@boxyhq/saml-jackson 26.2.0 missing google-auth-library dependency

[wardva]

Summary

@boxyhq/saml-jackson@26.2.0 requires google-auth-library at runtime for Google Workspace directory sync, but does not declare it in package.json dependencies.

Reproduction

1. Install @boxyhq/saml-jackson@26.2.0 with pnpm (strict dependency isolation).
2. Import the package (e.g. await jackson(opts) or any code path that loads directory sync).

Error

Cannot find module 'google-auth-library'
Require stack:
- .../@boxyhq/saml-jackson/dist/directory-sync/non-scim/google/oauth.js

The require is in dist/directory-sync/non-scim/google/oauth.js:

const google_auth_library_1 = require("google-auth-library");

Expected

google-auth-library should be listed in dependencies in @boxyhq/saml-jackson's package.json (similar to @googleapis/admin, which is already declared).

Workaround

Consumers must add google-auth-library themselves, or use pnpm packageExtensions:

packageExtensions:
  '@boxyhq/saml-jackson':
    dependencies:
      google-auth-library: ^10.0.0

Environment

• @boxyhq/saml-jackson: 26.2.0
• pnpm 10.x
• Node 22/24