chore: Bump OpenTelemetry.Instrumentation.AspNetCore from 1.17.0 to 1.18.0

[dependabot]

Updated OpenTelemetry.Instrumentation.AspNetCore from 1.17.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.AspNetCore's releases.

1.18.0

• NuGet: OpenTelemetry.Exporter.OneCollector v1.18.0

  • Updated OpenTelemetry core component version(s) to 1.18.0.
    (#​5022)

  See CHANGELOG for details.

1.18.0-rc.1

• NuGet: OpenTelemetry.Instrumentation.Process v1.18.0-rc.1

  • Updated OpenTelemetry core component version(s) to 1.18.0.
    (#​5022)

  See CHANGELOG for details.

1.18.0-beta.2

• NuGet: OpenTelemetry.Exporter.Geneva v1.18.0-beta.2

  • Updated OpenTelemetry core component version(s) to 1.18.0.
    (#​5022)

  See CHANGELOG for details.

1.18.0-beta.1

• NuGet: OpenTelemetry.Exporter.Geneva v1.18.0-beta.1

  • Fixed a metric TLV serialization issue where an exemplar whose filtered tags
    serialized to more than 255 bytes caused the payload to be corrupted.
    (#​4856)

  • Renamed the PrivatePreviewEnableOtlpProtobufEncoding connection string switch
    to EnableOtlpProtobufEncoding. The old PrivatePreviewEnableOtlpProtobufEncoding
    switch is no longer supported.
    (#​4920)

  • Fixed a regression introduced in 1.17.0 where EtwDataTransport prepended a
    synthetic 4-byte length field to the ETW payload for logs and traces, causing
    the agent to reject the data with "Bad forward protocol format". The raw
    payload is once again written as a single unframed field.
    (#​4941)

  See CHANGELOG for details.

1.18.0-alpha.1

• NuGet: OpenTelemetry.Instrumentation.EventCounters v1.18.0-alpha.1

  • Added argument validation for EventCounter source names and refresh intervals.
    (#​5012)

  • Updated OpenTelemetry core component version(s) to 1.18.0.
    (#​5022)

  See CHANGELOG for details.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, nuget. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[ShortArrow]

Superseded by #190, which moves all three OpenTelemetry packages to 1.18.0 together with the 28 regenerated lock files.

This is not a rejection of the bump — it is the CPM interaction noted on #135 and #130. A package held as CentralTransitive in a lock file stops matching central package management the moment the version moves, so locked restore fails with NU1004 and the check dies in about 25 seconds. Dependabot edits Directory.Packages.props without regenerating lock files, so its NuGet PRs here cannot go green regardless of the package. Bumping by hand with dotnet restore --force-evaluate is the working path.

Also folded in: Exporter.OpenTelemetryProtocol, which your split left at 1.17.0 and which is better kept level with the rest of the stack.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.