From 34641886c8176c19a6bc580d9b0364d536ba83f9 Mon Sep 17 00:00:00 2001
From: briandunnington <briandunnington@gmail.com>
Date: Fri, 16 Aug 2024 08:49:32 -0700
Subject: [PATCH] update CosmosDB's reference to Microsoft.Extensions.Azure to
 v1.7.4 to fix CVE-2024-35255 (#905)

* Update WebJobs.Extensions.CosmosDB.csproj

* Update common.props
---
 build/common.props                                            | 2 +-
 .../WebJobs.Extensions.CosmosDB.csproj                        | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/build/common.props b/build/common.props
index 6f789453..6dc8849e 100644
--- a/build/common.props
+++ b/build/common.props
@@ -3,7 +3,7 @@
     <!-- Extensions can have independent versions and only increment when released -->
     <Version>3.0.0$(VersionSuffix)</Version>
     <ExtensionsVersion>5.0.0$(VersionSuffix)</ExtensionsVersion> <!-- WebJobs.Extensions -->
-    <CosmosDBVersion>4.7.0$(VersionSuffix)</CosmosDBVersion>
+    <CosmosDBVersion>4.8.0$(VersionSuffix)</CosmosDBVersion>
     <HttpVersion>3.2.0$(VersionSuffix)</HttpVersion>
     <MobileAppsVersion>3.0.0$(VersionSuffix)</MobileAppsVersion>
     <SendGridVersion>3.0.3$(VersionSuffix)</SendGridVersion>
diff --git a/src/WebJobs.Extensions.CosmosDB/WebJobs.Extensions.CosmosDB.csproj b/src/WebJobs.Extensions.CosmosDB/WebJobs.Extensions.CosmosDB.csproj
index ec18eff0..6862412d 100644
--- a/src/WebJobs.Extensions.CosmosDB/WebJobs.Extensions.CosmosDB.csproj
+++ b/src/WebJobs.Extensions.CosmosDB/WebJobs.Extensions.CosmosDB.csproj
@@ -22,9 +22,9 @@
     <PackageReference Include="Microsoft.Azure.Cosmos" Version="3.41.0" />
     <PackageReference Include="Microsoft.Azure.WebJobs" Version="3.0.37" />
     <PackageReference Include="Microsoft.CSharp" Version="4.5.0" />
-    <PackageReference Include="Microsoft.Extensions.Azure" Version="1.7.2" />
+    <PackageReference Include="Microsoft.Extensions.Azure" Version="1.7.4" />
   </ItemGroup>
   <ItemGroup>
     <PackageReference Update="StyleCop.Analyzers" Version="1.1.118" />
   </ItemGroup>
-</Project>
\ No newline at end of file
+</Project>