From c3d388d8b6bab80f50119c912b71d16d4cec4326 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Elias=20H=C3=B6rner?= <elias.hoerner@hoerner-it.net>
Date: Sun, 3 May 2026 11:41:20 +0200
Subject: [PATCH] Update OTEL dependency

---
 .../Extensions/ServiceCollectionExtensions.cs               | 2 +-
 src/Turnierplan.App/Turnierplan.App.csproj                  | 6 +++---
 .../Extensions/TracerProviderBuilderExtensions.cs           | 3 +--
 src/Turnierplan.Dal/Turnierplan.Dal.csproj                  | 2 +-
 .../Turnierplan.PdfRendering.csproj                         | 2 +-
 5 files changed, 7 insertions(+), 8 deletions(-)

diff --git a/src/Turnierplan.App/Extensions/ServiceCollectionExtensions.cs b/src/Turnierplan.App/Extensions/ServiceCollectionExtensions.cs
index 6ec999a4..e6756c5c 100644
--- a/src/Turnierplan.App/Extensions/ServiceCollectionExtensions.cs
+++ b/src/Turnierplan.App/Extensions/ServiceCollectionExtensions.cs
@@ -34,7 +34,7 @@ public static void AddTurnierplanMonitoring(this IServiceCollection services, IC
             metrics.AddAspNetCoreInstrumentation();
             metrics.AddHttpClientInstrumentation();
             metrics.AddRuntimeInstrumentation();
-            metrics.AddNpgsqlInstrumentation();
+            metrics.AddMeter("Npgsql"); // TODO: Revert to AddNpgsqlInstrumentation() once Npgsql.OpenTelemetry is updated to use a non-vulnerable version of OpenTelemetry.Api
         });
 
         openTelemetryBuilder.WithTracing(tracing =>
diff --git a/src/Turnierplan.App/Turnierplan.App.csproj b/src/Turnierplan.App/Turnierplan.App.csproj
index 4615faf5..a78157b0 100644
--- a/src/Turnierplan.App/Turnierplan.App.csproj
+++ b/src/Turnierplan.App/Turnierplan.App.csproj
@@ -12,7 +12,7 @@
 
   <ItemGroup>
     <PackageReference Include="FluentValidation" Version="12.1.1" />
-    <PackageReference Include="Azure.Monitor.OpenTelemetry.AspNetCore" Version="1.4.0" />
+    <PackageReference Include="Azure.Monitor.OpenTelemetry.AspNetCore" Version="1.5.0" />
     <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="10.0.6" />
     <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.1">
       <PrivateAssets>all</PrivateAssets>
@@ -24,8 +24,8 @@
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.15.2" />
-    <PackageReference Include="OpenTelemetry.Instrumentation.Runtime" Version="1.15.0"/>
+    <PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.15.3" />
+    <PackageReference Include="OpenTelemetry.Instrumentation.Runtime" Version="1.15.1" />
     <PackageReference Include="Scalar.AspNetCore" Version="2.14.1" />
     <PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="8.17.0" />
   </ItemGroup>
diff --git a/src/Turnierplan.Dal/Extensions/TracerProviderBuilderExtensions.cs b/src/Turnierplan.Dal/Extensions/TracerProviderBuilderExtensions.cs
index b9d4418b..706dfc7e 100644
--- a/src/Turnierplan.Dal/Extensions/TracerProviderBuilderExtensions.cs
+++ b/src/Turnierplan.Dal/Extensions/TracerProviderBuilderExtensions.cs
@@ -1,4 +1,3 @@
-using Npgsql;
 using OpenTelemetry.Trace;
 
 namespace Turnierplan.Dal.Extensions;
@@ -7,7 +6,7 @@ public static class TracerProviderBuilderExtensions
 {
     public static TracerProviderBuilder AddTurnierplanDataAccessLayer(this TracerProviderBuilder builder)
     {
-        return builder.AddNpgsql();
+        return builder.AddSource("Npgsql"); // TODO: Revert to AddNpgsql() once Npgsql.OpenTelemetry is updated to use a non-vulnerable version of OpenTelemetry.Api
     }
 }
 
diff --git a/src/Turnierplan.Dal/Turnierplan.Dal.csproj b/src/Turnierplan.Dal/Turnierplan.Dal.csproj
index a02c58f8..ac76316e 100644
--- a/src/Turnierplan.Dal/Turnierplan.Dal.csproj
+++ b/src/Turnierplan.Dal/Turnierplan.Dal.csproj
@@ -14,7 +14,7 @@
   <ItemGroup>
     <PackageReference Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.1" />
     <PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.1" />
-    <PackageReference Include="Npgsql.OpenTelemetry" Version="10.0.2" />
+    <PackageReference Include="OpenTelemetry.Api" Version="1.15.3" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/Turnierplan.PdfRendering/Turnierplan.PdfRendering.csproj b/src/Turnierplan.PdfRendering/Turnierplan.PdfRendering.csproj
index fafd6181..11026f66 100644
--- a/src/Turnierplan.PdfRendering/Turnierplan.PdfRendering.csproj
+++ b/src/Turnierplan.PdfRendering/Turnierplan.PdfRendering.csproj
@@ -8,7 +8,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="OpenTelemetry.Api" Version="1.15.2" />
+    <PackageReference Include="OpenTelemetry.Api" Version="1.15.3" />
     <PackageReference Include="QuestPDF" Version="2026.2.4" />
     <PackageReference Include="SkiaSharp.NativeAssets.Linux.NoDependencies" Version="3.119.2" />
     <PackageReference Include="SkiaSharp.QrCode" Version="0.12.0" />