Released 2025-07-25
Bug Fixes
- Resolves "invalid tenant" error when an LTI 1.3 Tool requests Engine's /token endpoint from a system-level content connector. The error only occurs in Engine environments with a deactivated "default" tenant.
- [.NET] - Fixes initialization error when launching with PlayerLaunchType set to "NEW_WINDOW" while popups are blocked.
Improvements
- [Java] - Bump Apache Commons FileUpload from version 1.5 to 1.6.0 to resolve CVE-2025-48976.
- [Java] - Bumps the esapi dependency from 2.5.3.1 to 2.7.0.0 for CVE-2025-5878.
- [Java] - Bumps commons-compress from 1.26.0 to 1.27.1 and pinned commons-lang3 for CVE.
Dispatch Improvements
[LTI] - More robust logging for line item creation failures.
- [LTI] - Include a more detailed description of the cause of an error in the alert to the user when an LTI 1.1 tool consumer (platform) returns an error response to a basic outcomes request from the tool provider (external tool).