From 000a9d94eb9b1e8f9a07c9f17cf74babd3d27d75 Mon Sep 17 00:00:00 2001
From: sgrampone <sgrampone@genexus.com>
Date: Tue, 14 Oct 2025 16:20:41 -0300
Subject: [PATCH 1/5] Bump netty framework

---
 gxawsserverless/pom.xml         | 2 +-
 gxazureserverless/pom.xml       | 2 +-
 gxcloudstorage-awss3-v1/pom.xml | 2 +-
 pom.xml                         | 4 ++--
 4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/gxawsserverless/pom.xml b/gxawsserverless/pom.xml
index de7fc9888..0dc52856d 100644
--- a/gxawsserverless/pom.xml
+++ b/gxawsserverless/pom.xml
@@ -52,7 +52,7 @@
         <dependency>
             <groupId>software.amazon.awssdk</groupId>
             <artifactId>lambda</artifactId>
-            <version>2.21.28</version>
+            <version>${software.awssdk.version}</version>
         </dependency>
 
         <dependency>
diff --git a/gxazureserverless/pom.xml b/gxazureserverless/pom.xml
index 6fa7fef36..19fc38b10 100644
--- a/gxazureserverless/pom.xml
+++ b/gxazureserverless/pom.xml
@@ -30,7 +30,7 @@
         <dependency>
             <groupId>com.microsoft.azure</groupId>
             <artifactId>azure-functions-maven-plugin</artifactId>
-            <version>1.35.0</version>
+            <version>1.39.0</version>
         </dependency>
 
         <dependency>
diff --git a/gxcloudstorage-awss3-v1/pom.xml b/gxcloudstorage-awss3-v1/pom.xml
index 4235dfb1c..f141c3991 100644
--- a/gxcloudstorage-awss3-v1/pom.xml
+++ b/gxcloudstorage-awss3-v1/pom.xml
@@ -28,7 +28,7 @@
         <dependency>
             <groupId>com.amazonaws</groupId>
             <artifactId>aws-java-sdk-s3</artifactId>
-            <version>1.12.587</version>
+            <version>1.12.792</version>
         </dependency>
     </dependencies>
 </project>
\ No newline at end of file
diff --git a/pom.xml b/pom.xml
index 356571e70..d0733b2d6 100644
--- a/pom.xml
+++ b/pom.xml
@@ -24,8 +24,8 @@
 		<poi.version>5.2.2</poi.version>
 		<jackson.version>2.14.1</jackson.version>
 		<junit.version>4.13.2</junit.version>
-		<software.awssdk.version>2.21.27</software.awssdk.version>
-		<software.azure.cosmos.version>4.42.0</software.azure.cosmos.version>
+		<software.awssdk.version>2.35.6</software.awssdk.version>
+		<software.azure.cosmos.version>4.74.0</software.azure.cosmos.version>
 		<log4j.version>2.21.1</log4j.version>
         <io.opentelemetry.version>1.28.0</io.opentelemetry.version>
         <org.bouncycastle.version>1.78.1</org.bouncycastle.version>

From a61583f307286adcc33878b7ee8172eb9a494c28 Mon Sep 17 00:00:00 2001
From: sgrampone <sgrampone@genexus.com>
Date: Thu, 16 Oct 2025 16:32:30 -0300
Subject: [PATCH 2/5] Delete azure-functions-maven-plugin from pom and clasify
 mockito to test scope

---
 gxazureserverless/pom.xml | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/gxazureserverless/pom.xml b/gxazureserverless/pom.xml
index 19fc38b10..1252999c6 100644
--- a/gxazureserverless/pom.xml
+++ b/gxazureserverless/pom.xml
@@ -27,11 +27,6 @@
             <version>3.1.0</version>
         </dependency>
 
-        <dependency>
-            <groupId>com.microsoft.azure</groupId>
-            <artifactId>azure-functions-maven-plugin</artifactId>
-            <version>1.39.0</version>
-        </dependency>
 
         <dependency>
             <groupId>io.cloudevents</groupId>
@@ -61,6 +56,7 @@
             <groupId>org.mockito</groupId>
             <artifactId>mockito-core</artifactId>
             <version>5.12.0</version>
+            <scope>test</scope>
         </dependency>
 
         <dependency>

From 08e443b7696ce522011b153ee5fd9fc70046b4ca Mon Sep 17 00:00:00 2001
From: sgrampone <sgrampone@genexus.com>
Date: Thu, 16 Oct 2025 16:41:18 -0300
Subject: [PATCH 3/5] Return azure-functions-maven-plugin due to build errors.

