Remediate guava dependency vulnerability and cleanup 'documentdb-bulkexecutor'

Change details

• excluded unused dependency documentdb-bulkexecutor to remove guava:24.1.1-jre version with vulnerabilities

Changes in:

• GCP
• Azure
• AWS
• IBM

changed milestone to %M21 - Release 0.24

added Azure Vulnerability Management labels

assigned to @thulasi_dass

added 1 commit

• 6103d74c - Update NOTICE

Compare with previous version

marked this merge request as ready

Hello @Srinivasan_Narayanan - Kindly review and approve the vulnerability remediation MR (Azure only changes).

• Pipeline all jobs are passed
• Verified the remediation by mvn dependency:tree -Dincludes=:guava:::
• Trivy container_scanning job guava dependency is not listed in the vulnerability list

cc: @chad @nursheikh @lucynliu

Thanks.

approved this merge request

Hello Team, Merging security vulnerability fixes with passing pipelines as per policy.

Thanks @chad for the approval.

merged

mentioned in commit 6026f214