This CR should be created in the same namespace as the Keycloak Deployment CR, defined in the field keycloakCRName.
-The realm field accepts a full RealmRepresentation.
Example of provision u
<feature-pack>
<groupId>org.keycloak</groupId>
<artifactId>keycloak-saml-adapter-galleon-pack</artifactId>
- <version>26.0.6</version>
+ <version>26.0.7</version>
</feature-pack>
</feature-packs>
<layers>
@@ -152,7 +152,7 @@
Example of provisi
<feature-pack>
<groupId>org.keycloak</groupId>
<artifactId>keycloak-saml-adapter-galleon-pack</artifactId>
- <version>26.0.6</version>
+ <version>26.0.7</version>
</feature-pack>
</feature-packs>
<layers>
diff --git a/nightly/server/directory-structure.html b/nightly/server/directory-structure.html
index e7be2c37762f..72421fd1ad7f 100644
--- a/nightly/server/directory-structure.html
+++ b/nightly/server/directory-structure.html
@@ -81,7 +81,7 @@
Directory Structure
Installation Locations
-
If you are installing from a zip file then by default there will be an install root directory of keycloak-26.0.6, which can be created anywhere you choose on your filesystem.
+
If you are installing from a zip file then by default there will be an install root directory of keycloak-26.0.7, which can be created anywhere you choose on your filesystem.
This CR should be created in the same namespace as the Keycloak Deployment CR, defined in the field keycloakCRName.
-The realm field accepts a full RealmRepresentation.
The recommended way to obtain a RealmRepresentation is by leveraging the export functionality Importing and Exporting Realms.
diff --git a/rss.xml b/rss.xml
index 757d2d16b5ac..6053365bf5ef 100644
--- a/rss.xml
+++ b/rss.xml
@@ -8,28 +8,74 @@
Keycloak Blogen-usKeycloak/SSO/Identity and Access Management
+
+ Keycloak 26.0.7 released
+ https://www.keycloak.org/2024/12/keycloak-2607-released
+ <p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
+
+
+<h2>Upgrading</h2>
+<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
+
+<h2>All resolved issues</h2>
+
+
+
+<h3>Enhancements</h3>
+<ul>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
+</ul>
+
+<h3>Bugs</h3>
+<ul>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
+</ul>
+
+
+ https://www.keycloak.org/2024/12/keycloak-2607-released
+ Tue, 3 Dec 2024 00:00:00 GMT
+ Keycloak Release
+
+ Keycloak 26.0.6 released
https://www.keycloak.org/2024/11/keycloak-2606-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -39,46 +85,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -330,23 +375,7 @@ Martin Besozzi (TwoGenIdentity)</p>
https://www.keycloak.org/2024/11/keycloak-2605-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -356,46 +385,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -409,23 +437,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2024/10/keycloak-2604-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -435,46 +447,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -570,23 +581,7 @@ who want to make good use of the previous day.</p>
https://www.keycloak.org/2024/10/keycloak-2602-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -596,46 +591,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -649,23 +643,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2024/10/keycloak-2601-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -675,46 +653,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -855,23 +832,7 @@ as well as non-public APIs may change at any time.</p>
https://www.keycloak.org/2024/10/keycloak-2600-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -881,46 +842,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -934,23 +894,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2024/09/keycloak-2506-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -960,46 +904,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -1175,23 +1118,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2024/09/keycloak-2505-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -1201,46 +1128,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -1466,23 +1392,7 @@ full of relevant, cutting-edge topics.</p>
https://www.keycloak.org/2024/08/keycloak-2504-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -1492,46 +1402,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -1593,23 +1502,7 @@ If you have any further questions, get in touch via email: <a href="mail
https://www.keycloak.org/2024/07/keycloak-2502-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -1619,46 +1512,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -2150,23 +2042,7 @@ and that domain is also set to the identity provider associated with the organiz
https://www.keycloak.org/2024/06/keycloak-2501-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -2176,46 +2052,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -2618,23 +2493,7 @@ full of relevant, cutting-edge topics.</p>
https://www.keycloak.org/2024/06/keycloak-2500-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -2644,46 +2503,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -2697,23 +2555,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2024/06/keycloak-2405-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -2723,46 +2565,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -2776,23 +2617,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2024/05/keycloak-2404-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -2802,46 +2627,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -2907,23 +2731,7 @@ Follow these issues and discussions to stay up-to-date with the latest developme
https://www.keycloak.org/2024/04/keycloak-2403-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -2933,46 +2741,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -3050,23 +2857,7 @@ approaches for managing access to Kubernetes resources through the combination o
https://www.keycloak.org/2024/03/keycloak-2402-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -3076,46 +2867,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -3129,23 +2919,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2024/03/keycloak-2401-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -3155,46 +2929,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -3208,23 +2981,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2024/03/keycloak-2400-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -3234,46 +2991,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -3287,23 +3043,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2024/02/keycloak-2307-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -3313,46 +3053,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -3366,23 +3105,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2024/02/keycloak-2306-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -3392,46 +3115,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -3445,23 +3167,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2024/01/keycloak-2305-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -3471,46 +3177,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -3524,23 +3229,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2024/01/keycloak-2304-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -3550,46 +3239,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -3812,23 +3500,7 @@ Let’s build a stronger and more resilient Keycloak together!</p>
https://www.keycloak.org/2023/12/keycloak-2303-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -3838,46 +3510,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -3891,23 +3562,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2023/12/keycloak-2302-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -3917,46 +3572,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -4014,23 +3668,7 @@ Book your ticket today at <a href="https://keycloak-day.dev">key
