Commit graph

30693 commits

Author SHA1 Message Date
Hosted Weblate
a87d162e94
Updated translation for French
Language: fr

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Sylvain Pichon <service@spichon.fr>
2026-04-08 02:45:22 +02:00
Hosted Weblate
ffc63fcf3a
Updated translation for Indonesian
Language: id

Co-authored-by: Andika Triwidada <andika@gmail.com>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Andika Triwidada <andika@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
2026-04-08 02:45:22 +02:00
Hosted Weblate
8e7a1ed136
Updated translation for Czech
Language: cs

Updated translation for Czech

Language: cs

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Peter Schiffer <peter@pschiffer.eu>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Peter Schiffer <peter@pschiffer.eu>
2026-04-08 02:45:22 +02:00
Hosted Weblate
0fab7ba0b3
Updated translation for German
Language: de

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
2026-04-08 02:45:22 +02:00
Steven Hawkins
bb10a2c81c
fix: combining / removing static and initialization logic (#46918)
closes: #46917

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
2026-04-07 13:52:37 -03:00
azc9673
a2db1bb43e
Handle special characters in mvnw.cmd Windows paths
Fix Windows wrapper startup when the script or Maven path contains spaces or apostrophes.

Closes #47499

Signed-off-by: azc9673 <azc9673@nyu.edu>

Signed-off-by: azc9673 <azc9673@nyu.edu>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-04-07 18:24:21 +02:00
andymunro
63edca0a39
Update health check instructions
Closes #47393

Signed-off-by: AndyMunro <amunro@redhat.com>
2026-04-07 18:04:37 +02:00
Tanner Smith
c9627d98e4
Validate .conf extension for --config-file option (#47696)
* Validate .conf extension for --config-file option

The --config-file option and KC_CONFIG_FILE environment variable
silently ignored configuration files that did not use the .conf
extension. This happened because the underlying SmallRye config
source loader filters by file extension, returning an empty list
for non-.conf files without any indication to the user.

Added explicit validation in both the CLI option setter and the
config source file resolution to reject files that do not end
with .conf, giving the user a clear error message instead of
silently ignoring their configuration.

Closes #46978

Signed-off-by: Tanner Smith <griffonbyte@proton.me>

* fix: validate config file extension before checking existence

Move the .conf extension check before the file existence check in
setConfigFile(). When a file with a wrong extension does not exist
relative to the working directory, the existence check would fire
first, masking the more specific extension validation error.

Closes keycloak/keycloak#47696

Signed-off-by: Tanner Smith <griffonbyte@proton.me>

---------

Signed-off-by: Tanner Smith <griffonbyte@proton.me>
2026-04-07 15:54:47 +00:00
Steven Hawkins
0b0f2b795c
fix: mapping mtls enabled to a runtime option (#47751)
closes: #47750

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-04-07 15:16:28 +00:00
dependabot[bot]
d1b9975dcb
Bump the actions-dependencies group across 1 directory with 3 updates (#47168)
Bumps the actions-dependencies group with 3 updates in the / directory: [github/codeql-action](https://github.com/github/codeql-action), [manusa/actions-setup-minikube](https://github.com/manusa/actions-setup-minikube) and [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action).


Updates `github/codeql-action` from 4.32.3 to 4.32.6
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](9e907b5e64...0d579ffd05)

Updates `manusa/actions-setup-minikube` from 2.15.0 to 2.16.1
- [Release notes](https://github.com/manusa/actions-setup-minikube/releases)
- [Commits](8234275e03...96202dee4a)

Updates `aquasecurity/trivy-action` from 0.34.0 to 0.35.0
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](c1824fd6ed...57a97c7e78)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.32.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-dependencies
- dependency-name: manusa/actions-setup-minikube
  dependency-version: 2.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-dependencies
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-07 16:26:01 +02:00
dependabot[bot]
28839f181e
Bump vite from 7.3.0 to 7.3.2 in /js (#47785)
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.0 to 7.3.2.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.2/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.3.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-07 15:58:30 +02:00
Alexander Schwartz
1abce3ac8b
Avoid running CI on copilot branches
Closes #47435

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-04-07 14:34:47 +02:00
Martin Bartoš
0b2ce29e89
[client-v2] Require 'clientId' in the payload (#47533)
* Require clientId in the payload

Closes #47524

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Require 'protocol' field to be specified

Closes #47579

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Client API v2 CLI Client: Jakarta validation errors are not handled

