v2.0.0 — OpenTelemetry Migration

Prerelease: 2.0.0-preview0.0.1

Overview

This is a major release that migrates audit telemetry from the Application Insights SDK (TelemetryInitializer) to OpenTelemetry, aligning with the direction of Microsoft.ApplicationInsights.AspNetCore v3+. It also hardens the repository with automated testing, dependency management, and secret scanning.

✨ What's New

`AuditActivityProcessor` replaces `AuditTelemetryInitializer`

Audit telemetry is now implemented as an OpenTelemetry BaseProcessor<Activity>. On each request it enriches the active trace with:

Tag	Description
`enduser.id`	Authenticated user (`ClaimTypes.Name` / `Email` / `UPN`)
`client.address`	Client IP, resolving `X-Forwarded-For` for proxy scenarios
`UserApplicationRoles`	Comma-separated application roles from claims
`user-agent`	HTTP User-Agent header

New `AddSubSurfAppManagementMonitoring()` extension method

A convenience extension method has been added alongside the existing Startup.Configure entry point:

// Option A – extension method (new)
services.AddSubSurfAppManagementMonitoring();

// Option B – static configure (existing)
Equinor.SubSurfAppManagementMonitoringNuGet.Startup.Configure(services);

Both register IHttpContextAccessor and wire up AuditActivityProcessor via AddOpenTelemetry().WithTracing(...).

🔧 Improvements

Dependency upgrades — all packages updated to latest; notably Microsoft.ApplicationInsights.AspNetCore → 3.0.0 and Microsoft.Extensions.* → 10.0.x
Better proxy IP resolution — X-Forwarded-For is now parsed and the first (client) IP is used, with a fallback to RemoteIpAddress
Dependabot — automated PR creation for future dependency updates
CI: unit tests — GitHub Actions workflow runs the new unit test suite on every push/PR
CI: secret scanning — TruffleHog GitHub Action added to prevent credential leaks

⚠️ Breaking Changes

1. `Microsoft.ApplicationInsights.AspNetCore` `< 3.0.0` is no longer supported

This package now depends on Microsoft.ApplicationInsights.AspNetCore 3.0.0. If your application uses an older version you must upgrade it before updating this package.

2. `Microsoft.Extensions.*` major version bump

Dependencies on Microsoft.Extensions.Diagnostics.HealthChecks and Microsoft.Extensions.Logging.Abstractions have been bumped to 10.0.x. Ensure your host application is compatible.

3. `AuditTelemetryInitializer` removed

The old AuditTelemetryInitializer class has been deleted. You must call one of the new registration methods in your startup code to continue receiving audit telemetry:

// In Program.cs / Startup.cs
services.AddSubSurfAppManagementMonitoring();

Note: If your application currently relies on AmplifyNuGet to register the telemetry component, you will need to add the explicit call above once AmplifyNuGet removes that responsibility in a future release.