https://www.keycloak.org/2023/11/keycloak-2301-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -4040,46 +3678,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -4093,23 +3730,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2023/11/keycloak-2300-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Highlights</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -4119,46 +3740,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final </li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability </li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch </li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">authorization-services</span></li>
</ul>
@@ -4212,23 +3832,7 @@ contributors with a corresponding maintained archive of agreements.</p>
https://www.keycloak.org/2023/10/keycloak-2205-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Release notes</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -4238,46 +3842,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final <span class="badge bg-secondary">keycloak </span></li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">keycloak-quickstarts quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">keycloak organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">keycloak authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">keycloak account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">keycloak core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">keycloak core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">keycloak login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">keycloak user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">keycloak organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">keycloak docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">keycloak login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">keycloak authorization-services</span></li>
</ul>
@@ -4460,23 +4063,7 @@ By Soojin Lee & Hoon Jo, Megazone</p>
https://www.keycloak.org/2023/10/keycloak-2204-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Release notes</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -4486,46 +4073,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final <span class="badge bg-secondary">keycloak </span></li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">keycloak-quickstarts quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">keycloak organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">keycloak authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">keycloak account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">keycloak core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">keycloak core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">keycloak login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">keycloak user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">keycloak organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">keycloak docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">keycloak login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">keycloak authorization-services</span></li>
</ul>
@@ -4539,23 +4125,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2023/09/keycloak-2203-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Release notes</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -4565,46 +4135,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final <span class="badge bg-secondary">keycloak </span></li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">keycloak-quickstarts quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">keycloak organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">keycloak authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">keycloak account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">keycloak core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">keycloak core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">keycloak login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">keycloak user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">keycloak organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">keycloak docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">keycloak login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">keycloak authorization-services</span></li>
</ul>
@@ -4641,23 +4210,7 @@ a range of different application types with Keycloak.</p>
https://www.keycloak.org/2023/09/keycloak-2202-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Release notes</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -4667,46 +4220,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final <span class="badge bg-secondary">keycloak </span></li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">keycloak-quickstarts quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">keycloak organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">keycloak authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">keycloak account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">keycloak core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">keycloak core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">keycloak login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">keycloak user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">keycloak organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">keycloak docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">keycloak login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">keycloak authorization-services</span></li>
</ul>
@@ -4734,23 +4286,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2023/07/keycloak-2201-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Release notes</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -4760,46 +4296,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final <span class="badge bg-secondary">keycloak </span></li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">keycloak-quickstarts quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">keycloak organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">keycloak authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">keycloak account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">keycloak core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">keycloak core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">keycloak login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">keycloak user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">keycloak organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">keycloak docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">keycloak login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">keycloak authorization-services</span></li>
</ul>
@@ -4813,23 +4348,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2023/07/keycloak-2200-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Release notes</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -4839,46 +4358,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final <span class="badge bg-secondary">keycloak </span></li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">keycloak-quickstarts quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">keycloak organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">keycloak authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">keycloak account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">keycloak core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">keycloak core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">keycloak login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">keycloak user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">keycloak organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">keycloak docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">keycloak login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">keycloak authorization-services</span></li>
