github Azure/azure-sdk-for-java com.azure+azure-cosmos_4.79.0

latest releases: com.azure.cosmos.kafka+azure-cosmos-kafka-connect_2.9.0, com.azure+azure-cosmos-test_1.0.0-beta.18, com.azure.cosmos.spark+azure-cosmos-spark_4-0_2-13_4.46.0...
7 hours ago

4.79.0 (2026-03-27)

Features Added

  • Added support for N-Region synchronous commit feature - See PR 47757
  • Added support for Query Advisor feature - See 48160
  • Added CosmosFullTextScoreScope enum and setFullTextScoreScope() on CosmosQueryRequestOptions for controlling BM25 statistics scope in hybrid search queries. Supports LOCAL (scoped to target partitions) and GLOBAL (default, all partitions) scopes. See PR 48431

Bugs Fixed

  • Fixed Remote Code Execution (RCE) vulnerability (CWE-502) by replacing Java deserialization with JSON-based serialization in CosmosClientMetadataCachesSnapshot, AsyncCache, and DocumentCollection. The metadata cache snapshot now uses Jackson for serialization/deserialization, eliminating the entire class of Java deserialization attacks. - PR 47971
  • Fixed NullPointerException in DocumentQueryExecutionContextFactory.tryCacheQueryPlan when executing hybrid search queries with a partition key filter. See PR 48431
  • Fixed ConcurrentModificationException in hybrid search component query execution caused by concurrent access to shared mutable state. See PR 48431
  • Fixed availability strategy for Gateway V2 (thin client) by ensuring RegionalRoutingContext identity is based only on the immutable gateway endpoint. - See PR 48432
  • Fixed an issue where replaceItem bypassed the customItemSerializer, serialising POJOs with the SDK's internal ObjectMapper instead of the user-configured one. - See PR 48529
  • Fixed ClassCastException (ArrayNode cannot be cast to ObjectNode) when executing SELECT VALUE ... GROUP BY queries. See - PR 48507

Other Changes

  • Promoted the following @Beta APIs to GA: CosmosContainerProperties.getFullTextPolicy()/setFullTextPolicy(), IndexingPolicy.getCosmosFullTextIndexes()/setCosmosFullTextIndexes(). - See PR 48538
  • Added appendUserAgentSuffix method to AsyncDocumentClient to allow downstream libraries to append to the user agent after client construction. - See PR 48505
  • Added aggressive HTTP timeout policies for document operations routed to Gateway V2. - PR 47879
  • Added a default connect timeout of 5s for Gateway V2 (thin client) data-plane endpoints. - See PR 48174
  • Added system property COSMOS.CONNECTION_ACQUIRE_TIMEOUT_IN_MS and environment variable COSMOS_CONNECTION_ACQUIRE_TIMEOUT_IN_MS to allow overriding the gateway connection acquire timeout in milliseconds (default 45000ms). Minimum accepted value is 500ms. Replaces the previous _IN_SECONDS variants. - See PR 48580
  • Changed system property for thin client connection timeout from COSMOS.THINCLIENT_CONNECTION_TIMEOUT_IN_SECONDS to COSMOS.THINCLIENT_CONNECTION_TIMEOUT_IN_MS (default 5000ms, minimum 500ms). - See PR 48580

Don't miss a new azure-sdk-for-java release

NewReleases is sending notifications on new releases.