Update version.keycloak to v26.1.1 #33

Renovate Bot (Automatisiert) · 2025-02-06T01:03:01+01:00

2025-02-06 01:03:01 +01:00

This PR contains the following updates:

Package	Type	Update	Change
org.keycloak:keycloak-services (source)	provided	patch	`26.1.0` -> `26.1.1`
org.keycloak:keycloak-server-spi-private (source)	provided	patch	`26.1.0` -> `26.1.1`
org.keycloak:keycloak-model-storage (source)	provided	patch	`26.1.0` -> `26.1.1`
org.keycloak:keycloak-server-spi (source)	provided	patch	`26.1.0` -> `26.1.1`
org.keycloak:keycloak-core (source)	provided	patch	`26.1.0` -> `26.1.1`

Release Notes

keycloak/keycloak (org.keycloak:keycloak-services)

`v26.1.1`

Compare Source

Highlights

New option in X.509 authenticator to abort authentication if CRL is outdated

The X.509 authenticator has a new option x509-cert-auth-crl-abort-if-non-updated (CRL abort if non updated in the Admin Console) to abort the login if a CRL is configured to validate the certificate and the CRL is not updated in the time specified in the next update field. The new option defaults to true in the Admin Console. For more details about the CRL next update field, see RFC5280, Section-5.1.2.5.

The value false is maintained for compatibility with the previous behavior. Note that existing configurations will not have the new option and will act as if this option was set to false, but the Admin Console will add the default value true on edit.

New option in Send Reset Email to force a login after reset credentials

The reset-credential-email (Send Reset Email) is the authenticator used in the reset credentials flow (forgot password feature) for sending the email to the user with the reset credentials token link. This authenticator now has a new option force-login (Force login after reset). When this option is set to true, the authenticator terminates the session and forces a new login.

For more details about this new option, see Enable forgot password.

Upgrading

Before upgrading refer to the migration guide for a complete list of changes.

All resolved issues

Enhancements

#552 Clean up old release code from Node.js adapter repo
#34275 Organizations: Allow Organization Selection organizations
#34343 CreatedResponseUtil.getCreatedId should expose the actual error message from the server admin/client-java
#36440 Remove Node.js adapter documentation from main repo docs
#36456 Clarify IPv6 JGroups requirements in Keycloak documenation
#36798 Add detail on dependencyManagement section for POM files

Bugs

#558 The draft nightly untagged release is created by "Release nightly" GH action
#562 Incorrectly resolved {project_versionNpm} expression in the documentation
#32766 Translation error in messages_fr.properties translations
#33477 LDAP groups not showing members in Groups when using memberOf attribute ldap
#36159 Realm not found while exists and works if entered directly in the URL admin/ui
#36460 Deployment artifacts for Quarkus extensions are not in deployment dir dist/quarkus
#36483 Wrong link for tracing in 26.1.0 release notes docs
#36514 The organization claim does not appear if the Organization Membership Mapper is added through a custom client scope organizations
#36531 WebAuthN and dark mode: device icons are hardly readable login/ui
#36559 keycloak.v2 forms are too small for mobile view login/ui
#36629 All IDPs shown when reloading login page login/ui
#36649 When organizations feature is turned on, login_hint doesn't prefill identity-first login's page email field organizations
#36669 --spi-connections-liquibase-default-index-creation-threshold does not work core
#36675 Links error for https://jwt.io in documentation docs
#36728 Logging errors on DB transaction retries core
#36745 Conflict when Keycloak uses an OpenShift cluster ingress certificate operator
#36781 Flaky test: org.keycloak.testsuite.webauthn.account.WebAuthnTransportLocaleTest#localizationTransportInternal ci
#36782 Flaky test: org.keycloak.testsuite.webauthn.account.WebAuthnSigningInTest#multipleSecurityKeys ci
#36844 Provide an option to force login after reset credentials authentication
#36887 Outdated documentation about how to use reCAPTCHA in development with localhost docs
#36902 Flaky test: org.keycloak.testsuite.webauthn.account.WebAuthnErrorTest#errorPageWithTimeout ci
#36945 Bad escape apostrophe character in messages_fr.properties login/ui
#36988 Typos in English email message templates translations
#36998 UI tests failing admin/ui

