Dependency Approvals

Runtime dependency additions and material version changes need a short approval record before merge.

2026-06-21

• markdown==3.8.2
• Purpose: security update from markdown==3.7 to a version patched for CVE-2025-69534.
• License: BSD-3-Clause.
• Approval: security maintenance update for the existing dependency.

2026-06-30

• PyJWT==2.10.1
• Purpose: sign Salesforce JWT bearer assertions for sandbox and production target auth.
• License: MIT.
• Approval: Albert Aniszczyk, for the LTI Salesforce JWT auth migration.
• google-auth==2.40.3
• Purpose: verify Google ID tokens protecting authenticated Cloud Run health-check smoke endpoints.
• License: Apache-2.0.
• Approval: Albert Aniszczyk, for the LTI Salesforce JWT auth migration.