recipe-maintainers/keycloak
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: upgrade to 10.8.0+26.6.3 #3

Closed
autonomic-bot wants to merge 2 commits from upgrade-10.7.2+26.6.2 into master
pull from: upgrade-10.7.2+26.6.2
merge into: recipe-maintainers:master
Conversation 4 Commits 2 Files Changed 1 +3 -3
autonomic-bot commented 2026-06-02 23:14:45 +00:00
Owner
Copy Link

keycloak upgrade: 10.7.1+26.6.2 → 10.8.0+26.6.3

Image tag changes

service image old tag new tag
app keycloak/keycloak 26.6.2 26.6.3
db mariadb 12.2 12.3

Release notes summary

keycloak/keycloak 26.6.2 → 26.6.3 (patch/security release):

  • 16 security fixes including CVE issues affecting OIDC, SAML, WebAuthn, LDAP
  • Upgraded to Quarkus 3.33.2
  • Bug fixes: realm migration persistence, LDAP password reset handling
  • No config changes required; no breaking changes

mariadb 12.2 → 12.3 (minor release):

  • InnoDB snapshot isolation now defaults to ON (was OFF); no known impact on Keycloak
  • Removed deprecated vars big_tables, large_page_size, storage_engine — not used by this recipe
  • No migration steps required for this containerized use case

Operator Action Required

None — patch-level security update for Keycloak; minor version bump for MariaDB with no breaking changes for this deployment.

Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.

cc @trav @notplants

## keycloak upgrade: 10.7.1+26.6.2 → 10.8.0+26.6.3 ### Image tag changes | service | image | old tag | new tag | |---------|-------|---------|---------| | app | keycloak/keycloak | 26.6.2 | 26.6.3 | | db | mariadb | 12.2 | 12.3 | ### Release notes summary **keycloak/keycloak 26.6.2 → 26.6.3** (patch/security release): - 16 security fixes including CVE issues affecting OIDC, SAML, WebAuthn, LDAP - Upgraded to Quarkus 3.33.2 - Bug fixes: realm migration persistence, LDAP password reset handling - No config changes required; no breaking changes **mariadb 12.2 → 12.3** (minor release): - InnoDB snapshot isolation now defaults to ON (was OFF); no known impact on Keycloak - Removed deprecated vars `big_tables`, `large_page_size`, `storage_engine` — not used by this recipe - No migration steps required for this containerized use case ### Operator Action Required None — patch-level security update for Keycloak; minor version bump for MariaDB with no breaking changes for this deployment. Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review. cc @trav @notplants
autonomic-bot added 1 commit 2026-06-02 23:14:45 +00:00
chore: upgrade to 10.7.2+26.6.2 4efd1c45bd 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
autonomic-bot requested review from trav 2026-06-02 23:14:45 +00:00
autonomic-bot requested review from notplants 2026-06-02 23:14:45 +00:00
autonomic-bot changed title from chore: upgrade to 10.7.2+26.6.2 to chore: upgrade to 10.8.0+26.6.3 2026-06-05 02:28:20 +00:00
autonomic-bot added 1 commit 2026-06-05 02:28:21 +00:00
chore: upgrade to 10.8.0+26.6.3
All checks were successful
cc-ci/testme cc-ci: success
Details
bfe0d16fc6
autonomic-bot commented 2026-06-05 02:28:25 +00:00
Author
Owner
Copy Link

!testme

!testme
autonomic-bot commented 2026-06-05 02:28:54 +00:00
Author
Owner
Copy Link

🌻 cc-ci — keycloak @ bfe0d16f ❌ failure

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `keycloak` @ `bfe0d16f` ❌ **failure** [![cc-ci result card](https://ci.commoninternet.net/runs/186/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/186) [![level](https://ci.commoninternet.net/runs/186/badge.svg)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/186) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/186) · [dashboard](https://ci.commoninternet.net/)
autonomic-bot commented 2026-06-05 02:38:49 +00:00
Author
Owner
Copy Link

!testme

!testme
autonomic-bot commented 2026-06-05 02:38:58 +00:00
Author
Owner
Copy Link

🌻 cc-ci — keycloak @ bfe0d16f ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `keycloak` @ `bfe0d16f` ✅ **passed** [![cc-ci result card](https://ci.commoninternet.net/runs/187/summary.png)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/187) [![level](https://ci.commoninternet.net/runs/187/badge.svg)](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/187) [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/187) · [dashboard](https://ci.commoninternet.net/)
notplants closed this pull request 2026-06-08 17:16:44 +00:00
All checks were successful
cc-ci/testme cc-ci: success
Details

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
trav
notplants
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
autonomic autonomic-bot notplants trav
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: recipe-maintainers/keycloak#3
No description provided.
Delete Branch "upgrade-10.7.2+26.6.2"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?