Closes #47574

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Use getRequest() for POST in test

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2026-04-07 14:07:32 +02:00
Stian Thorgersen
8a1c921415
Prevent creating policies if they don't reference only the owner resource (#496) (#47803)
Closes CVE-2026-4636

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
2026-04-07 12:46:15 +02:00
Christopher Leigh
bf83d75191
Resolve scope (#43339)
* resolve org from scope instead of client session note (#42836)

Signed-off-by: Chris Leigh <3805338+Tungsten78@users.noreply.github.com>

* Keep track of current organization when refreshing tokens

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>

* Handling select organization when querying userinfo and introspection endpoints

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>

* More tests

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>

* Test to check prevent single to all

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>

* Error when changing scopes to ANY

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>

---------

Signed-off-by: Chris Leigh <3805338+Tungsten78@users.noreply.github.com>
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
2026-04-07 12:17:13 +02:00
Marek Posolda
f29249f3d7
Improve performance of scope processing in TokenManager. Limit for maximum length of OIDC parameters in Token endpoint (#478) (#47799)
closes #47716
Closes CVE-2026-4634


(cherry picked from commit b455ee4f28)

Signed-off-by: mposolda <mposolda@gmail.com>
2026-04-07 11:17:17 +02:00
Marek Posolda
18dbc74960
Adding namespaces for single-use cache entries for PAR and OAuth code (#471) (#47798)
closes #47719
closes CVE-2026-4282
closes CVE-2026-4325


(cherry picked from commit 9046f20112)

Signed-off-by: mposolda <mposolda@gmail.com>
2026-04-07 11:13:35 +02:00
Pedro Ruivo
3af5de75a8
Stabilize EmbeddedInfinispanSplitBrainTest (#47645)
Closes #46883

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2026-04-07 10:38:13 +02:00
Martin Bartoš
daf9e69a9f
NPE when using HttpClient and enabled tracing (#47687)
Closes #47379

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2026-04-07 10:13:54 +02:00
Rahul Ramkumar
799699a808
Add KCRAW_ prefix for environment variables to preserve literal values (#47197)
Closes #46657

Signed-off-by: Rahul Ramkumar <rahulram226@gmail.com>
2026-04-07 10:12:18 +02:00
Weblate (bot)
3378e99e34
Translations update from Hosted Weblate (#47665)
* Updated translation for Turkish

Language: tr

Updated translation for Turkish

Language: tr

Updated translation for Turkish

Language: tr

Co-authored-by: Arif EROL <arif.erol16@gmail.com>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: spctr <spctr@users.noreply.github.com>
Signed-off-by: Arif EROL <arif.erol16@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: spctr <spctr@users.noreply.github.com>

* Translated using Weblate (German)

Currently translated at 100.0% (1 of 1 strings)

Translated using Weblate (German)

Currently translated at 100.0% (1 of 1 strings)

Added translation using Weblate (German)

Translated using Weblate (German)

Currently translated at 100.0% (1 of 1 strings)

Added translation using Weblate (German)

Translated using Weblate (German)

Currently translated at 100.0% (1 of 1 strings)

Added translation using Weblate (German)

Translated using Weblate (German)

Currently translated at 100.0% (1 of 1 strings)

Updated translation for German

Language: de

Updated translation for German

Language: de

Added translation using Weblate (German)

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Robin <39960884+robson90@users.noreply.github.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Robin <39960884+robson90@users.noreply.github.com>
Translate-URL: https://hosted.weblate.org/projects/keycloak/keycloak-e-mail-theme/de/
Translate-URL: https://hosted.weblate.org/projects/keycloak/keycloak-login-theme/de/
Translate-URL: https://hosted.weblate.org/projects/keycloak/keycloak-v2-login-theme/de/
Translate-URL: https://hosted.weblate.org/projects/keycloak/keycloak-welcome-theme/de/
Translation: Keycloak/Keycloak E-mail theme
Translation: Keycloak/Keycloak Login theme
Translation: Keycloak/Keycloak Welcome theme
Translation: Keycloak/Keycloak v2 Login theme

* Updated translation for Czech

Language: cs

Updated translation for Czech

Language: cs

Updated translation for Czech

Language: cs

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Peter Schiffer <peter@pschiffer.eu>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Peter Schiffer <peter@pschiffer.eu>

* Translated using Weblate (Indonesian)

Currently translated at 100.0% (1 of 1 strings)

Added translation using Weblate (Indonesian)

Translated using Weblate (Indonesian)

Currently translated at 100.0% (1 of 1 strings)

Added translation using Weblate (Indonesian)

Updated translation for Indonesian

Language: id

Translated using Weblate (Indonesian)

Currently translated at 100.0% (1 of 1 strings)

Translated using Weblate (Indonesian)

Currently translated at 100.0% (1 of 1 strings)

Updated translation for Indonesian

Language: id

Added translation using Weblate (Indonesian)

Added translation using Weblate (Indonesian)

Co-authored-by: Andika Triwidada <andika@gmail.com>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Andika Triwidada <andika@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Translate-URL: https://hosted.weblate.org/projects/keycloak/keycloak-e-mail-theme/id/
Translate-URL: https://hosted.weblate.org/projects/keycloak/keycloak-login-theme/id/
Translate-URL: https://hosted.weblate.org/projects/keycloak/keycloak-v2-login-theme/id/
Translate-URL: https://hosted.weblate.org/projects/keycloak/keycloak-welcome-theme/id/
Translation: Keycloak/Keycloak E-mail theme
Translation: Keycloak/Keycloak Login theme
Translation: Keycloak/Keycloak Welcome theme
Translation: Keycloak/Keycloak v2 Login theme

* Updated translation for Dutch

Language: nl

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Hosted Weblate <hosted@weblate.org>

* Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Updated translation for French

Language: fr

Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: Sylvain Pichon <service@spichon.fr>

* Updated translation for Swedish

Language: sv

Translated using Weblate (Swedish)

Currently translated at 100.0% (1 of 1 strings)

Updated translation for Swedish

Language: sv

Translated using Weblate (Swedish)

Currently translated at 100.0% (1 of 1 strings)

Added translation using Weblate (Swedish)

Translated using Weblate (Swedish)

Currently translated at 100.0% (1 of 1 strings)

Added translation using Weblate (Swedish)

Translated using Weblate (Swedish)

Currently translated at 100.0% (1 of 1 strings)

Added translation using Weblate (Swedish)

Translated using Weblate (Swedish)

Currently translated at 100.0% (1 of 1 strings)

Added translation using Weblate (Swedish)

Updated translation for Swedish

Language: sv

Updated translation for Swedish

Language: sv

Updated translation for Swedish

Language: sv

Updated translation for Swedish

Language: sv

Co-authored-by: Daniel Nylander <daniel@danielnylander.se>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: bittin1ddc447d824349b2 <bittin@reimu.nl>
Signed-off-by: Daniel Nylander <daniel@danielnylander.se>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: bittin1ddc447d824349b2 <bittin@reimu.nl>
Translate-URL: https://hosted.weblate.org/projects/keycloak/keycloak-e-mail-theme/sv/
Translate-URL: https://hosted.weblate.org/projects/keycloak/keycloak-login-theme/sv/
Translate-URL: https://hosted.weblate.org/projects/keycloak/keycloak-v2-login-theme/sv/
Translate-URL: https://hosted.weblate.org/projects/keycloak/keycloak-welcome-theme/sv/
Translation: Keycloak/Keycloak E-mail theme
Translation: Keycloak/Keycloak Login theme
Translation: Keycloak/Keycloak Welcome theme
Translation: Keycloak/Keycloak v2 Login theme

---------

Signed-off-by: Arif EROL <arif.erol16@gmail.com>
Signed-off-by: Hosted Weblate <hosted@weblate.org>
Signed-off-by: spctr <spctr@users.noreply.github.com>
Signed-off-by: Robin <39960884+robson90@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Peter Schiffer <peter@pschiffer.eu>
Signed-off-by: Andika Triwidada <andika@gmail.com>
Signed-off-by: Sylvain Pichon <service@spichon.fr>
Signed-off-by: Daniel Nylander <daniel@danielnylander.se>
Signed-off-by: bittin1ddc447d824349b2 <bittin@reimu.nl>
Co-authored-by: Arif EROL <arif.erol16@gmail.com>
Co-authored-by: spctr <spctr@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Robin <39960884+robson90@users.noreply.github.com>
Co-authored-by: Peter Schiffer <peter@pschiffer.eu>
Co-authored-by: Andika Triwidada <andika@gmail.com>
Co-authored-by: Sylvain Pichon <service@spichon.fr>
Co-authored-by: Daniel Nylander <daniel@danielnylander.se>
Co-authored-by: bittin1ddc447d824349b2 <bittin@reimu.nl>
2026-04-07 10:10:03 +02:00
Alexander Schwartz
dee672728a
Fixing link as it has changed and is redirecting (#47793)
Closes #47792

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-04-07 09:52:45 +02:00
dependabot[bot]
601718646c
Bump undertow.version from 2.3.20.Final to 2.3.24.Final (#47549)
Bumps `undertow.version` from 2.3.20.Final to 2.3.24.Final.

