Keycloak Files

Upgrading

Before upgrading refer to the migration guide for a complete list of changes.

All resolved issues

Enhancements

• #39469](https://github.com/href="https://github.com/keycloak/keycloak/issues/39469">/issues/39469) Fix Securing Apps links to adapters docs
• #39486](https://github.com/href="https://github.com/keycloak/keycloak/issues/39486">/issues/39486) Email server credentials can be harvested through host/port manipulation admin/api
• #39541](https://github.com/href="https://github.com/keycloak/keycloak/issues/39541">/issues/39541) Fix doc link to FGAP v1 docs
• #39543](https://github.com/href="https://github.com/keycloak/keycloak/issues/39543">/issues/39543) Apply edits to Operators Guide docs
• #39572](https://github.com/href="https://github.com/keycloak/keycloak/issues/39572">/issues/39572) Edit Observability Guide docs
• #39590](https://github.com/href="https://github.com/keycloak/keycloak/issues/39590">/issues/39590) Fix callouts in Operator guide docs
• #39638](https://github.com/href="https://github.com/keycloak/keycloak/issues/39638">/issues/39638) Sessions from Infinispan should be mapped lazily for the Admin UI
• #39651](https://github.com/href="https://github.com/keycloak/keycloak/issues/39651">/issues/39651) Speed up Infinispan list of all sessions be more eagerly remove old client sessions
• #39665](https://github.com/href="https://github.com/keycloak/keycloak/issues/39665">/issues/39665) When logging in, all client sessions are loaded which is slow oidc

Bugs

• #39130](https://github.com/href="https://github.com/keycloak/keycloak/issues/39130">/issues/39130) Authorization Code Flow Fails Scope Validation After Credential Definition Migration to Realm Level oid4vc
• #39157](https://github.com/href="https://github.com/keycloak/keycloak/issues/39157">/issues/39157) [quarkus-next] TestEngine with ID 'junit-jupiter' failed to discover tests dist/quarkus
• #39264](https://github.com/href="https://github.com/keycloak/keycloak/issues/39264">/issues/39264) [OID4VCI] Documentation Errors docs
• #39358](https://github.com/href="https://github.com/keycloak/keycloak/issues/39358">/issues/39358) Aggregated policy: Cannot select policies that do not appear in the drop-down list admin/ui
• #39450](https://github.com/href="https://github.com/keycloak/keycloak/issues/39450">/issues/39450) quarkus runtime options are treated as buildtime options dist/quarkus
• #39496](https://github.com/href="https://github.com/keycloak/keycloak/issues/39496">/issues/39496) [26.2.3/26.1.5] Regression: empty ClientList in UI for Custom UserStorageProvider admin/ui
• #39499](https://github.com/href="https://github.com/keycloak/keycloak/issues/39499">/issues/39499) UI does not show user's attributes after reentering the Attributes TAB admin/ui
• #39502](https://github.com/href="https://github.com/keycloak/keycloak/issues/39502">/issues/39502) Refreshed tokens are not persisted for IDP token exchange token-exchange
• #39509](https://github.com/href="https://github.com/keycloak/keycloak/issues/39509">/issues/39509) UI does not show organization's attributes after reentering the Attributes TAB account/ui
• #39538](https://github.com/href="https://github.com/keycloak/keycloak/issues/39538">/issues/39538) Autocomplete in Mapper type of user federation broken admin/ui
• #39540](https://github.com/href="https://github.com/keycloak/keycloak/issues/39540">/issues/39540) Forms IT tests breaks with Chrome 136.0.7103.59 ci
• #39612](https://github.com/href="https://github.com/keycloak/keycloak/issues/39612">/issues/39612) Unable to change the OTP hash algorithm admin/ui
• #39614](https://github.com/href="https://github.com/keycloak/keycloak/issues/39614">/issues/39614) Keycloak not using custom Infinispan config infinispan
• #39663](https://github.com/href="https://github.com/keycloak/keycloak/issues/39663">/issues/39663) Duplicate validation message “Please specify username.” shown on login form login/ui
• #39693](https://github.com/href="https://github.com/keycloak/keycloak/issues/39693">/issues/39693) Clicking on the jump links removes the localization of the UI admin/ui
• #39697](https://github.com/href="https://github.com/keycloak/keycloak/issues/39697">/issues/39697) Authorization documentation shows the wrong view authorization-services
• #39710](https://github.com/href="https://github.com/keycloak/keycloak/issues/39710">/issues/39710) Recreate update is not scaling down the statefulset to zero operator
• #39724](https://github.com/href="https://github.com/keycloak/keycloak/issues/39724">/issues/39724) Hibernate LazyInitializationException when deleting client with CompositeRoles core
• #39753](https://github.com/href="https://github.com/keycloak/keycloak/issues/39753">/issues/39753) POST realm API returns 400 on conflict instead of 409 in version 26.2.4 admin/api
• #39798](https://github.com/href="https://github.com/keycloak/keycloak/issues/39798">/issues/39798) Documentation has outdated link to the "latest" branch of quickstarts docs
• #39800](https://github.com/href="https://github.com/keycloak/keycloak/issues/39800">/issues/39800) [KEYCLOAK CI] - AuroraDB IT - Create EC2 runner instance ci