26.2.5
📦 keycloakView on GitHub →
🐛 30 fixes🔧 14 symbols
Summary
This release focuses heavily on bug fixes across various components including UI, API, documentation, and performance improvements related to session handling in Infinispan. It also addresses several documentation inconsistencies and CI issues.
Migration Steps
- Refer to the migration guide for a complete list of changes: file:/home/runner/work/keycloak-rel/keycloak-rel/target/web/docs/latest/upgrading/#migration-changes
🐛 Bug Fixes
- #39469: Fix Securing Apps links to adapters docs
- #39486: Email server credentials can be harvested through host/port manipulation in admin/api
- #39541: Fix doc link to FGAP v1 in docs
- #39543: Apply edits to Operators Guide in docs
- #39572: Edit Observability Guide in docs
- #39590: Fix callouts in Operator guide in docs
- #39638: Sessions from Infinispan should be mapped lazily for the Admin UI
- #39651: Speed up Infinispan list of all sessions by more eagerly removing old client sessions
- #39665: When logging in, all client sessions are loaded which is slow in oidc
- #39130: Authorization Code Flow Fails Scope Validation After Credential Definition Migration to Realm Level in oid4vc
- #39157: [quarkus-next] TestEngine with ID 'junit-jupiter' failed to discover tests in dist/quarkus
- #39264: [OID4VCI] Documentation Errors in docs
- #39358: Aggregated policy: Cannot select policies that do not appear in the drop-down list in admin/ui
- #39450: quarkus runtime options are treated as buildtime options in dist/quarkus
- #39496: [26.2.3/26.1.5] Regression: empty ClientList in UI for Custom UserStorageProvider in admin/ui
- #39499: UI does not show user's attributes after reentering the Attributes TAB in admin/ui
- #39502: Refreshed tokens are not persisted for IDP token exchange in token-exchange
- #39509: UI does not show organization's attributes after reentering the Attributes TAB in account/ui
- #39538: Autocomplete in Mapper type of user federation broken in admin/ui
- #39540: Forms IT tests breaks with Chrome 136.0.7103.59 in ci
- #39612: Unable to change the OTP hash algorithm in admin/ui
- #39614: Keycloak not using custom Infinispan config in infinispan
- #39663: Duplicate validation message “Please specify username.” shown on login form in login/ui
- #39693: Clicking on the jump links removes the localization of the UI in admin/ui
- #39697: Authorization documentation shows the wrong view in authorization-services
- #39710: Recreate update is not scaling down the statefulset to zero in operator
- #39724: Hibernate LazyInitializationException when deleting client with CompositeRoles in core
- #39753: POST realm API returns 400 on conflict instead of 409 in version 26.2.4 in admin/api
- #39798: Documentation has outdated link to the "latest" branch of quickstarts in docs
- #39800: [KEYCLOAK CI] - AuroraDB IT - Create EC2 runner instance in ci