Bump the dependencies group with 3 updates

[dependabot]

Bumps the dependencies group with 3 updates: com.azure:azure-cosmos, software.amazon.awssdk:bom and com.google.cloud:alloydb-jdbc-connector.

Updates com.azure:azure-cosmos from 4.74.0 to 4.75.0

Release notes

Sourced from com.azure:azure-cosmos's releases.

azure-cosmos_4.75.0

4.75.0 (2025-10-21)

Features Added

• Enabled Cosmos(Async)Client to support per-partition automatic failover dynamically without the need to restart the application. - See PR 46477
• AAD Auth: Added a fallback mechanism for AAD audience scope. - PR 46637

Bugs Fixed

• Fixed issue with change feed processor logs not showing exceptions. - 46918
• Fixed an issue where Per-Partition Circuit Breaker was hitting NullPointerException transiently in e2e timeout scenarios. - PR 46968
• Allow lease in ChangeFeedProcessor to be rebalanced if changes for associated partition have not been processed for a while. - PR 47038

Other Changes

• Changed to use PartitionKeyRangeCache to get partition key range during startup and split handling. - 46700
• Changed to use lower casing http header names for gateway response. - 46736
• Improved resilience around several completion events for an ssl handshake. - PR 46734
• Changed timestamp format to be consistent in leases for CFP. - PR 46784
• Added MetadataThrottlingRetryPolicy for PartitionKeyRange RequestRateTooLargeException handling. - PR 46823
• Ensure effective DirectConnectionConfig#setNetworkRequestTimeout is set to at least 5 seconds. - PR 47024
• Wrap JSON parsing exceptions as CosmosException to provide better context. - PR 47040

Commits

• 751a37d Cosmos 2025-10-21 release (#47052)
• 17596e7 Remove extraneous unconditional bicep invocation (#47061)
• ec4360b 46434 two error log msgs (#46934)
• 132ab31 Increment package versions for deviceprovisioningservices releases (#47054)
• ee11d9c Dynamic enablement of Per-Partition Automatic Failover (#46477)
• f85f9b0 [AutoPR azure-resourcemanager-deviceprovisioningservices]-generated-from-SDK ...
• cec3a05 Wrap JSON Parsing Errors as CosmosException. (#47040)
• f95f724 Defensive Renew Lease (#47038)
• af9b2e1 [AutoPR azure-resourcemanager-mongocluster]-generated-from-SDK Generation - J...
• 1817ee6 update scripts (#47050)
• Additional commits viewable in compare view

Updates software.amazon.awssdk:bom from 2.35.0 to 2.36.2

Updates com.google.cloud:alloydb-jdbc-connector from 1.2.6 to 1.2.7

Release notes

Sourced from com.google.cloud:alloydb-jdbc-connector's releases.

v1.2.7

1.2.7 (2025-10-21)

Dependencies

• Update dependency com.google.errorprone:error_prone_core to v2.41.0 (#612) (8ea3ade)
• Update dependency com.google.errorprone:error_prone_core to v2.42.0 (#676) (1407d97)
• Update Non-major dependencies (#674) (71309fb)

Changelog

Sourced from com.google.cloud:alloydb-jdbc-connector's changelog.

1.2.7 (2025-10-21)

Dependencies

• Update dependency com.google.errorprone:error_prone_core to v2.41.0 (#612) (8ea3ade)
• Update dependency com.google.errorprone:error_prone_core to v2.42.0 (#676) (1407d97)
• Update Non-major dependencies (#674) (71309fb)

Commits

• 5240ba9 chore(main): release 1.2.7 (#673)
• 4fbc789 chore(deps): Update dependencies for github (#665)
• 9ab591f chore: remove error prone rule (#678)
• 1407d97 deps: Update dependency com.google.errorprone:error_prone_core to v2.42.0 (#676)
• 3100589 chore(deps): Update github/codeql-action action to v4 (#677)
• 71309fb deps: Update Non-major dependencies (#674)
• 8ea3ade deps: Update dependency com.google.errorprone:error_prone_core to v2.41.0 (#612)
• 0b4a8c5 chore(main): release 1.2.7-SNAPSHOT (#671)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions