## keycloak upgrade: 10.7.1+26.6.2 → 10.8.0+26.6.3
### Image tag changes
| service | image | old tag | new tag |
|---------|-------|---------|---------|
| app | keycloak/keycloak | 26.6.2 | 26.6.3 |
| db | mariadb | 12.2 | 12.3 |
### Release notes summary
**keycloak/keycloak 26.6.2 → 26.6.3** (patch/security release):
- 16 security fixes including CVE issues affecting OIDC, SAML, WebAuthn, LDAP
- Upgraded to Quarkus 3.33.2
- Bug fixes: realm migration persistence, LDAP password reset handling
- No config changes required; no breaking changes
**mariadb 12.2 → 12.3** (minor release):
- InnoDB snapshot isolation now defaults to ON (was OFF); no known impact on Keycloak
- Removed deprecated vars `big_tables`, `large_page_size`, `storage_engine` — not used by this recipe
- No migration steps required for this containerized use case
### Operator Action Required
None — patch-level security update for Keycloak; minor version bump for MariaDB with no breaking changes for this deployment.
Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.
cc @trav @notplants
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
keycloak upgrade: 10.7.1+26.6.2 → 10.8.0+26.6.3
Image tag changes
Release notes summary
keycloak/keycloak 26.6.2 → 26.6.3 (patch/security release):
mariadb 12.2 → 12.3 (minor release):
big_tables,large_page_size,storage_engine— not used by this recipeOperator Action Required
None — patch-level security update for Keycloak; minor version bump for MariaDB with no breaking changes for this deployment.
Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.
cc @trav @notplants
chore: upgrade to 10.7.2+26.6.2to chore: upgrade to 10.8.0+26.6.3!testme
🌻 cc-ci —
keycloak@bfe0d16f❌ failurefull logs · dashboard
!testme
🌻 cc-ci —
keycloak@bfe0d16f✅ passedfull logs · dashboard
🌻 cc-ci —
keycloak@bfe0d16f❌ killed → https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/549(summary card unavailable — see the run for details.) full logs · dashboard
🌻 cc-ci —
keycloak@bfe0d16f❌ killed → https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/550(summary card unavailable — see the run for details.) full logs · dashboard
!testme
🌻 cc-ci —
keycloak@bfe0d16f✅ passedfull logs · dashboard
Auto-closed by cc-ci canonical sweep: its changes are already in upstream main (merged upstream); mirror main re-synced
Pull request closed