Skip to content

chore: prepare keycloak v26.7.4 release - #143

Merged
mikkeldamsgaard merged 1 commit into
mainfrom
release/keycloak-26.7.4
Sep 17, 2026
Merged

mikkeldamsgaard merged 1 commit into
mainfrom
release/keycloak-26.7.4

Conversation

@mikkeldamsgaard

Copy link
Copy Markdown
Contributor

Release keycloak 26.7.4 — the chart version syncs with the upstream Keycloak appVersion, already bumped on main via #141.

Changes since the keycloak-26.7.2 tag:

Merging this triggers the release workflow (GHCR OCI push, keycloak-26.7.4 tag, GitHub release).

How to verify

helm lint charts/keycloak      # clean
helm unittest charts/keycloak  # 103 tests passing
make e2e-keycloak              # dev / postgres / replicas all passed on 26.7.4 in #141 CI and locally

🤖 Generated with Claude Code

Sync chart version with upstream appVersion 26.7.4 (already bumped on
main via #141).

Security: Keycloak 26.7.2 -> 26.7.4 — 26 upstream CVE fixes, notably
CVE-2026-17526 (impersonation-role privilege escalation to realm admin),
CVE-2026-16089 (auth-code retargeting), CVE-2026-16093 (signed-JWT
policy bypass), and CVE-2026-79651 (unauthenticated DoS).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@mikkeldamsgaard
mikkeldamsgaard merged commit 445be3c into main Sep 17, 2026
14 checks passed
@mikkeldamsgaard
mikkeldamsgaard deleted the release/keycloak-26.7.4 branch September 17, 2026 18:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant