fix vulnerabilities

pom.xml

@@ -20,7 +20,7 @@
   <groupId>org.opengroup.osdu</groupId>
   <artifactId>core-lib-azure</artifactId>
   <packaging>jar</packaging>
-  <version>0.26.0</version>
+  <version>0.26.0-vulfix</version>
   <name>core-lib-azure</name>
 
   <properties>
@@ -35,7 +35,7 @@
     <maven.surefire.version>2.22.2</maven.surefire.version>
     <azure.appinsights.version>2.6.4</azure.appinsights.version>
     <azure.appinsights.log4j.version>2.6.4</azure.appinsights.log4j.version>
-    <azure.spring.boot.version>3.4.0</azure.spring.boot.version>
+    <azure.spring.boot.version>3.14.0</azure.spring.boot.version>
     <lombok.version>1.18.28</lombok.version>
     <osdu.oscorecommon.version>0.26.0</osdu.oscorecommon.version>
     <azure-mgmt-eventgrid.version>1.0.0-beta-3</azure-mgmt-eventgrid.version>
@@ -48,7 +48,7 @@
     <redisson.version>3.15.3</redisson.version>
     <azure-storage-file-datalake.version>12.13.0</azure-storage-file-datalake.version>
     <azure-storage-blob.version>12.20.0</azure-storage-blob.version>
-    <azure-core.version>1.35.0</azure-core.version>
+    <azure-core.version>1.49.1</azure-core.version>
     <guava.version>32.1.1-jre</guava.version>
   </properties>
 
@@ -155,6 +155,7 @@
     <dependency>
       <groupId>com.azure</groupId>
       <artifactId>azure-identity</artifactId>
+      <version>1.13.0</version>
       <exclusions>
         <exclusion>
           <groupId>net.minidev</groupId>
@@ -167,6 +168,12 @@
       </exclusions>
     </dependency>
 
+     <dependency>
+      <groupId>com.microsoft.azure</groupId>
+      <artifactId>msal4j</artifactId>
+      <version>1.15.1</version>
+    </dependency>
+
     <dependency>
       <groupId>com.azure</groupId>
       <artifactId>azure-core</artifactId>