build(deps): update azure-cosmos requirement from ~=4.7 to ~=4.8 in /api in the dependencies group

[dependabot]

Updates the requirements on azure-cosmos to permit the latest version.
Updates azure-cosmos to 4.8.0

Release notes

Sourced from azure-cosmos's releases.

azure-cosmos_4.8.0

4.8.0 (2024-11-12)

This version and all future versions will support Python 3.13.

Features Added

• Added response headers directly to SDK item point operation responses. See PR 35791.
• SDK will now retry all ServiceRequestErrors (failing outgoing requests) before failing. Default number of retries is 3. See PR 36514.
• Added Retry Policy for Container Recreate in the Python SDK. See PR 36043
• Added option to disable write payload on writes. See PR 37365
• Added get feed ranges API. See PR 37687
• Added feed range support in query_items_change_feed. See PR 37687
• Added provisional helper APIs for managing session tokens. See PR 36971
• Added ability to get feed range for a partition key. See PR 36971

Breaking Changes

• Item-level point operations will now return CosmosDict and CosmosList response types. Responses will still be able to be used directly as previously, but will now have access to their response headers without need for a response hook. See PR 35791. For more information on this, see our README section here.

Bugs Fixed

• Consolidated Container Properties Cache to be in the Client to cache partition key definition and container rid to avoid unnecessary container reads. See PR 35731.
• Fixed bug with client hangs when running into WriteForbidden exceptions. See PR 36514.
• Added retry handling logic for DatabaseAccountNotFound exceptions. See PR 36514.
• Fixed SDK regex validation that would not allow for item ids to be longer than 255 characters. See PR 36569.
• Fixed issue where 'NoneType' object has no attribute error was raised when a session retry happened during a query. See PR 37578.
• Fixed issue where passing subpartition partition key values as a tuple in a query would raise an error. See PR 38136
• Batch requests will now be properly considered as Write operation. See PR 38365.

Other Changes

• Getting offer thoughput when it has not been defined in a container will now give a 404/10004 instead of just a 404. See PR 36043
• Incomplete Partition Key Extractions in documents for Subpartitioning now gives 400/1001 instead of just a 400. See PR 36043
• SDK will now make database account calls every 5 minutes to refresh location cache. See PR 36514.

Commits

• 37a458b Increment package version after release of azure-servicebus (#38494)
• f4d4abd Increment package version after release of azure-eventhub (#38495)
• 35da3dd Increment package version after release of azure-ai-translation-document (#38...
• 65edd73 Fix: Allow tuples to be used for hierarchical partition key values. (#38136)
• 38421d9 [ServiceBus] Update CHANGELOG.md to include port fix (#38489)
• 095c892 Make "prompts" as Python extras and format string input properly (#38471)
• d3a388b Fix Breaking Import That Requires Extra (#38486)
• c4e1a9d = needed (#38488)
• fb67611 [ServiceBus] add batch size error to CHANGELOG.md (#38485)
• 3b1fa56 [Storage] Changelogs for STG 96 GA (#38438)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarcloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud