After going through this page -https://developer.atlassian.com/platform/marketplace/upgrading-and-versioning-cloud-apps/#major--minor--and-micro-version-update-definitions, it appears that it does not require manual approve if only authentication is added:
"authentication": {
"type": "jwt"
},
I would be grateful if someone with firsthand experience could verify this information.
Regards,
Peng