Updates `io.undertow:undertow-servlet` from 2.3.20.Final to 2.3.24.Final
- [Release notes](https://github.com/undertow-io/undertow/releases)
- [Commits](https://github.com/undertow-io/undertow/compare/2.3.20.Final...2.3.24.Final)

Updates `io.undertow:undertow-core` from 2.3.20.Final to 2.3.24.Final
- [Release notes](https://github.com/undertow-io/undertow/releases)
- [Commits](https://github.com/undertow-io/undertow/compare/2.3.20.Final...2.3.24.Final)

---
updated-dependencies:
- dependency-name: io.undertow:undertow-servlet
  dependency-version: 2.3.24.Final
  dependency-type: direct:production
- dependency-name: io.undertow:undertow-core
  dependency-version: 2.3.24.Final
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-07 09:52:07 +02:00
Alexander Schwartz
97fce120ac
Finalizing release notes and migration guide for 26.6 (#47791)
Closes #47790

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-04-07 09:44:13 +02:00
Alexander Schwartz
a9a403b12f
Adding OAuth Client ID Metadata Document to the specifications list (#47706)
Closes #47705

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-04-07 09:40:58 +02:00
Ricardo Martin
103433eab1
Consider path params in the unsafe path for RedirectUtils (#436) (#47788)
Closes CVE-2026-3872

Signed-off-by: rmartinc <rmartinc@redhat.com>
2026-04-07 07:36:38 +00:00
Pedro Igor
049569b9fa
Persist kid for java keystore key providers
Closes #47495

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2026-04-07 08:20:25 +02:00
Mike
8cda7d6f26 Fix NPE when synchronizing LDAP user attributes
Signed-off-by: Mike <mmelvin0@gmail.com>
2026-04-06 10:58:27 -03:00
RafaelWO
b6743de80d Add createdAfter/createdBefore filter to GET /admin/realms/{realm}/users
Add server-side filtering of users by creation timestamp on the admin
REST API. This avoids the need to retrieve all users and filter
client-side, which is inefficient for large realms.

Two optional query parameters are added to both the user list and count
endpoints. They accept either ISO-8601 date strings (yyyy-MM-dd) or
epoch milliseconds, consistent with the existing events API date
filtering via DateUtil.

Closes #43829

Signed-off-by: RafaelWO <weingartner.rafael@hotmail.com>
2026-04-06 10:10:54 -03:00
Steven Hawkins
51b6f9b291
fix: promotes keycloak and realm import to v2beta1 (#45840)
closes: #45795

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-04-04 16:46:28 +02:00
Stefan Guilhen
b92e062a39 Use pwdUpdateTime attribute for password modification time on 389 DS/RHDS
Closes #47675

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2026-04-03 15:42:11 -03:00
Norbert Kelemen
1174c75fc2
Use KcAdmMain.CMD in test cases (#47709)
Signed-off-by: Norbert Kelemen <nkelemen18@nkelemen.hu>
2026-04-03 13:32:46 -04:00
Steven Hawkins
be8d5eaa3b
fix: using synchronization to prevent shutdown
closes: #47487

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-04-02 21:40:57 +00:00
kvfi
b6027fe65d Fix null username creation when OIDC/SAML attribute mappers references missing attribute
Closes #44598

Signed-off-by: kvfi <mail@ouafi.net>
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2026-04-02 18:34:14 -03:00
Pedro Igor
6a4f865013
Support for managing members via group resource type
Closes #46216

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2026-04-02 20:06:12 +02:00
Michal Vavřík
7df438da5c
fix release night doc build (#47721)
Closes: https://github.com/keycloak/keycloak/issues/47720
Fixes typo introduced by https://github.com/keycloak/keycloak/pull/29985

Signed-off-by: Michal Vavřík <michal.vavrik@aol.com>
2026-04-02 15:59:36 +00:00
dependabot[bot]
db330f57ee
Bump lodash-es from 4.17.23 to 4.18.1 in /js (#47729)
Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1)

---
updated-dependencies:
- dependency-name: lodash-es
  dependency-version: 4.18.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-02 17:55:41 +02:00
Ryan Emerson
00c0dee3c4 Display Javascript policy description and code in admin UI
Closes #47452

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2026-04-02 12:37:56 -03:00
Bruno Oliveira da Silva
5ed417e32b
Fix corrupted pnpm-lock.yaml with duplicate entries (#47727)
The pnpm-lock.yaml file contained duplicate entries for
serialize-javascript@7.0.5
at lines 4213 and 4217, which was causing CI failures. This occurred
because the
lockfile wasn't properly regenerated after the override was added to
package.json.

