Skip to content

chore: prepare keycloak v26.6.3 release#102

Merged
mikkeldamsgaard merged 1 commit into
mainfrom
release/keycloak-26.6.3
Jun 11, 2026
Merged

chore: prepare keycloak v26.6.3 release#102
mikkeldamsgaard merged 1 commit into
mainfrom
release/keycloak-26.6.3

Conversation

@mikkeldamsgaard

Copy link
Copy Markdown
Contributor

Summary

Release keycloak 26.6.3 — chart version syncs with the upstream Keycloak appVersion (already 26.6.3 on main via #100). Changes since the keycloak-26.6.1 tag:

  • Security: Keycloak 26.6.1 → 26.6.3 (~32 upstream CVE fixes incl. session fixation, redirect-URI bypass, SSRF, refresh-token reuse); also fixes a post-realm-migration exit-code-1 bug
  • Fixed: publishNotReadyAddresses: true on the JGroups headless service — simultaneously started replicas previously formed singleton clusters and merged late (split-brain), losing cache invalidations (manifested as 403s in the replicas e2e)

Merging this triggers the release workflow (GHCR OCI push, keycloak-26.6.3 tag, GitHub release).

How to verify

helm lint charts/keycloak    # clean
helm unittest charts/keycloak  # 103 tests passing
make e2e-keycloak            # all 3 scenarios passed on this content in PR #100 CI

🤖 Generated with Claude Code

Sync chart version with upstream appVersion 26.6.3 (already bumped on
main via #100).

- Security: Keycloak 26.6.1 → 26.6.3 (~32 upstream CVE fixes)
- Fixed: publishNotReadyAddresses on the JGroups headless service
  (split-brain cluster formation with simultaneous replica starts)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@mikkeldamsgaard mikkeldamsgaard merged commit 1a4844e into main Jun 11, 2026
13 checks passed
@mikkeldamsgaard mikkeldamsgaard deleted the release/keycloak-26.6.3 branch June 11, 2026 20:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant