Upgrade azure-cosmos library in Well Delivery
There is a vulnerability detected in our well delivery code. The currently used Azure Cosmosdb lib is azure-cosmos 4.0.0-preview.1 that has a dependency of commons-text 1.6 that is vulnerable. upgrade it to azure-cosmos 4.39.0 that does not have vulnerability.
2023-01-17 16:44:06.718 INFO 36720 --- [ XNIO-1 task-1] c.a.c.i.RxDocumentClientImpl : Initializing DocumentClient [1] with serviceEndpoint [https://osdu-r3mvp-dp2qa-fwu4-db.documents.azure.com:443/], connectionPolicy [ConnectionPolicy{httpNetworkRequestTimeout=PT1M, tcpNetworkRequestTimeout=PT5S, connectionMode=DIRECT, maxConnectionPoolSize=1000, idleHttpConnectionTimeout=PT1M, idleTcpConnectionTimeout=PT0S, userAgentSuffix='', throttlingRetryOptions=RetryOptions{maxRetryAttemptsOnThrottledRequests=9, maxRetryWaitTime=PT30S}, endpointDiscoveryEnabled=true, preferredRegions=null, multipleWriteRegionsEnabled=true, proxyType=null, inetSocketProxyAddress=null, readRequestsFallbackEnabled=true, connectTimeout=PT5S, idleTcpEndpointTimeout=PT1H, maxConnectionsPerEndpoint=130, maxRequestsPerConnection=30, tcpConnectionEndpointRediscoveryEnabled=true}], consistencyLevel [Eventual], directModeProtocol [Tcp]
2023-01-17 16:44:06.911 INFO 36720 --- [smos-parallel-1] c.a.c.i.RxDocumentClientImpl : Getting database account endpoint from https://osdu-r3mvp-dp2qa-fwu4-db.documents.azure.com:443/
2023-01-17 16:44:06.957 ERROR 36720 --- [smos-parallel-1] reactor.core.scheduler.Schedulers : Scheduler worker in group main failed with an uncaught exception
java.lang.NoSuchMethodError: reactor/util/retry/Retry.withThrowable(Ljava/util/function/Function;)Lreactor/util/retry/Retry; (loaded from file:/C:/Users/ygu/.m2/repository/io/projectreactor/reactor-core/3.3.4.RELEASE/reactor-core-3.3.4.RELEASE.jar by jdk.internal.loader.ClassLoadersAppClassLoader@9a7f8ec) called from class com.azure.cosmos.implementation.BackoffRetryUtility (loaded from file:/C:/Users/ygu/.m2/repository/com/azure/azure-cosmos/4.39.0/azure-cosmos-4.39.0.jar by jdk.internal.loader.ClassLoaders
AppClassLoader@9a7f8ec).
at com.azure.cosmos.implementation.BackoffRetryUtility.executeRetry(BackoffRetryUtility.java:40) ~[azure-cosmos-4.39.0.jar:4.39.0]
at com.azure.cosmos.implementation.RxGatewayStoreModel.invokeAsync(RxGatewayStoreModel.java:479) ~[azure-cosmos-4.39.0.jar:4.39.0]
at com.azure.cosmos.implementation.RxGatewayStoreModel.processMessage(RxGatewayStoreModel.java:484) ~[azure-cosmos-4.39.0.jar:4.39.0]
at com.azure.cosmos.implementation.RxDocumentClientImpl.lambda$getDatabaseAccountFromEndpoint$150(RxDocumentClientImpl.java:4103) ~[azure-cosmos-4.39.0.jar:4.39.0]
at reactor.core.publisher.FluxFlatMap.trySubscribeScalarMap(FluxFlatMap.java:151) ~[reactor-core-3.3.4.RELEASE.jar:3.3.4.RELEASE]
at reactor.core.publisher.MonoFlatMap.subscribeOrReturn(MonoFlatMap.java:53) ~[reactor-core-3.3.4.RELEASE.jar:3.3.4.RELEASE]
at reactor.core.publisher.FluxFromMonoOperator.subscribe(FluxFromMonoOperator.java:66) ~[reactor-core-3.3.4.RELEASE.jar:3.3.4.RELEASE]
at reactor.core.publisher.FluxDefer.subscribe(FluxDefer.java:54) ~[reactor-core-3.3.4.RELEASE.jar:3.3.4.RELEASE]
at reactor.core.publisher.InternalMonoOperator.subscribe(InternalMonoOperator.java:55) ~[reactor-core-3.3.4.RELEASE.jar:3.3.4.RELEASE]
at reactor.core.publisher.MonoFlatMap$FlatMapMain.onNext(MonoFlatMap.java:150) ~[reactor-core-3.3.4.RELEASE.jar:3.3.4.RELEASE]
at reactor.core.publisher.MonoDelay$MonoDelayRunnable.run(MonoDelay.java:117) ~[reactor-core-3.3.4.RELEASE.jar:3.3.4.RELEASE]
at reactor.core.scheduler.SchedulerTask.call(SchedulerTask.java:68) ~[reactor-core-3.3.4.RELEASE.jar:3.3.4.RELEASE]
at reactor.core.scheduler.SchedulerTask.call(SchedulerTask.java:28) ~[reactor-core-3.3.4.RELEASE.jar:3.3.4.RELEASE]
at java.base/java.util.concurrent.FutureTask.run$$$capture(FutureTask.java:264) ~[na:na]
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java) ~[na:na]
at java.base/java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:304) ~[na:na]
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) ~[na:na]
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) ~[na:na]
at java.base/java.lang.Thread.run(Thread.java:839) ~[na:na]