[Repo Assist] eng: fix OpenTelemetry.Api GHSA-g94r-2vxg-569j by pinning >= 1.15.1 and updating GitHubActionsTestLogger to 3.0.3

[github-actions]

🤖 This is an automated pull request from Repo Assist, an AI assistant for this repository.

Fixes the pre-existing moderate vulnerability GHSA-g94r-2vxg-569j in OpenTelemetry.Api that was blocking dotnet restore and dotnet build in development environments (NU1902 — warning treated as error).

Root Cause

The vulnerability chain was:

NUnit3TestAdapter
  → Microsoft.Testing.Extensions.VSTestBridge
    → Microsoft.Testing.Extensions.Telemetry
      → Microsoft.ApplicationInsights (>= 2.23)
        → Azure.Monitor.OpenTelemetry.Exporter (>= 1.6)
          → OpenTelemetry.Extensions.Hosting (>= 1.14)
            → OpenTelemetry.Api 1.15.0  ← GHSA-g94r-2vxg-569j (moderate)

OpenTelemetry.Api 1.15.0 was the vulnerable version. 1.15.1+ is clean.

Changes

• paket.dependencies (Test group):
  • Pin GitHubActionsTestLogger from unpinned (resolved to 3.0.1) to 3.0.3 — the newer version also has no direct OpenTelemetry dependency
  • Add nuget OpenTelemetry.Api >= 1.15.1 lower bound to force paket's resolver to pick a patched version
• paket.lock:
  • GitHubActionsTestLogger bumped from 3.0.1 → 3.0.3
  • OpenTelemetry.Api bumped from 1.15.0 → 1.15.3 (latest patch)

No source code changes.

Test Status

• ✅ dotnet restore on test projects — succeeds with no NU1902 errors
• ✅ dotnet test tests/FSharp.Data.Core.Tests/ --filter "StringExtensions|HttpEncodings|ParseLink" — 37 passed, 0 failed
• i️ Full FAKE build was not run (pre-existing infrastructure constraint in this environment), but GitHub CI uses the FAKE build system which is unaffected by this change

Generated by 🌈 Repo Assist, see workflow run. Learn more.

To install this agentic workflow, run

gh aw add githubnext/agentics/workflows/repo-assist.md@96b9d4c39aa22359c0b38265927eadb31dcf4e2a

Generated by 🌈 Repo Assist, see workflow run. Learn more.

To install this agentic workflow, run

gh aw add githubnext/agentics/workflows/repo-assist.md@96b9d4c39aa22359c0b38265927eadb31dcf4e2a