8000 Commits · keycloak/keycloak · GitHub

Repository navigation

Commits

Commits on Sep 16, 2026
- Set version to 26.7.4
  github-actions[bot]
  committed
  aa9fe3f
Commits on Sep 15, 2026
- Fix row count on MySQL/MariaDB (#1197)
  ahus1
  authored
  ae29b18
Commits on Sep 7, 2026
- Upgrade to Quarkus 3.33.3.2 (#1133)
  
  stianst
  and
  vmuzikar
  authored
  f645296
- CVE-2026-79651 Bound the locales accepted by theme message lookups (26.7) (#1078)
  ssilvert
  authored
  6f42ea1
Commits on Sep 4, 2026
Commits on Sep 3, 2026
- SAML DeflateUtil leak native zlib state fixed (#1041)
  pskopek
  authored
  ddb3f4e
Commits on Sep 2, 2026
Commits on Sep 1, 2026
- Stabilize test PasskeysUsernameFormTest.passwordLoginWithNonDiscoverableCredential
  ahus1
  authored
  b032006
Commits on Aug 31, 2026
- Do not persist the computed realm_client client attribute
  xgp
  authored
  337454e
- Read the user managed access flag from the updated realm delegate
  xgp
  authored
  47a8b5e
- Fix links to https://quarkus.io/guides
  
  stianst
  and
  rmartinc
  authored
  d57b332
Commits on Aug 28, 2026
- Update react router dependency (#51764) (#52136)
  
  edewit
  and
  stianst
  authored
  6afd3d7
- Fix-51286:Implemented param stripping for all OIDC response modes (#52022)
  
  jimmychakkalakal
  authored and
  mposolda
  committed
  0f3f102
- SAML ECP SOAP fault client id disclosure fix.
  
  pskopek
  authored and
  mposolda
  committed
  488ec41
- Fix signed-JWT client authentication policy bypass with forged assertion
  
  graziang
  authored and
  mposolda
  committed
  fbad918
- Check consento for JWT Authorization Grant
  
  graziang
  authored and
  mposolda
  committed
  3aa7902
- Fixes #51712 by improving post-logout redirect URI validation. (#51909)
  
  jimmychakkalakal
  authored and
  mposolda
  committed
  d16bb5b
Commits on Aug 27, 2026
- Do not log MariaDB 1020-HY000 warnings
  ahus1
  authored
  86601d9
- [CVE-2026-16089] Authorization codes can be retargeted to another client session closes #51003
  mposolda
  committed
  48f8661
- Filter stale role IDs in Infinispan client adapters
  
  ahus1
  and
  PRAHLAD09-dev
  authored
  28d95cd
Commits on Aug 26, 2026
- Persist client session note removals with persistent user sessions
  
  authored
  3add94b
- fix client nbf bypass
  
  graziang
  authored and
  mposolda
  committed
  d89dbfb
- Add initial trivyignore file (#52053)
  stianst
  authored
  719643b
- Fix DistributionKeycloakServer hanging on Windows when server startup is slow
  
  stianst
  and
  Pepo48
  authored
  e24cf6b
- Remove version override for `org.postgresql:postgresql` (#51140) (#51148)
  
  vmuzikar
  and
  Copilot
  authored
  c0c6c3b
- [Backport 26.7] Skip resolving roles when processing transient tokens on FGAP requests (#51772)
  
  pedroigor
  and
  waterWang
  authored
  9ed8eb1
Commits on Aug 25, 2026
- Avoid aurora_version() probe on standard PostgreSQL
  
  ahus1
  and
  kalayciburak
  authored
  bb1a3a7
- Chunk parent role ids in JpaRealmProvider#getCompositeRolesStream
  thomasdarimont
  authored
  cceb93c

0