External-Mirrors/keycloak
2
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-07 14:02:04 -03:30
Code Issues Packages Projects Releases Wiki Activity
29,871 Commits 19 Branches 288 Tags
Commit Graph

29871 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
mposolda
bcc8f684f2 Javadoc of Keycloak-admin-client for Keycloak server 26.5 release 
closes #45217

Signed-off-by: mposolda <mposolda@gmail.com>
 2026-01-07 18:24:00 +01:00
Pedro Ruivo
99828b4cc4
Fix Cluster Compatibility Tests 
Closes #45221

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2026-01-07 15:26:19 +00:00
Alexander Schwartz
3b01bbb551
Adding x-robots HTTP header to all Keycloak resources (#44864) 
Closes #44863

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-07 15:11:54 +01:00
Martin Kanis
a9a89005fa Can not get through SSO login if using a custom attribute with default value 
Closes #44785

Signed-off-by: Martin Kanis <mkanis@redhat.com>
 2026-01-07 09:41:40 -03:00
Pedro Igor
17f0dbdc1c Update browser flow with organization flow on migration 
Closes #36593

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2026-01-07 09:37:46 -03:00
Alexander Schwartz
234526761e
Fix section level in 26.5 migration guide 
Closes #45184

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2026-01-07 07:54:06 -03:00
forkimenjeckayang
c76676ebef
[OID4VCI] Make sure events are properly used in OID4VCI endpoints (#44946) 
Closes: #44679


Signed-off-by: forkimenjeckayang <forkimenjeckayang@gmail.com>
 2026-01-07 11:06:45 +01:00
Pedro Ruivo
695ee725a5
Admin UI: slow response time listing second user page 
Fixes #44860

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-07 10:53:14 +01:00
dependabot[bot]
0970e32ebb
Bump com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (#45201) 
Bumps [com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer](https://github.com/OWASP/java-html-sanitizer) from 20240325.1 to 20260101.1.
- [Release notes](https://github.com/OWASP/java-html-sanitizer/releases)
- [Commits](https://github.com/OWASP/java-html-sanitizer/compare/release-20240325.1...release-20260101.1)

---
updated-dependencies:
- dependency-name: com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer
  dependency-version: '20260101.1'
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-07 09:02:27 +00:00
Steven Hawkins
9c15292906
fix: upgrade quarkus to 3.30.5 (#45192) 
closes: #45188

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2026-01-07 08:59:44 +01:00
Steven Hawkins
81e31fa4cc
fix: using non-interpretted args for import (#44862) 
closes: #44861

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2026-01-07 08:48:08 +01:00
Stian Thorgersen
19014814e5
Rename team/continuous-testing to team/continuous-delivery 
Signed-off-by: stianst <stianst@gmail.com>
 2026-01-07 08:43:59 +01:00
Pascal Knüppel
dceee1c1fb
Fix NullPointer in JWSHeader with x5c header (#45161) 
fixes #45160

Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
 2026-01-07 08:35:22 +01:00
Steven Hawkins
d27db0adf7
fix: ensuring that Keycloak test launch doesn't capture runtime defaults (#45154) 
closes: #41630

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
nightly 		2026-01-06 16:27:09 +00:00
Ryan Emerson
4a2ed7c4e6
Use correct anchor for mdc logging in 26.5.0 release notes 
Closes #45185

Signed-off-by: Ryan Emerson <remerson@ibm.com>
 2026-01-06 17:21:48 +01:00
Václav Muzikář
ed69f332af
[admin-v2] Polymorphism, refined OIDC Client representation (#44727) 
* [admin-v2] Polymorphism, refined OIDC Client representation

Closes #43290

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

* Remove AbstractRepModelMapper

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

---------

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
 2026-01-06 16:23:30 +01:00
olympus5
ffed84194e Realign source code examples in auth-spi doc 
closes #43757

Signed-off-by: olympus5 <erwan.iquel@gmail.com>
 2026-01-06 12:18:42 +01:00
Muhammed Oğuz
12d4146eb9
fix: clear all filters when resetting attribute search (#45109) 
Closes #45108

