[Internal] Fixes: System.Net.Http by bumping to pinned 4.3.4 reference

[seesharprun]

I'm building the Microsoft.Azure.Cosmos library with .NET 9 which now shows warnings that your library has the following vulnerabilities in some projects (not all).

• Newtonsoft.Json versions < 13.0.1 (GHSA-5crp-9r3c-p9vr)
  • This is already handled in [Dependencies]: Removes direct reference for Newtonfoft package and add a target build. #4839
• System.Net.Http versions < 4.3.4 (GHSA-7jgj-8wvc-jh57)

I'm not sure if this is an allowed update.

[Pilchie]

@kirankumarkolli - can you take a look at this?

[kirankumarkolli]

On lates master branch its building with just 'Newtonsoft.Json' warning (which we are currently working on fixing it).
@seesharprun are you still seeing issues on latest master?

e:\src\v31\Microsoft.Azure.Cosmos.Encryption\src>dotnet build
Restore succeeded with 1 warning(s) in 1.3s
    e:\src\v31\Microsoft.Azure.Cosmos.Encryption\src\Microsoft.Azure.Cosmos.Encryption.csproj : warning NU1903: Package 'Newtonsoft.Json' 10.0.2 has a known high severity vulnerability, https://github.com/advisories/GHSA-5crp-9r3c-p9vr
You are using a preview version of .NET. See: https://aka.ms/dotnet-support-policy
  Microsoft.Azure.Cosmos.Encryption succeeded with 2 warning(s) (4.0s) → bin\Debug\netstandard2.0\Microsoft.Azure.Cosmos.Encryption.dll
    e:\src\v31\Microsoft.Azure.Cosmos.Encryption\src\Microsoft.Azure.Cosmos.Encryption.csproj : warning NU1903: Package 'Newtonsoft.Json' 10.0.2 has a known high severity vulnerability, https://github.com/advisories/GHSA-5crp-9r3c-p9vr
    CSC : warning SA0001: XML comment analysis is disabled due to project configuration (https://github.com/DotNetAnalyzers/StyleCopAnalyzers/blob/master/documentation/SA0001.md)

Build succeeded with 3 warning(s) in 7.2s

e:\src\v31\Microsoft.Azure.Cosmos.Encryption\src>dotnet --list-sdks
3.1.426 [C:\Program Files\dotnet\sdk]
6.0.321 [C:\Program Files\dotnet\sdk]
6.0.427 [C:\Program Files\dotnet\sdk]
7.0.120 [C:\Program Files\dotnet\sdk]
8.0.403 [C:\Program Files\dotnet\sdk]
9.0.100-rc.1.24452.12 [C:\Program Files\dotnet\sdk]

e:\src\v31\Microsoft.Azure.Cosmos.Encryption\src>

[kirankumarkolli]

System.Net.Http is a transitive dependency through Azure.Core.
Earlier we had older Azure.Core version as dependency resulting in above warning, now we upgraded to latest version and that fixed the issue.

[seesharprun]

My issue is now resolved. I'll close this request

[kirankumarkolli]

Thank you @seesharprun.