Released 2026-07-27
Bug Fixes
- Properly queues webhook notifications if Oauth2 authentication's "tokenUrl" request fails.
- [LTI 1.3; AGS] - Added a new setting option,
LearnerId_RegInLineItemto theLti13SubjectIdentifierFormatsetting. TheLearnerIdoption now defaults to use the most recently updated registration for all Assignment and Grades Services when multiple registrations exist for the same learner and course, andLearnerId_RegInLineItemcan be used to target an exact registration.
Improvements
- Dispatch registrations can now be filtered from notifications by using an empty string filter (i.e., the following regex:
/^$/). - Configurable "time-to-first-byte" response timeout for package and asset imports.
- Bumped Jackson Databind version for medium/high CVE issues CVE-2026-54512, CVE-2026-54513, and CVE-2026-54514.
- Extra validation to prevent "RegistrationChanged" subscriptions from being created when "StoreRuntimeDataAsLob" is disabled with "false". Such subscriptions do not work.
- [Java] - Minor version bump of HttpCore from "4.4.13" to "4.4.16".