</ul>
@@ -4930,23 +4448,7 @@ this feature.</p>
https://www.keycloak.org/2023/06/keycloak-2112-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Release notes</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -4956,46 +4458,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final <span class="badge bg-secondary">keycloak </span></li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">keycloak-quickstarts quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">keycloak organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">keycloak authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">keycloak account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">keycloak core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">keycloak core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">keycloak login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">keycloak user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">keycloak organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">keycloak docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">keycloak login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">keycloak authorization-services</span></li>
</ul>
@@ -5114,23 +4615,7 @@ Bosch to enable more contributions from his team, allowing them to contribute mo
https://www.keycloak.org/2023/04/keycloak-2111-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Release notes</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -5140,46 +4625,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final <span class="badge bg-secondary">keycloak </span></li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">keycloak-quickstarts quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">keycloak organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">keycloak authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">keycloak account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">keycloak core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">keycloak core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">keycloak login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">keycloak user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">keycloak organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">keycloak docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">keycloak login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">keycloak authorization-services</span></li>
</ul>
@@ -5193,23 +4677,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2023/04/keycloak-2110-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Release notes</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -5219,46 +4687,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final <span class="badge bg-secondary">keycloak </span></li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">keycloak-quickstarts quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">keycloak organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">keycloak authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">keycloak account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">keycloak core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">keycloak core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">keycloak login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">keycloak user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">keycloak organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">keycloak docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">keycloak login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">keycloak authorization-services</span></li>
</ul>
@@ -5272,23 +4739,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2023/03/keycloak-2102-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Release notes</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -5298,46 +4749,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final <span class="badge bg-secondary">keycloak </span></li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">keycloak-quickstarts quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">keycloak organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">keycloak authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">keycloak account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">keycloak core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">keycloak core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">keycloak login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">keycloak user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">keycloak organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">keycloak docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">keycloak login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">keycloak authorization-services</span></li>
</ul>
@@ -5443,23 +4893,7 @@ Jetty are likely to be removed relatively soon.</p>
https://www.keycloak.org/2023/03/keycloak-2101-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Release notes</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -5469,46 +4903,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final <span class="badge bg-secondary">keycloak </span></li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">keycloak-quickstarts quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">keycloak organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">keycloak authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">keycloak account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">keycloak core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">keycloak core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">keycloak login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">keycloak user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">keycloak organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">keycloak docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">keycloak login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">keycloak authorization-services</span></li>
</ul>
@@ -5522,23 +4955,7 @@ the client certificate lookup via a proxy header.</p>
https://www.keycloak.org/2023/02/keycloak-2100-released
<p>To download the release go to <a href="https://www.keycloak.org/downloads.html">Keycloak downloads</a>.</p>
- <h2>Release notes</h2>
-<div class="sect2">
-<h3 id="_admin_events_might_include_now_additional_details_about_the_context_when_the_event_is_fired">Admin events might include now additional details about the context when the event is fired</h3>
-<div class="paragraph">
-<p>In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should
-expect the database schema being updated to add a new column <code>DETAILS_JSON</code> to the <code>ADMIN_EVENT_ENTITY</code> table.</p>
-</div>
-</div>
-<div class="sect2">
-<h3 id="_updates_to_documentation_of_x_509_client_certificate_lookup_via_proxy">Updates to documentation of X.509 client certificate lookup via proxy</h3>
-<div class="paragraph">
-<p>Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy.
