8000 Comparing nightly...main · keycloak/keycloak · GitHub
[go: up one dir, main page]
Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: keycloak/keycloak
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: nightly
Choose a base ref
...
head repository: keycloak/keycloak
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: main
Choose a head ref
  • 15 commits
  • 52 files changed
  • 14 contributors

Commits on Nov 6, 2026

  1. [CVE-2026-116468] Privilege escalation: delegated admin to realm-admi… 

    …n via group move (incomplete fix of CVE-2026-94000)

Closes #54341

Signed-off-by: Martin Kanis <mkanis@ibm.com>
    @martin-kanis @pedroigor
    martin-kanis authored and pedroigor committed Nov 6, 2026
    Configuration menu
    Copy the full SHA
    1316705 View commit details
    Browse the repository at this point in the history

  2. Document LDAP bind account permissions for recursive group retrieval … 

    …strategy

Closes #54366

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
    @sguilhen @pedroigor
    sguilhen authored and pedroigor committed Nov 6, 2026
    Configuration menu
    Copy the full SHA
    56ffd6a View commit details
    Browse the repository at this point in the history

  3. Reject empty SCIM group members on PUT 

    Closes #54530

Signed-off-by: akasakariko <148060537+akasakariko@users.noreply.github.com>
    @akasakariko @pedroigor
    akasakariko authored and pedroigor committed Nov 6, 2026
    Configuration menu
    Copy the full SHA
    a50ba94 View commit details
    Browse the repository at this point in the history

  4. Update Quarkus JUnit test dependencies (#54734) 

    Closes: #54732

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
    @Pepo48
    Pepo48 authored Nov 6, 2026
    Configuration menu
    Copy the full SHA
    3acdf06 View commit details
    Browse the repository at this point in the history

  5. Always validate post-logout redirect URIs in SecureRedirectUrisEnforc… 

    …erExecutor (#53038)

Closes #50982


Signed-off-by: Jimmy Chakkalakal <jimmy.chakkalakal@ibm.com>
Signed-off-by: jimmychakkalakal <47317106+jimmychakkalakal@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
    @jimmychakkalakal
    jimmychakkalakal and Copilot authored Nov 6, 2026
    Configuration menu
    Copy the full SHA
    baf4aaa View commit details
    Browse the repository at this point in the history

  6. Validate ECDSA signature length before JWS verification (#53928) 

    Closes #53927


Signed-off-by: Nayyar <nayyar@bugqore.com>
    @naruto-lgtm
    naruto-lgtm authored Nov 6, 2026
    Configuration menu
    Copy the full SHA
    ea78b16 View commit details
    Browse the repository at this point in the history

  7. Fix crash and inconsistent matching in account console linked-account… 

    …s search

Closes #54647

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
    @sguilhen @pedroigor
    sguilhen authored and pedroigor committed Nov 6, 2026
    Configuration menu
    Copy the full SHA
    77a8f12 View commit details
    Browse the repository at this point in the history

  8. Reject online refresh tokens for sessions in logout states 

    Check user and client session logout state before refreshing tokens,
preserving pending logout state and preventing idle timestamp updates.
Keep offline and service-account refresh behavior unchanged.

Closes #54484

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
    @lhanusov @mposolda
    lhanusov authored and mposolda committed Nov 6, 2026
    Configuration menu
    Copy the full SHA
    b1182f9 View commit details
    Browse the repository at this point in the history

  9. Reject a different brokered user on forced re-authentication before c… 

    …reating it

Closes #54344

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
    @sguilhen @pedroigor
    sguilhen authored and pedroigor committed Nov 6, 2026
    Configuration menu
    Copy the full SHA
    6ea53a2 View commit details
    Browse the repository at this point in the history

  10. Escape delimiter in federated and composite cache keys to prevent col… 

    …lisions

Closes #54368

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
    @sguilhen @pedroigor
    sguilhen authored and pedroigor committed Nov 6, 2026
    Configuration menu
    Copy the full SHA
    90b3f7e View commit details
    Browse the repository at this point in the history

  11. Remove ability to set up multivalued issuer for OIDC providers 

    Closes #54458

Signed-off-by: vramik <vramik@redhat.com>
    @vramik @pedroigor
    vramik authored and pedroigor committed Nov 6, 2026
    Configuration menu
    Copy the full SHA
    a9d7e41 View commit details
    Browse the repository at this point in the history

  12. Ignore docs.redhat.com in the external links check 

    docs.redhat.com now answers every scripted request with 403, so the
External links check fails for any PR that touches the documentation.
The pages still exist; the site blocks automated clients the same way
Weblate and iso.org do.

Fixes #54762

Signed-off-by: Stan Silvert <ssilvert@redhat.com>
Assisted-by: Claude Opus 5.5
    @ssilvert @pedroigor
    ssilvert authored and pedroigor committed Nov 6, 2026
    Configuration menu
    Copy the full SHA
    77d1edc View commit details
    Browse the repository at this point in the history

  13. Fixes link from Bootstrapping (#54728) 

    Closes #54727

Signed-off-by: AndyMunro <amunro@redhat.com>
    @andymunro
    andymunro authored Nov 6, 2026
    Configuration menu
    Copy the full SHA
    74b563f View commit details
    Browse the repository at this point in the history

  14. Show credentials of disabled users in admin console (#54778) 

    Closes #54777

Signed-off-by: Andy <andy@slice.is>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
    @andy-clapson @claude
    andy-clapson and claude authored Nov 6, 2026
    Configuration menu
    Copy the full SHA
    62edf99 View commit details
    Browse the repository at this point in the history

  15. fix: clarifying hostname context considerations (#54681) 

    closes: #52484

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
    @shawkins
    shawkins authored Nov 6, 2026
    Configuration menu
    Copy the full SHA
    0bc6a62 View commit details
    Browse the repository at this point in the history
Loading
0