9Changed15Fixed15Other1
SecurityUpdates OpenTelemetry and Azure Monitor dependencies to address known security advisories, including GHSA-g94r-2vxg-569j in OpenTelemetry.Api 1.15.1.GHSA-g94r-2vxg-569j ↗
BreakingUpgrade verdict
3 breaking changes and a security fix.
In plain terms
- On .NET 8 and later, fewer HTTP client metrics are collected by default. Dashboards or alerts that rely on the removed metrics need to turn them on explicitly.
- The old adaptive sampling switch is gone; use the new rate and ratio settings instead.
- Some packages from this repo, including certain auto-collectors and logging adapters, are discontinued and will not get new releases.
- This release updates the underlying telemetry libraries to versions that fix known security problems.
Must act 4 items need code or config changes
Target frameworks requirement changed in 3.1.0: .NETFramework4.5.2, .NETFramework4.6, .NETStandard2.0 → .NETFramework4.6.2, .NETStandard2.0, net10.0, net8.0, net9.0.
What you must change
Breaking3
Reduces default HTTP client metric volume in ASP.NET Core and Worker Service on .NET 8+, keeping request latency, count, and failure via http.client.request.duration.
http.client.request.durationAddViewRemoves EnabledAdaptiveSampling and replaces it with TracesPerSecond and SamplingRatio.
EnabledAdaptiveSamplingTracesPerSecondSamplingRatioOther packages not listed, such as certain auto-collectors and logging adapters, will not have future versions published.
Security1
Updates OpenTelemetry and Azure Monitor dependencies to address known security advisories, including GHSA-g94r-2vxg-569j in OpenTelemetry.Api 1.15.1.
OpenTelemetry.Api