Upstream sources — keycloak

service	image	source repo	releases / changelog
app	keycloak/keycloak	https://github.com/keycloak/keycloak	https://github.com/keycloak/keycloak/releases
db	mariadb	https://github.com/MariaDB/server	https://mariadb.com/docs/release-notes/community-server/

Standing notes

keycloak/keycloak uses KC_DB=mariadb backend; mariadb minor version bumps (12.x→12.y) are low-risk for Keycloak but test transaction isolation behavior.
mariadb 12.3 changes innodb_snapshot_isolation default to ON (was OFF in 12.2); no Keycloak-specific incompatibility known.
MariaDB removed deprecated vars big_tables, large_page_size, storage_engine in 12.x — not used by Keycloak's compose config.
Keycloak patch releases (26.x.y) are security/bug fixes only; no config changes expected between 26.6.2 → 26.6.3.
Recipe version label scheme: <recipe-semver>+<keycloak-version> (e.g. 10.7.2+26.6.2).