Signed-off-by: Muhammed Oguz <muhammed0748@outlook.com>
 2026-01-05 18:27:37 -05:00
Marek Posolda
f938d894b9
AdminEvent.getResourcePath() returns paths with duplicated slashes 
closes #45114

Signed-off-by: mposolda <mposolda@gmail.com>
 2026-01-05 21:18:39 +00:00
Steven Hawkins
241ca57157
fix: preventing args to service commands (#45050) 
also outputting all commands for help files

closes #44975

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2026-01-05 20:31:14 +01:00
ksushant881
5939864b76 Add action that removes a required action step in workflow 
Closes #44647

Signed-off-by: ksushant881 <ksushant881@gmail.com>
 2026-01-05 16:10:20 -03:00
Pedro Ruivo
0885062c37
Missing message keys for USER_SESSION_DELETED 
Closes #44966

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2026-01-05 18:27:34 +01:00
Faseela K
cefd93d34c
Update quarkus README for small readability enhancements (#44889) 
* Update quarkus README for small readability enhancements

As a beginner, when I was trying the quarkus setup, some of the statements
here made confusion. So, trying to update the doc for better clarity

Signed-off-by: Faseela K <faseela.k@est.tech>

* Update KEYCLOAK_HOME placeholder

Signed-off-by: Faseela K <faseela.k@est.tech>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
 2026-01-05 18:03:49 +01:00
Weblate (bot)
e90d1d2330
Translations update from Hosted Weblate (#45113) 
* Updated translation for Czech

Language: cs

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Martin Kylián <martin.kylian@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Martin Kylián <martin.kylian@gmail.com>

* Updated translation for French

Language: fr

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Sylvain Pichon <service@spichon.fr>

* Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Updated translation for Chinese (Traditional Han script)

Language: zh_Hant

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: 秉虎 <s96016641@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: 秉虎 <s96016641@gmail.com>

* Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Translated using Weblate (Chinese (Simplified Han script))

Translation: Keycloak/Admin backend
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/zh_Hans/

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Nagi <nagi@mptree.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Nagi <nagi@mptree.com>

---------

Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Martin Kylián <martin.kylian@gmail.com>
Signed-off-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: 秉虎 <s96016641@gmail.com>
Signed-off-by: Nagi <nagi@mptree.com>
Co-authored-by: Martin Kylián <martin.kylian@gmail.com>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Co-authored-by: 秉虎 <s96016641@gmail.com>
Co-authored-by: Nagi <nagi@mptree.com>
 2026-01-05 17:49:48 +01:00
Pedro Igor
0d5766f3a8 Allow running scheduled workflows 
Closes #44865

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2026-01-05 13:03:47 -03:00
Stian Thorgersen
0e4b629d91
Add Steven Hawkins as a maintainer (#45144) 
Signed-off-by: stianst <stianst@gmail.com>
 2026-01-05 16:32:14 +01:00
dependabot[bot]
c0fa4d5af7
Bump the npm-dependencies group across 1 directory with 32 updates (#45148) 
Bumps the npm-dependencies group with 32 updates in the /js directory:

| Package | From | To |
| --- | --- | --- |
| [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.1` | `3.3.3` |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.37.0` | `9.39.2` |
| [eslint](https://github.com/eslint/eslint) | `9.38.0` | `9.39.2` |
| [eslint-plugin-playwright](https://github.com/playwright-community/eslint-plugin-playwright) | `2.2.2` | `2.4.0` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `16.2.4` | `16.2.7` |
| [i18next](https://github.com/i18next/i18next) | `25.6.0` | `25.7.3` |
| [keycloak-js](https://github.com/keycloak/keycloak-js) | `26.2.0` | `26.2.2` |
| [lodash-es](https://github.com/lodash/lodash) | `4.17.21` | `4.17.22` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.63.0` | `7.70.0` |
| [react-i18next](https://github.com/i18next/react-i18next) | `16.0.1` | `16.5.1` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `6.30.1` | `6.30.2` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.56.0` | `1.57.0` |
| [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react-swc) | `4.1.0` | `4.2.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.1.11` | `7.3.0` |
| [vite-plugin-checker](https://github.com/fi3ework/vite-plugin-checker) | `0.11.0` | `0.12.0` |
| [@dagrejs/dagre](https://github.com/dagrejs/dagre) | `1.1.5` | `1.1.8` |
| [p-debounce](https://github.com/sindresorhus/p-debounce) | `5.0.0` | `5.1.0` |
| [yaml](https://github.com/eemeli/yaml) | `2.8.1` | `2.8.2` |
| [@axe-core/playwright](https://github.com/dequelabs/axe-core-npm) | `4.10.2` | `4.11.0` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.0` | `16.3.1` |
| [jsdom](https://github.com/jsdom/jsdom) | `27.0.0` | `27.4.0` |
| [properties-file](https://github.com/properties-file/properties-file) | `3.6.1` | `3.6.3` |
| [commander](https://github.com/tj/commander.js) | `14.0.1` | `14.0.2` |
| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.2` | `11.3.3` |
| [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) | `3.28.0` | `3.30.0` |
| [@octokit/rest](https://github.com/octokit/rest.js) | `22.0.0` | `22.0.1` |
| [@types/gunzip-maybe](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/gunzip-maybe) | `1.4.2` | `1.4.3` |
| [@faker-js/faker](https://github.com/faker-js/faker) | `10.1.0` | `10.2.0` |
| [chai](https://github.com/chaijs/chai) | `6.2.0` | `6.2.2` |
| [mocha](https://github.com/mochajs/mocha) | `11.7.4` | `11.7.5` |
| [@rollup/plugin-replace](https://github.com/rollup/plugins/tree/HEAD/packages/replace) | `6.0.2` | `6.0.3` |
| [rollup](https://github.com/rollup/rollup) | `4.52.5` | `4.55.1` |



Updates `@eslint/eslintrc` from 3.3.1 to 3.3.3
- [Release notes](https://github.com/eslint/eslintrc/releases)
- [Changelog](https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslintrc/compare/v3.3.1...eslintrc-v3.3.3)

Updates `@eslint/js` from 9.37.0 to 9.39.2
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v9.39.2/packages/js)

Updates `eslint` from 9.38.0 to 9.39.2
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/compare/v9.38.0...v9.39.2)

Updates `eslint-plugin-playwright` from 2.2.2 to 2.4.0
- [Release notes](https://github.com/playwright-community/eslint-plugin-playwright/releases)
- [Changelog](https://github.com/mskelton/eslint-plugin-playwright/blob/main/CHANGELOG.md)
- [Commits](https://github.com/playwright-community/eslint-plugin-playwright/compare/v2.2.2...v2.4.0)

Updates `lint-staged` from 16.2.4 to 16.2.7
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lint-staged/lint-staged/compare/v16.2.4...v16.2.7)

Updates `i18next` from 25.6.0 to 25.7.3
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next/compare/v25.6.0...v25.7.3)

Updates `keycloak-js` from 26.2.0 to 26.2.2
- [Release notes](https://github.com/keycloak/keycloak-js/releases)
- [Changelog](https://github.com/keycloak/keycloak-js/blob/main/RELEASE-CHECKLIST.md)
- [Commits](https://github.com/keycloak/keycloak-js/compare/26.2.0...26.2.2)

Updates `lodash-es` from 4.17.21 to 4.17.22
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/commits)

Updates `react-hook-form` from 7.63.0 to 7.70.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](https://github.com/react-hook-form/react-hook-form/compare/v7.63.0...v7.70.0)

Updates `react-i18next` from 16.0.1 to 16.5.1
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/react-i18next/compare/v16.0.1...v16.5.1)

Updates `react-router-dom` from 6.30.1 to 6.30.2
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@6.30.2/packages/react-router-dom)

Updates `@playwright/test` from 1.56.0 to 1.57.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](https://github.com/microsoft/playwright/compare/v1.56.0...v1.57.0)