Regenerated the lockfile by removing it and running pnpm install to
ensure proper
synchronization with the overrides defined in package.json.

Signed-off-by: Bruno Oliveira da Silva <bruno@abstractj.com>
2026-04-02 15:07:37 +00:00
Václav Muzikář
3560286f0d
Update docs to better reflect FIPS support with Java 25. (#47699)
Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
2026-04-02 15:04:15 +02:00
Bruno Oliveira da Silva
e556494cec
Fix high-severity npm transitive dependency vulnerabilities via pnpm overrides (#47657)
Apply pnpm.overrides in js/package.json to force patched versions of
vulnerable transitive dependencies:

- picomatch ^2.3.1 → ^2.3.2 (ReDoS via extglob quantifiers)
- flatted ^3.2.9 → ^3.4.2 (Prototype Pollution and unbounded recursion DoS)
- minimatch ~3 → ^3.1.4 (multiple ReDoS vectors)
- minimatch ~9 → ^9.0.7 (ReDoS via repeated wildcards)
- @isaacs/brace-expansion ^5 → ^5.0.1 (uncontrolled resource consumption)
- serialize-javascript ^6 → ^7.0.3 (RCE via RegExp.flags)

pnpm.overrides is used here because none of the direct dependencies that
pull in these transitive packages have released fixes upstream yet:

- wireit 0.14.12 (latest stable) → picomatch 2.3.1 via chokidar/micromatch
- eslint 9.x → flatted 3.3.3 via flat-cache, minimatch 3.1.2
- mocha 11.x → serialize-javascript 6.0.2
- vite-plugin-dts 4.x → minimatch 9.0.5, @isaacs/brace-expansion 5.0.0

Since the vulnerable ranges (e.g. ^2.3.1, ^3.2.9) already permit the
patched versions, overrides simply force pnpm to resolve to the fixed
minor/patch release rather than the previously locked version.

Signed-off-by: Bruno Oliveira da Silva <bruno@abstractj.com>
2026-04-02 14:53:43 +02:00
Peter Skopek
356cd5ef41
Remove Liquibase dependency version from Keycloak root pom
closes #27986

Signed-off-by: Peter Skopek <peter.skopek@ibm.com>
2026-04-02 13:58:09 +02:00
Tomáš Kyjovský
e513374669
Add an operational procedure doc for CNPG switchover
Closes #47678

Signed-off-by: Tomas Kyjovsky <tkyjovsk@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-04-02 11:48:14 +00:00
Pedro Igor
c965fcffc4
Review error responses
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
Closes #47643

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2026-04-02 12:19:23 +02:00
Benjamin DeWeese
a9f571d940
Implementing locale based theme-description translation
Closes #47038

Signed-off-by: Benjamin DeWeese <bdeweesevans@gmail.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-04-02 11:40:45 +02:00
Pedro Ruivo
09eef36e90
CNPG - Backup And Restore followup
Closes #47531

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
2026-04-02 00:25:02 +02:00
Stefan Guilhen
7e8eb64a52
Add troubleshooting section to workflows documentation
- also add workflows as supported in release notes

Closes #47692

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
2026-04-02 00:05:04 +02:00
Thomas Diesler
de720a1b43
[OID4VCI] Initial public client for credential issuance (#45855)
closes #47280


Signed-off-by: Thomas Diesler <tdiesler@proton.me>
2026-04-01 18:48:40 +02:00
Thomas Diesler
c296ae1b41
Align selenium version across test suites
closes #47679

Signed-off-by: Thomas Diesler <tdiesler@proton.me>
2026-04-01 16:37:33 +00:00
Yike Gao
4b1d0a88bd
Fix save button inconsistent issue (#47686)
Closes #47398


Signed-off-by: Yike Gao <yikegao8@gmail.com>
2026-04-01 17:24:34 +02:00