---
 gxazureserverless/pom.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/gxazureserverless/pom.xml b/gxazureserverless/pom.xml
index 1252999c6..f439efc3e 100644
--- a/gxazureserverless/pom.xml
+++ b/gxazureserverless/pom.xml
@@ -27,6 +27,11 @@
             <version>3.1.0</version>
         </dependency>
 
+        <dependency>
+            <groupId>com.microsoft.azure</groupId>
+            <artifactId>azure-functions-maven-plugin</artifactId>
+            <version>1.39.0</version>
+        </dependency>
 
         <dependency>
             <groupId>io.cloudevents</groupId>

From e59ae3d7c3574305727b53cbfac3fb13596eb50d Mon Sep 17 00:00:00 2001
From: sgrampone <sgrampone@genexus.com>
Date: Fri, 17 Oct 2025 10:51:13 -0300
Subject: [PATCH 4/5] Remove azure-functions-maven-plugin and unused reference

---
 gxazureserverless/pom.xml                                   | 6 ------
 .../serverless/helpers/ServiceBusBatchMessageProcessor.java | 1 -
 2 files changed, 7 deletions(-)

diff --git a/gxazureserverless/pom.xml b/gxazureserverless/pom.xml
index f439efc3e..59c940b02 100644
--- a/gxazureserverless/pom.xml
+++ b/gxazureserverless/pom.xml
@@ -27,12 +27,6 @@
             <version>3.1.0</version>
         </dependency>
 
-        <dependency>
-            <groupId>com.microsoft.azure</groupId>
-            <artifactId>azure-functions-maven-plugin</artifactId>
-            <version>1.39.0</version>
-        </dependency>
-
         <dependency>
             <groupId>io.cloudevents</groupId>
             <artifactId>cloudevents-api</artifactId>
diff --git a/gxazureserverless/src/main/java/com/genexus/cloud/serverless/helpers/ServiceBusBatchMessageProcessor.java b/gxazureserverless/src/main/java/com/genexus/cloud/serverless/helpers/ServiceBusBatchMessageProcessor.java
index 8bf2971e4..449776db7 100644
--- a/gxazureserverless/src/main/java/com/genexus/cloud/serverless/helpers/ServiceBusBatchMessageProcessor.java
+++ b/gxazureserverless/src/main/java/com/genexus/cloud/serverless/helpers/ServiceBusBatchMessageProcessor.java
@@ -5,7 +5,6 @@
 import com.genexus.cloud.serverless.model.EventMessage;
 import com.genexus.cloud.serverless.model.EventMessages;
 import com.microsoft.azure.functions.ExecutionContext;
-import com.sun.jna.platform.win32.Guid;
 
 import java.time.Instant;
 import java.util.Date;

From 6f9051782a3f8f80ba3f3b31e0102ed645532665 Mon Sep 17 00:00:00 2001
From: sgrampone <sgrampone@genexus.com>
Date: Fri, 17 Oct 2025 13:33:56 -0300
Subject: [PATCH 5/5] Overritie transitive dependency azure-core-http-netty to
 version 1.16.2

---
 gxcosmosdb/pom.xml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/gxcosmosdb/pom.xml b/gxcosmosdb/pom.xml
index ef4b9221c..cfec42ac0 100644
--- a/gxcosmosdb/pom.xml
+++ b/gxcosmosdb/pom.xml
@@ -27,6 +27,14 @@
             <groupId>com.azure</groupId>
             <artifactId>azure-cosmos</artifactId>
         </dependency>
+
+        <!-- overrite from azure-cosmos due to transitive CVEs -->
+        <dependency>
+            <groupId>com.azure</groupId>
+            <artifactId>azure-core-http-netty</artifactId>
+            <version>1.16.2</version>
+        </dependency>
+
         <dependency>
 			<groupId>${project.groupId}</groupId>
 			<artifactId>gxclassR</artifactId>