Update Gradle/NPM, dependencies, Keycloak to v26.1.1 #5060
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
26.1.0
->26.1.1
26.1.0
->26.1.1
Release Notes
keycloak/keycloak-nodejs-connect (keycloak-connect)
v26.1.1
Compare Source
keycloak/keycloak (keycloak-js)
v26.1.1
Compare Source
Highlights
New option in X.509 authenticator to abort authentication if CRL is outdated
The X.509 authenticator has a new option
x509-cert-auth-crl-abort-if-non-updated
(CRL abort if non updated in the Admin Console) to abort the login if a CRL is configured to validate the certificate and the CRL is not updated in the time specified in the next update field. The new option defaults totrue
in the Admin Console. For more details about the CRL next update field, see RFC5280, Section-5.1.2.5.The value
false
is maintained for compatibility with the previous behavior. Note that existing configurations will not have the new option and will act as if this option was set tofalse
, but the Admin Console will add the default valuetrue
on edit.New option in Send Reset Email to force a login after reset credentials
The
reset-credential-email
(Send Reset Email) is the authenticator used in the reset credentials flow (forgot password feature) for sending the email to the user with the reset credentials token link. This authenticator now has a new optionforce-login
(Force login after reset). When this option is set totrue
, the authenticator terminates the session and forces a new login.For more details about this new option, see Enable forgot password.
Upgrading
Before upgrading refer to the migration guide for a complete list of changes.
All resolved issues
Enhancements
organizations
admin/client-java
docs
Bugs
translations
ldap
admin/ui
dist/quarkus
docs
organizations
login/ui
login/ui
login/ui
organizations
core
docs
core
operator
ci
ci
authentication
docs
ci
login/ui
translations
admin/ui
Configuration
📅 Schedule: Branch creation - "every weekday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.