OpenTelemetry.Api v1.14.0 dependency (vulnerability)

[aki-matleb]

OpenTelemetry.Api v1.14.0 dependency has known vulnerability, latest version 1.15.3 is fixed

[jodydonetti]

Hi @aki-matleb , thanks for the heads up!

For posterity, here is the related CVE https://nvd.nist.gov/vuln/detail/CVE-2026-40894

Will bump the dependency in the next version (which should go live this weekend).