[Kielek]

This fix addresses a ANT-2026-PQEVM980 finding from Anthropic's OSS Scanner.
Project enrollment: anthropics/oss-scanner#117.

Changes

Returned LogRecords retain completed log data, including state and exceptions,
until the records are reused. Oversized attribute and scope lists also remain
reachable after their reusable-storage references are dropped.

Reset the payload when either pool returns a record, keeping the existing limits
on reusable buffers and preserving data while a shared-pool reference remains.
Add regression coverage for both pools and independent attribute/scope limits.
This is an ordinary bug fix with no public API changes.

Validation: all seven focused Release/net10.0 cases failed before the fix and
pass after it. The final regressions pass on net10.0, net9.0, net8.0 and net472
(28/28). The full SDK Release test project passes (6,776 passed, 17 skipped), and
the Release solution build passes with zero warnings or errors.

Changed-file formatting checks pass. The full solution formatting command
reports design-time API tracking diagnostics on unchanged APIs and cannot load
some framework names containing whitespace; its exit code is 2. The repository
sanity check passes on an LF-normalized copy of the exact tracked working files;
the Windows checkout itself fails on existing CRLF files and build artifacts.
The SDK changelog entry is prepared and awaits this fix's actual PR URL.

Merge requirement checklist

• CONTRIBUTING guidelines followed (license requirements, successful build/tests, etc.)
• Tests added/updated
• CHANGELOG.md file(s) updated for non-trivial changes
• Changes in public API reviewed (if applicable)
• AI usage disclosure:
  • No AI used
  • AI-assisted
  • Bulk AI-generated
• I have the experience and knowledge necessary to understand, review, and validate all content in this PR¹

Note

This PR description was generated with OpenAI Codex.

Footnotes

1. Yes, I can answer maintainer questions about the content of this PR without using AI. ↩

[opentelemetry-pr-dashboard]

Pull request dashboard status

Merged · refreshed 2026-10-19 11:49 UTC

Status above doesn't look right?

• Anything look wrong? Report it with what you expected; it helps us improve the dashboard.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.17%. Comparing base (d34ce49) to head (8862e28).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #7978      +/-   ##
==========================================
+ Coverage   90.14%   90.17%   +0.02%     
==========================================
  Files         365      365              
  Lines       21428    21431       +3     
  Branches     3939     3939              
==========================================
+ Hits        19316    19325       +9     
+ Misses       1532     1525       -7     
- Partials      580      581       +1     

Flag	Coverage Δ
unittests-Project-Experimental	90.18% <100.00%> (+<0.01%)	⬆️
unittests-Project-Stable	90.20% <100.00%> (+0.02%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
src/OpenTelemetry/Logs/Pool/LogRecordPoolHelper.cs	100.00% <100.00%> (ø)

... and 5 files with indirect coverage changes