Updates `@vitejs/plugin-react-swc` from 4.1.0 to 4.2.2
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react-swc/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react-swc@4.2.2/packages/plugin-react-swc)

Updates `vite` from 7.1.11 to 7.3.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.0/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.0/packages/vite)

Updates `vite-plugin-checker` from 0.11.0 to 0.12.0
- [Release notes](https://github.com/fi3ework/vite-plugin-checker/releases)
- [Commits](https://github.com/fi3ework/vite-plugin-checker/compare/vite-plugin-checker@0.11.0...vite-plugin-checker@0.12.0)

Updates `@dagrejs/dagre` from 1.1.5 to 1.1.8
- [Release notes](https://github.com/dagrejs/dagre/releases)
- [Commits](https://github.com/dagrejs/dagre/compare/v1.1.5...v1.1.8)

Updates `p-debounce` from 5.0.0 to 5.1.0
- [Release notes](https://github.com/sindresorhus/p-debounce/releases)
- [Commits](https://github.com/sindresorhus/p-debounce/compare/v5.0.0...v5.1.0)

Updates `yaml` from 2.8.1 to 2.8.2
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](https://github.com/eemeli/yaml/compare/v2.8.1...v2.8.2)

Updates `@axe-core/playwright` from 4.10.2 to 4.11.0
- [Release notes](https://github.com/dequelabs/axe-core-npm/releases)
- [Changelog](https://github.com/dequelabs/axe-core-npm/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/dequelabs/axe-core-npm/compare/v4.10.2...v4.11.0)

Updates `@testing-library/react` from 16.3.0 to 16.3.1
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/react-testing-library/compare/v16.3.0...v16.3.1)

Updates `jsdom` from 27.0.0 to 27.4.0
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Changelog](https://github.com/jsdom/jsdom/blob/main/Changelog.md)
- [Commits](https://github.com/jsdom/jsdom/compare/27.0.0...27.4.0)

Updates `properties-file` from 3.6.1 to 3.6.3
- [Release notes](https://github.com/properties-file/properties-file/releases)
- [Changelog](https://github.com/properties-file/properties-file/blob/main/CHANGELOG.md)
- [Commits](https://github.com/properties-file/properties-file/compare/3.6.1...3.6.3)

Updates `commander` from 14.0.1 to 14.0.2
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/tj/commander.js/compare/v14.0.1...v14.0.2)

Updates `fs-extra` from 11.3.2 to 11.3.3
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jprichardson/node-fs-extra/compare/11.3.2...11.3.3)

Updates `simple-git` from 3.28.0 to 3.30.0
- [Release notes](https://github.com/steveukx/git-js/releases)
- [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md)
- [Commits](https://github.com/steveukx/git-js/commits/simple-git@3.30.0/simple-git)

Updates `@octokit/rest` from 22.0.0 to 22.0.1
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v22.0.0...v22.0.1)

Updates `@types/gunzip-maybe` from 1.4.2 to 1.4.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/gunzip-maybe)

Updates `@faker-js/faker` from 10.1.0 to 10.2.0
- [Release notes](https://github.com/faker-js/faker/releases)
- [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md)
- [Commits](https://github.com/faker-js/faker/compare/v10.1.0...v10.2.0)

Updates `chai` from 6.2.0 to 6.2.2
- [Release notes](https://github.com/chaijs/chai/releases)
- [Changelog](https://github.com/chaijs/chai/blob/main/History.md)
- [Commits](https://github.com/chaijs/chai/compare/v6.2.0...v6.2.2)

Updates `mocha` from 11.7.4 to 11.7.5
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/v11.7.5/CHANGELOG.md)
- [Commits](https://github.com/mochajs/mocha/compare/v11.7.4...v11.7.5)

Updates `@rollup/plugin-replace` from 6.0.2 to 6.0.3
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/replace/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/babel-v6.0.3/packages/replace)

Updates `rollup` from 4.52.5 to 4.55.1
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.52.5...v4.55.1)

