[onecollector & resources.aws] Mitigate STJ vulnerabilities

[CodeBlanch]

Changes

• Mitigate security vulnerabilities in projects which are today targeting System.Text.Json v6.0.0.

Details

OpenTelemetry.Exporter.OneCollector

Before

Target	Direct reference	Version	Vulnerable
net462	Yes	6.0.0	Yes
net8.0	No	8.0.0 - 8.0.5	Depends on installed runtime patch level
netstandard2.0	Yes	6.0.0	Yes
netstandard2.1	Yes	6.0.0	Yes

After

Target	Direct reference	Version	Vulnerable
net462	Yes	6.0.10	No
net8.0	Yes	8.0.5	No
netstandard2.0	Yes	6.0.10	No
netstandard2.1	Yes	6.0.10	No

OpenTelemetry.Resources.AWS

Before

Target	Direct reference	Version	Vulnerable
net462	Yes	6.0.0	Yes
net8.0	No	8.0.0 - 8.0.5	Depends on installed runtime patch level
netstandard2.0	Yes	6.0.0	Yes

After

Target	Direct reference	Version	Vulnerable
net462	Yes	6.0.10	No
net8.0	Yes	8.0.5	No
netstandard2.0	Yes	6.0.10	No

Merge requirement checklist

• CONTRIBUTING guidelines followed (license requirements, nullable enabled, static analysis, etc.)

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 68.83%. Comparing base (71655ce) to head (a5268c2).
Report is 522 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2196      +/-   ##
==========================================
- Coverage   73.91%   68.83%   -5.08%     
==========================================
  Files         267      260       -7     
  Lines        9615    10830    +1215     
==========================================
+ Hits         7107     7455     +348     
- Misses       2508     3375     +867     

Flag	Coverage Δ
unittests-Exporter.Geneva	58.94% <ø> (?)
unittests-Exporter.Instana	71.24% <ø> (?)
unittests-Exporter.OneCollector	94.32% <ø> (?)
unittests-Exporter.Stackdriver	75.73% <ø> (?)
unittests-Extensions	88.63% <ø> (?)
unittests-Extensions.Enrichment	100.00% <ø> (?)
unittests-Instrumentation.AspNet	76.73% <ø> (?)
unittests-Instrumentation.ConfluentKafka	14.12% <ø> (?)
unittests-Instrumentation.EventCounters	76.36% <ø> (?)
unittests-Instrumentation.GrpcNetClient	79.61% <ø> (?)
unittests-Instrumentation.Hangfire	93.58% <ø> (?)
unittests-Instrumentation.Http	73.57% <ø> (?)
unittests-Instrumentation.Owin	85.97% <ø> (?)
unittests-Instrumentation.Process	100.00% <ø> (?)
unittests-Instrumentation.Quartz	78.94% <ø> (?)
unittests-Instrumentation.Runtime	97.53% <ø> (?)
unittests-Instrumentation.StackExchangeRedis	69.92% <ø> (?)
unittests-Instrumentation.Wcf	78.47% <ø> (?)
unittests-PersistentStorage	65.78% <ø> (?)
unittests-Resources.AWS	77.85% <ø> (?)
unittests-Resources.Azure	83.89% <ø> (?)
unittests-Resources.Container	72.41% <ø> (?)
unittests-Resources.Gcp	72.54% <ø> (?)
unittests-Resources.Host	73.94% <ø> (?)
unittests-Resources.OperatingSystem	77.20% <ø> (?)
unittests-Resources.Process	100.00% <ø> (?)
unittests-Resources.ProcessRuntime	77.08% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

see 343 files with indirect coverage changes