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [org.keycloak:keycloak-services](http://keycloak.org) ([source](https://github.com/keycloak/keycloak)) | provided | patch | `26.1.0` -> `26.1.1` | | [org.keycloak:keycloak-server-spi-private](http://keycloak.org) ([source](https://github.com/keycloak/keycloak)) | provided | patch | `26.1.0` -> `26.1.1` | | [org.keycloak:keycloak-model-storage](http://keycloak.org) ([source](https://github.com/keycloak/keycloak)) | provided | patch | `26.1.0` -> `26.1.1` | | [org.keycloak:keycloak-server-spi](http://keycloak.org) ([source](https://github.com/keycloak/keycloak)) | provided | patch | `26.1.0` -> `26.1.1` | | [org.keycloak:keycloak-core](http://keycloak.org) ([source](https://github.com/keycloak/keycloak)) | provided | patch | `26.1.0` -> `26.1.1` | --- ### Release Notes <details> <summary>keycloak/keycloak (org.keycloak:keycloak-services)</summary> ### [`v26.1.1`](https://github.com/keycloak/keycloak/releases/tag/26.1.1) [Compare Source](https://github.com/keycloak/keycloak/compare/26.1.0...26.1.1) <div> <h2>Highlights</h2> <div class="sect2"> <h3 id="_new_option_in_x_509_authenticator_to_abort_authentication_if_crl_is_outdated">New option in X.509 authenticator to abort authentication if CRL is outdated</h3> <div class="paragraph"> <p>The X.509 authenticator has a new option <code>x509-cert-auth-crl-abort-if-non-updated</code> (<strong>CRL abort if non updated</strong> in the Admin Console) to abort the login if a CRL is configured to validate the certificate and the CRL is not updated in the time specified in the next update field. The new option defaults to <code>true</code> in the Admin Console. For more details about the CRL next update field, see <a href="https://datatracker.ietf.org/doc/html/rfc5280#section-5.1.2.5">RFC5280, Section-5.1.2.5</a>.</p> </div> <div class="paragraph"> <p>The value <code>false</code> is maintained for compatibility with the previous behavior. Note that existing configurations will not have the new option and will act as if this option was set to <code>false</code>, but the Admin Console will add the default value <code>true</code> on edit.</p> </div> </div> <div class="sect2"> <h3 id="_new_option_in_send_reset_email_to_force_a_login_after_reset_credentials">New option in Send Reset Email to force a login after reset credentials</h3> <div class="paragraph"> <p>The <code>reset-credential-email</code> (<strong>Send Reset Email</strong>) is the authenticator used in the <strong>reset credentials</strong> flow (<strong>forgot password</strong> feature) for sending the email to the user with the reset credentials token link. This authenticator now has a new option <code>force-login</code> (<strong>Force login after reset</strong>). When this option is set to <code>true</code>, the authenticator terminates the session and forces a new login.</p> </div> <div class="paragraph"> <p>For more details about this new option, see <a href="https://www.keycloak.org/docs/DEV/server_admin/#enabling-forgot-password">Enable forgot password</a>.</p> </div> </div> <h2>Upgrading</h2> <p>Before upgrading refer to <a href="file:/home/runner/work/keycloak-rel/keycloak-rel/target/web/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p> <h2>All resolved issues</h2> <h3>Enhancements</h3> <ul> <li><a href="https://github.com/keycloak/keycloak-nodejs-connect/issues/552">#552</a> Clean up old release code from Node.js adapter repo </li> <li><a href="https://github.com/keycloak/keycloak/issues/34275">#34275</a> Organizations: Allow Organization Selection <code>organizations</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/34343">#34343</a> CreatedResponseUtil.getCreatedId should expose the actual error message from the server <code>admin/client-java</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36440">#36440</a> Remove Node.js adapter documentation from main repo <code>docs</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36456">#36456</a> Clarify IPv6 JGroups requirements in Keycloak documenation </li> <li><a href="https://github.com/keycloak/keycloak/issues/36798">#36798</a> Add detail on dependencyManagement section for POM files </li> </ul> <h3>Bugs</h3> <ul> <li><a href="https://github.com/keycloak/keycloak-nodejs-connect/issues/558">#558</a> The