26.3.2
📦 keycloakView on GitHub →
✨ 1 features🐛 18 fixes🔧 6 symbols
Summary
This release introduces a new option for OIDC IDP authentication and includes numerous bug fixes, dependency upgrades (including Infinispan 15.0.18.Final), and CI stability improvements.
Migration Steps
- Refer to https://www.keycloak.org/docs/latest/upgrading/#migration-changes for a complete list of changes before upgrading.
✨ New Features
- #40237: Add option "Requires short state parameter" to OIDC IDP authentication
🐛 Bug Fixes
- #39091: Fix flaky test: org.keycloak.testsuite.cluster.JGroupsCertificateRotationClusterTest#testCoordinatorHasScheduleTask
- #39634: Update MariaDB connector to 3.5.3 in dist/quarkus
- #39854: Fix flaky test: org.keycloak.testsuite.cluster.PermissionTicketInvalidationClusterTest#crudWithFailover
- #40553: Upgrade org.postgresql:postgresql to version 42.7.7 to address CVE-2025-49146
- #40736: Address CVE-2025-49574 - Exposure of Resource to Wrong Sphere vulnerability in io.vertx:vertx-core
- #40782: Fix flaky test: org.keycloak.testsuite.cluster.RealmInvalidationClusterTest#crudWithFailover
- #40784: Fix default jdbc-ping cluster setup for distributed caches failing in Oracle
- #40977: Fix loglevel recorded from build phase in dist/quarkus
- #40980: Fix issue preventing update of security-admin-console via admin UI with volatile sessions
- #40995: Fix LDAP ModelException: At least one condition should be provided to OR query
- #41018: Fix flaky test: org.keycloak.testsuite.cluster.ClientInvalidationClusterTest#crudWithFailover
- #41038: Fix FIPS errors in CI
- #41082: Fix multiple primary key definition when attempting to upgrade after 26.3.0
- #41103: Fix Service Account users showing in the User List in admin/ui
- #41105: Fix Unknown relation error when removing realm role with --db-schema configured
- #41152: Fix documentation issue where docs use em-dashes instead of double dashes for SPI options in regular text
- #41204: Fix UpdateTest CI failures
- #41370: Fix MariaDB connector dependency not being properly overriden in 26.3
Affected Symbols
org.keycloak.testsuite.cluster.JGroupsCertificateRotationClusterTestorg.keycloak.testsuite.cluster.PermissionTicketInvalidationClusterTestorg.keycloak.testsuite.cluster.RealmInvalidationClusterTestorg.keycloak.testsuite.cluster.ClientInvalidationClusterTestio.vertx:vertx-coreorg.postgresql:postgresql