Vulnerability Fixing and POM Reorganization

Fix: Resolve vulnerabilities in pom.xml

This PR addresses vulnerabilities in multiple libraries, including critical and high-severity issues. Below is the delta of vulnerabilities that were present in the previous scan but have been resolved in the current state.

Resolved Vulnerabilities:

1. com.azure:azure-identity

   • Vulnerability: CVE-2024-35255
     • Severity: Medium
     • Issue: Azure Identity Libraries Elevation of Privilege Vulnerability.
     • Resolution: Upgraded from 1.11.2 to 1.12.2.

2. com.nimbusds:nimbus-jose-jwt

   • Vulnerability: CVE-2023-52428
     • Severity: High
     • Issue: Large JWE p2c header value causes Denial of Service.
     • Resolution: Upgraded from 9.30.2 to 9.37.2.

3. org.asynchttpclient:async-http-client

   • Vulnerability: CVE-2024-53990
     • Severity: Critical
     • Issue: CookieStore replaces explicitly defined cookies, leading to potential security issues.
     • Resolution: Upgraded from 2.12.1 to 2.12.4.

4. io.lettuce:lettuce-core

   • Vulnerability: GHSA-q4h9-7rxj-7gx2
     • Severity: Medium
     • Issue: Netty vulnerability included in Redis Lettuce.
     • Resolution: Upgraded from 6.3.2.RELEASE to 6.5.1.RELEASE.

---

By upgrading these libraries to their secure versions, this PR significantly improves the project's security posture by mitigating critical and high-risk vulnerabilities. Please review and approve.

provider/schema-azure/pom.xml

@@ -31,6 +31,9 @@
 
 	<properties>
 		<core-lib-azure.version>2.0.2</core-lib-azure.version>
+    <jakarta.json.version>2.1.3</jakarta.json.version>
+    <jakarta.json.glassfish.version>2.0.1</jakarta.json.glassfish.version>
+    <parsson.version>1.1.7</parsson.version>
 		<!-- Test Dependencies -->
 		<cucumber.version>7.20.1</cucumber.version>
     <!-- Plugin Versions -->
@@ -102,12 +105,34 @@
       <artifactId>spring-cloud-azure-starter-active-directory</artifactId>
     </dependency>
 
+    <!-- Project Dependencies -->
+    <dependency>
+        <groupId>jakarta.json</groupId>
+        <artifactId>jakarta.json-api</artifactId>
+        <version>${jakarta.json.version}</version>
+    </dependency>
+    <dependency>
+        <groupId>org.glassfish</groupId>
+        <artifactId>jakarta.json</artifactId>
+        <version>${jakarta.json.glassfish.version}</version>
+    </dependency>
+    <dependency>
+        <groupId>org.eclipse.parsson</groupId>
+        <artifactId>parsson</artifactId>
+        <version>${parsson.version}</version>
+    </dependency>
+
 		<!-- Test Dependencies -->
 		<dependency>
 			<groupId>org.springframework.boot</groupId>
 			<artifactId>spring-boot-starter-test</artifactId>
 			<scope>test</scope>
 		</dependency>
+    <dependency>
+			<groupId>org.junit.vintage</groupId>
+			<artifactId>junit-vintage-engine</artifactId>
+			<scope>test</scope>
+		</dependency>
 		<dependency>
 			<groupId>io.cucumber</groupId>
 			<artifactId>cucumber-java</artifactId>
@@ -149,6 +174,7 @@
 				<artifactId>jacoco-maven-plugin</artifactId>
 				<version>${jacoco-plugin.version}</version>
 				<configuration>
+					<outputDirectory>${project.reporting.outputDirectory}/jacoco</outputDirectory>
 					<excludes>
 						<exclude>**/*org/opengroup/osdu/schema/azure/definitions/**</exclude>
 						<exclude>**/*org/opengroup/osdu/schema/azure/di/**Config.class</exclude>