Bump OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.2 to 1.15.3

[dependabot]

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.2 to 1.15.3.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.15.3

For highlights and announcements pertaining to this release see: Release Notes > 1.15.3.

The following changes are from the previous release 1.15.2.

• NuGet: OpenTelemetry v1.15.3

  • Fix resource leak in batch and periodic exporting task workers for Blazor/WASM.
    (#​7069)

  • Fixed LogRecord.LogLevel to preserve LogLevel.None and handle
    unspecified or out-of-range severities without returning invalid enum values.
    (#​7092)

  • Fixed OTEL_TRACES_SAMPLER_ARG handling to treat out-of-range, NaN, and
    infinite values as invalid and fall back to the default ratio when using
    traceidratio and parentbased_traceidratio samplers.
    (#​7103)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.15.3

  • Fix baggage and trace headers not respecting the maximum length in some cases
    to resolve GHSA-g94r-2vxg-569j.
    (#​7061)

  • Improve efficiency of parsing of baggage and B3 propagation headers
    to resolve GHSA-g94r-2vxg-569j.
    (#​7061)

  • Breaking change: Fixed tracestate parsing to reject keys that do not
    begin with a lowercase letter, including keys beginning with digits, to
    align with the W3C Trace Context specification.
    (#​7065)

  • Fixed BaggagePropagator to trim optional whitespace (OWS) around =
    separators when parsing the baggage header, as required by the
    W3C Baggage specification.
    (#​7009)

  • Fixed BaggagePropagator to strip baggage properties (e.g. ;metadata)
    from values when parsing the baggage header.
    (#​7009)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.15.3

  No notable changes.

... (truncated)

1.15.3-beta.1

The following changes are from the previous release 1.15.2-beta.1.

• NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.15.3-beta.1

  • Fixed metric unit strings containing invalid Prometheus characters (e.g. # RU)
    not being sanitized, resulting in malformed metric names.
    (#​6187)

  • Fixed Prometheus metric serialization to handle empty label names without
    throwing during scrape rendering.
    (#​7077)

  • Updated OpenTelemetry core component version(s) to 1.15.3.
    (#​7125)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.15.3-beta.1

  • Fixed metric unit strings containing invalid Prometheus characters (e.g. # RU)
    not being sanitized, resulting in malformed metric names.
    (#​6187)

  • Fixed Prometheus metric serialization to handle empty label names without
    throwing during scrape rendering.
    (#​7077)

  • Updated OpenTelemetry core component version(s) to 1.15.3.
    (#​7125)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Shims.OpenTracing v1.15.3-beta.1

  • Fixes support for byte, short, int, and float attributes.
    (#​7080)

  • Updated OpenTelemetry core component version(s) to 1.15.3.
    (#​7125)

  See CHANGELOG for details.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[github-actions]

✅ 程式碼審查報告

檢查項目	狀態
🔨 編譯	✅ 通過
🧪 測試	✅ 通過
📐 格式	✅ 通過
🖥️ 前端型別檢查	✅ 通過
📊 變更行數	13 行

---

由 GitHub Actions 自動產生 · 🔍 Copilot Code Review

[github-actions]

🛡️ CodeQL 安全掃描報告

嚴重程度	數量
🔴 錯誤 (Error)	0
🟡 警告 (Warning)	1
🔵 提示 (Note)	0
合計	1

🟡 警告（建議修復）

• js/unused-local-variable — Unused function login.
  📄 frontend/e2e/dashboard.spec.ts:4

---

📋 完整 SARIF 報告請至 Security → Code scanning alerts 頁面查看
由 GitHub Actions 自動產生 · 🛡️ CodeQL 安全掃描

[github-actions]

✅ CI 整合摘要報告

項目	內容
Commit	a1b524f
分支	dependabot/nuget/src/VMTO.Infrastructure/OpenTelemetry.Exporter.OpenTelemetryProtocol-1.15.3
時間	2026-07-23 08:58:02 UTC

各項檢查結果

檢查項目	狀態
🔨 程式碼審查（建置/測試/格式）	✅ 通過
🛡️ CodeQL 安全掃描（C#）	✅ 通過
🛡️ CodeQL 安全掃描（TypeScript/Vue）	✅ 通過

📋 完整 CodeQL 報告請至 Security → Code scanning alerts 查看
由 GitHub Actions 自動產生 · 📋 CI 整合摘要