---
updated-dependencies:
- dependency-name: "@eslint/eslintrc"
  dependency-version: 3.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@eslint/js"
  dependency-version: 9.39.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: eslint
  dependency-version: 9.39.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: eslint-plugin-playwright
  dependency-version: 2.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: lint-staged
  dependency-version: 16.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: i18next
  dependency-version: 25.7.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: keycloak-js
  dependency-version: 26.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: lodash-es
  dependency-version: 4.17.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: react-hook-form
  dependency-version: 7.70.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: react-i18next
  dependency-version: 16.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: react-router-dom
  dependency-version: 6.30.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@playwright/test"
  dependency-version: 1.57.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@vitejs/plugin-react-swc"
  dependency-version: 4.2.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: vite
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: vite-plugin-checker
  dependency-version: 0.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@dagrejs/dagre"
  dependency-version: 1.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: p-debounce
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: yaml
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@axe-core/playwright"
  dependency-version: 4.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: jsdom
  dependency-version: 27.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: properties-file
  dependency-version: 3.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: commander
  dependency-version: 14.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: fs-extra
  dependency-version: 11.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: simple-git
  dependency-version: 3.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@octokit/rest"
  dependency-version: 22.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@types/gunzip-maybe"
  dependency-version: 1.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@faker-js/faker"
  dependency-version: 10.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: chai
  dependency-version: 6.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: mocha
  dependency-version: 11.7.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@rollup/plugin-replace"
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: rollup
  dependency-version: 4.55.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-05 15:15:40 +00:00
Alexander Schwartz
e43cf55028
Finalizing 26.5 release notes 
Closes #45131

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Stian Thorgersen <stian@redhat.com>
 2026-01-05 14:10:32 +01:00
Pedro Igor
3c0b308bb7
Document limitations when updating workflows 
Closes #45134

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2026-01-05 14:10:03 +01:00
dependabot[bot]
014fae99c4
Bump github/codeql-action (#45141) 
Bumps the actions-dependencies group with 1 update in the / directory: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 4.31.3 to 4.31.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](014f16e7ab...5d4e8d1aca)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-05 13:04:59 +00:00
Alexander Schwartz
17fb3677a5
Update clients session values to match user session settings 
Closes #45133

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-05 13:48:00 +01:00
Stian Thorgersen
560e418941
Group only minor/patch updates to deps (#45136) 
Signed-off-by: stianst <stianst@gmail.com>
 2026-01-05 13:46:05 +01:00
Rathan Naik
2af7c843af Fix organization invitation redirect to respect account client base URL 
When an organization's redirect URL is left empty, Keycloak currently defaults
to the account console URL, ignoring the account client's configured Home URL
(base URL). This fix checks the account client's base URL before falling back
to the default account console URL.

Changes:
- Added resolveAccountClientBaseUrl() helper method in OrganizationInvitationResource
- Added setBaseUrl() method to ClientAttributeUpdater test utility
- Added integration tests for the new behavior

Closes #45052

Signed-off-by: Rathan Naik <30756840+Rathan-Naik@users.noreply.github.com>
 2026-01-05 08:58:27 -03:00
Alexander Schwartz
a6bf194487
Remove usage of kcSanitize() to avoid printing HTML (#44755) 
Closes #44753


Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-05 10:45:32 +01:00
Ryan Emerson
cafa1a86eb
Disable state transfer for session caches when persistent sessions are enabled 
Closes #44518

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-05 08:53:59 +00:00
Ruchika Jha
60b369c622
Validate client session timeout and lifetime settings on realm settings edit 
Closes #44910

Signed-off-by: Ruchika <Ruchika.Jha1@ibm.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-05 08:50:56 +00:00
Jens Erat
adeb41e82b
Extend documentation on ServiceMonitor creation (#45071) 
The documentation so far only mentions how to disable the ServiceMonitor, leading to the assumption that it is enabled by default.

Getting a service monitor created also requires enabling metrics in keycloak, though:

658faf210f/operator/src/main/java/org/keycloak/operator/controllers/KeycloakServiceMonitorDependentResource.java (L50)

While the missing setting creates a warning, the administrator should already have this information before applying the configuration.

