Upgrading
Before upgrading refer to the migration guide for a complete list of changes.
All resolved issues
Enhancements
- #32152 Clarify the behaviour of multiple Operator versions installed in the same cluster
operator - #33275 Better logging when error happens during transaction commit
storage
Bugs
- #8935 keycloak.js example from the documentation leads to error path
adapter/javascript - #19358 Issue with concurrent user & group delete, unable to cleanup resource server user-policy & group-policy
authorization-services - #31848 Repeated email verifications while logging in through IDP caused by email case sensitivity
authentication - #32266 LDAP Import: KERBEROS_PRINCIPAL not updated when UserPrincipal changes and user already exists
ldap - #32617 Nightly Cypress tests for the Admin Console are failing on Firefox
admin/ui - #32844 Login V2: Missing "dir" attributes
login/ui - #32847 Admin UI defaults to master realm even without permissions to it
admin/ui - #32962 Possible issue with unavailable CryptoIntegration when using keycloak-authz-client with private_key_jwt and ECDSA algorithm
oidc - #33513 Can get authorization code on a non verified user with some specific kc_action (AIA)
oidc - #33539 Keycloak In Docker: ERROR: Strict hostname resolution configured but no hostname setting provided
docs - #33549 Flaky test: org.keycloak.testsuite.broker.KcOidcBrokerTest#testPostBrokerLoginFlowWithOTP_bruteForceEnabled
ci - #33557 Unable to submit forms in Safari
account/ui - #33576 Broken links / anchors after KC26 release
docs - #33578 In imported realms, the ability to use environment variables has disappeared
import-export - #33585 Fix runaway asterisk formatting in TLS documentation
docs - #33638 Non-optimized start command gives erroneous warnings for runtime spi options
dist/quarkus - #33642 RTL not working on keycloak.v2 login template
login/ui - #33645 keycloak-js register broken: createRegisterUrl not awaited
adapter/javascript - #33699 Failure to redirect to organization IdP when the organization scope is included
organizations - #33735 Organizations section is shown in account console if organizations is not enabled for a realm.
account/ui - #33776 [Regression] 26.0.0 return empty "access: []" JWT for Docker-v2 Auth provider, resulting in "access denied"
authentication - #33777 Error when adding or removing a user from an organisation when there are 2 or more Keycloak servers in a cluster
organizations - #33780 Upgrade to 26 fails with 'ERROR: index "idx_us_sess_id_on_cl_sess" does not exist'
core - #33814 NPE when device representation cannot be parsed
authentication - #33817 NEP when Default Role is not present on CachedRealm
infinispan - #33874 [Keycloak CI] - AuroraDB IT - Error creating EC2 runner instance
- #33875 [Keycloak CI] - FIPS IT - Failed to fetch maven
- #33883 Auth not possible for auth session where user was enabled in the meantime
authentication - #33907 NPE thrown in whoami endpoint
admin/ui - #33967 password is a required field
admin/ui