Cherry pick branch 'genexuslabs:chore/security-package-updates' into beta

Author: claudiamurialdo

dotnet/src/dotnetcore/Providers/OpenTelemetry/OpenTelemetry/GeneXus.OpenTelemetry.csproj

@@ -12,10 +12,10 @@
 	  <PackageReference Include="OpenTelemetry.Exporter.Console" Version="1.15.3" />
 	  <PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.15.3" />
 	  <PackageReference Include="OpenTelemetry.Extensions.Hosting" Version="1.15.3" />
-	  <PackageReference Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.8.1" />
-	  <PackageReference Include="OpenTelemetry.Instrumentation.Http" Version="1.8.1" />
-	  <PackageReference Include="OpenTelemetry.Instrumentation.Runtime" Version="1.7.0" />
-	  <PackageReference Include="OpenTelemetry.Instrumentation.SqlClient" Version="1.0.0-rc9.14" NoWarn="NU5104" />
+	  <PackageReference Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.15.2" />
+	  <PackageReference Include="OpenTelemetry.Instrumentation.Http" Version="1.15.1" />
+	  <PackageReference Include="OpenTelemetry.Instrumentation.Runtime" Version="1.15.1" />
+	  <PackageReference Include="OpenTelemetry.Instrumentation.SqlClient" Version="1.15.2" NoWarn="NU5104" />
   </ItemGroup>
 
   <ItemGroup>

dotnet/src/dotnetcore/Providers/OpenTelemetry/OpenTelemetry/GxTraceProviderBuilder.cs

@@ -23,8 +23,11 @@ public static TracerProviderBuilder AddGxAspNetInstrumentation(this TracerProvid
 				.AddSqlClientInstrumentation(opt =>
 				{
 					opt.RecordException = true;
-					opt.EnableConnectionLevelAttributes = true;
-					opt.SetDbStatementForText = true;
+					// OpenTelemetry.Instrumentation.SqlClient 1.15+ removed EnableConnectionLevelAttributes
+					// and SetDbStatementForText. Connection-level attributes and db.statement text are
+					// now emitted by default following the stable OpenTelemetry semantic conventions
+					// (gated by OTEL_SEMCONV_STABILITY_OPT_IN at the consumer's runtime if needed).
+					// For finer control re-enable via EnrichWithSqlCommand and manual Activity tagging.
 				});
 				string envvar = Environment.GetEnvironmentVariable("OTEL_TRACES_EXPORTER");
 				if (envvar != null && envvar.Contains("console"))