draft nightly untagged release is created by "Release nightly" GH action </li> <li><a href="https://github.com/keycloak/keycloak-nodejs-connect/issues/562">#562</a> Incorrectly resolved {project_versionNpm} expression in the documentation </li> <li><a href="https://github.com/keycloak/keycloak/issues/32766">#32766</a> Translation error in messages_fr.properties <code>translations</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/33477">#33477</a> LDAP groups not showing members in Groups when using memberOf attribute <code>ldap</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36159">#36159</a> Realm not found while exists and works if entered directly in the URL <code>admin/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36460">#36460</a> Deployment artifacts for Quarkus extensions are not in deployment dir <code>dist/quarkus</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36483">#36483</a> Wrong link for tracing in 26.1.0 release notes <code>docs</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36514">#36514</a> The organization claim does not appear if the Organization Membership Mapper is added through a custom client scope <code>organizations</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36531">#36531</a> WebAuthN and dark mode: device icons are hardly readable <code>login/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36559">#36559</a> keycloak.v2 forms are too small for mobile view <code>login/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36629">#36629</a> All IDPs shown when reloading login page <code>login/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36649">#36649</a> When organizations feature is turned on, login_hint doesn't prefill identity-first login's page email field <code>organizations</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36669">#36669</a> --spi-connections-liquibase-default-index-creation-threshold does not work <code>core</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36675">#36675</a> Links error for https://jwt.io in documentation <code>docs</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36728">#36728</a> Logging errors on DB transaction retries <code>core</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36745">#36745</a> Conflict when Keycloak uses an OpenShift cluster ingress certificate <code>operator</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36781">#36781</a> Flaky test: org.keycloak.testsuite.webauthn.account.WebAuthnTransportLocaleTest#localizationTransportInternal <code>ci</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36782">#36782</a> Flaky test: org.keycloak.testsuite.webauthn.account.WebAuthnSigningInTest#multipleSecurityKeys <code>ci</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36844">#36844</a> Provide an option to force login after reset credentials <code>authentication</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36887">#36887</a> Outdated documentation about how to use reCAPTCHA in development with localhost <code>docs</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36902">#36902</a> Flaky test: org.keycloak.testsuite.webauthn.account.WebAuthnErrorTest#errorPageWithTimeout <code>ci</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36945">#36945</a> Bad escape apostrophe character in messages_fr.properties <code>login/ui</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36988">#36988</a> Typos in English email message templates <code>translations</code></li> <li><a href="https://github.com/keycloak/keycloak/issues/36998">#36998</a> UI tests failing <code>admin/ui</code></li> </ul> </div> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

Renovate Bot (Automatisiert) added 1 commit 2025-02-06 01:03:02 +01:00

Update version.keycloak to v26.1.1

Keycloak mailcow Build / Build und Bereitstellung (pull_request) Successful in 19s

Details

Keycloak mailcow Build / Build und Bereitstellung (push) Successful in 15s

Details

c0396ced00

Renovate Bot (Automatisiert) scheduled this pull request to auto merge when all checks succeed 2025-02-06 01:03:02 +01:00

Renovate Bot (Automatisiert) merged commit c0396ced00 into main

2025-02-06 01:05:23 +01:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: gcg/keycloak-mailcow#33