Closes #45070

Signed-off-by: Jens Erat <email@jenserat.de>
 2026-01-05 09:10:18 +01:00
Stian Thorgersen
f2c527239d
Update JNDI reference in LDAP referrals documentation (#45129) 
Clarified the term 'JNDI' in the LDAP referrals section.

Closes #45040
 2026-01-05 09:01:40 +01:00
Steven Hawkins
6dc2e269be
fix: updating owasp.html.sanitizer.version to addresss CVE-2025-66021 
closes #45097

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
 2026-01-05 08:53:00 +01:00
Robin Meese
0d0d468f27
Add ability to delete offline sessions via account console 
Closes #15502

Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2026-01-05 08:26:47 +01:00
Weblate (bot)
4349f8ee6a
Translations update from Hosted Weblate (#45089) 
* Updated translation for Turkish

Language: tr

Co-authored-by: Alpertunga <a_ertin@msn.com>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Alpertunga <a_ertin@msn.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Updated translation for German

Language: de

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Updated translation for Russian

Language: ru

Updated translation for Russian

Language: ru

Updated translation for Russian

Language: ru

Co-authored-by: Anton Petrov <petrov9810@gmail.com>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Anton Petrov <petrov9810@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Translated using Weblate (French)

Translation: Keycloak/Admin backend
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/fr/

Translated using Weblate (French)

Translation: Keycloak/Admin backend
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/fr/

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Translated using Weblate (French)

Translation: Keycloak/Admin backend
Translate-URL: https://hosted.weblate.org/projects/keycloak/theme-baseadmin/fr/

Updated translation for French

Language: fr

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Sylvain Pichon <service@spichon.fr>

* Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Updated translation for Chinese (Simplified Han script)

Language: zh_Hans

Co-authored-by: Charlie <charlie@mapletree.biz>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Charlie <charlie@mapletree.biz>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

---------

Signed-off-by: Alpertunga <a_ertin@msn.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Anton Petrov <petrov9810@gmail.com>
Signed-off-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: Charlie <charlie@mapletree.biz>
Co-authored-by: Alpertunga <a_ertin@msn.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Anton Petrov <petrov9810@gmail.com>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Co-authored-by: Charlie <charlie@mapletree.biz>
 2026-01-02 21:36:51 +01:00
Christian Ja
374e45b883
Use default locale from realm an intermediate fallback 
closes #40990

Signed-off-by: Christian Janker <christian.janker@gmx.at>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-01 14:23:33 +00:00
Robin Meese
35ee49b5d4
Add logout event to UserSessionLimitsAuthenticator 
Closes #44843

Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-01-01 13:22:54 +00:00
Ricardo Noriega
ac557234a2
Fix typos in documentation (#45101) 
Signed-off-by: Ricardo Noriega De Soto <rnoriega@redhat.com>
 2026-01-01 12:13:52 +00:00
Stefan Guilhen
b567372d20 Use KeycloakModelUtils to resolve groups by path 
Closes #45072

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2025-12-29 11:29:43 -03:00
Stefan Guilhen
43634dd2ed Update docs/documentation/server_admin/topics/workflows/understanding-workflow-definition.adoc 
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2025-12-29 10:29:38 -03:00
Stefan Guilhen
9865791084 Fix wrong provider references in workflows documentation 
Closes #45077

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2025-12-29 10:29:38 -03:00
Stefan Guilhen
66f3868ccf Suppress the step's priority in the returned workflow JSON/YAML 
Closes #45075

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2025-12-29 10:26:21 -03:00
Stefan Guilhen
985ec6d306 Add name uniqueness validation to workflows 
Closes #43914

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>

# Conflicts:
#	tests/base/src/test/java/org/keycloak/tests/workflow/WorkflowManagementTest.java
 2025-12-29 10:24:56 -03:00
Robin Meese
0957572751
Add logout event to SessionResource 
Closes #44842

Signed-off-by: Robin Meese <39960884+robson90@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-12-29 12:25:45 +00:00