-Additional configuration steps might be required depending on your current configuration. Make sure to review the updated
-<a href="https://www.keycloak.org/server/reverseproxy#_enabling_client_certificate_lookup">reverse proxy guide</a> if you have configured
-the client certificate lookup via a proxy header.</p>
-</div>
-</div>
+
<h2>Upgrading</h2>
<p>Before upgrading refer to <a href="https://www.keycloak.org/docs/latest/upgrading/index.html#migration-changes">the migration guide</a> for a complete list of changes.</p>
@@ -5548,46 +4965,45 @@ the client certificate lookup via a proxy header.</p>
<h3>Enhancements</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak/issues/34315">#34315</a> Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34386">#34386</a> Some dynamic imported functions are also statically imported making bundling them in-efficient <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34570">#34570</a> Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34855">#34855</a> Add conditional text to Installation Locations <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34873">#34873</a> Update Leveraging JaKarta EE in Server Development guide <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34887">#34887</a> Apply QE edits to High Availability guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34882">#34882</a> Edits to Authorization Services guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34916">#34916</a> Addresse QE comments on Server Administration guide <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34931">#34931</a> Upgrade to ISPN 15.0.11.Final <span class="badge bg-secondary">keycloak </span></li>
</ul>
<h3>Bugs</h3>
<ul>
-<li><a href="https://github.com/keycloak/keycloak-quickstarts/issues/609">#609</a> Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement <span class="badge bg-secondary">keycloak-quickstarts quickstarts</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/11008">#11008</a> Incorrect get the members of a group imported from LDAP <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/17593">#17593</a> Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/19652">#19652</a> Members are inhereted from LDAP group with the same name <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/23732">#23732</a> JavascriptAdapterTest errors when running with strict cookies on Firefox <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/27856">#27856</a> Social login - Stack Overflow test fails <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/31456">#31456</a> Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI <span class="badge bg-secondary">keycloak ldap</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/32786">#32786</a> Organization Domain not marked as a required field in the Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/33531">#33531</a> Previously entered translations should persist in the translation dialog for the attribute groups <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34013">#34013</a> Add More Info to Organization Events <span class="badge bg-secondary">keycloak organizations</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34065">#34065</a> Users without `view-realm` can't see user lockout state in Admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34201">#34201</a> OIDC IdP Unable to validate signatures using validatingPublicKey certificate <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34335">#34335</a> NPE in Organization(s)Resource when using Quarkus Rest Client <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34401">#34401</a> Incorrect Content-Type Expectation for POST /admin/realms/{realm}/organizations/{id}/members in Keycloak API <span class="badge bg-secondary">keycloak admin/api</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34465">#34465</a> Missing help icons in Webauthn Policy and Webauthn Passwordless Policy missing in admin ui <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34519">#34519</a> Clicking on link to Keycloak documentation from Keycloak admin UI does nothing instead of opening documentation <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34549">#34549</a> Quarkus dev mode does not work <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/10233">#10233</a> Locale Setting for Update Password Mail <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/17233">#17233</a> the InfoPage after an ExecuteActionsEmail is not localized based on the user's locale <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/30631">#30631</a> Upgrade to 25 throws: Statement violates GTID consistency <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32143">#32143</a> UserId too long to add Security Key WebauthN <span class="badge bg-secondary">keycloak authentication/webauthn</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32648">#32648</a> RP-Initiated logout using `POST` method fails in cross-origin setup <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/32676">#32676</a> Flaky test: org.keycloak.testsuite.forms.BrowserButtonsTest#appInitiatedRegistrationWithBackButton <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33071">#33071</a> RESTART_AUTHENTICATION_ERROR in Iphone devices (using safari and chrome browser) <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33195">#33195</a> Any one Client role mapping to user/group generating two events on admin events tab. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/33810">#33810</a> Stabilise my-resources.spec test <span class="badge bg-secondary">keycloak account/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34233">#34233</a> Service accounts visible under user search in Admin console <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34391">#34391</a> Error on "check a11y" tests on Cypress <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34560">#34560</a> Switching 'Email as Username' alters existing custom usernames to email addresses, causing LDAP sync issues <span class="badge bg-secondary">keycloak core</span></li>
<li><a href="https://github.com/keycloak/keycloak/issues/34572">#34572</a> Text in "Choose a policy type" is not wrapping <span class="badge bg-secondary">keycloak admin/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34603">#34603</a> NPE in InfinispanOrganizationProvider if userCache is disabled <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34624">#34624</a> Securing apps guide breaks downstream <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34634">#34634</a> Missing downstream explicit name for anchors <span class="badge bg-secondary">keycloak docs</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34644">#34644</a> KC_CACHE_EMBEDDED_MTLS_ENABLED is ignored <span class="badge bg-secondary">keycloak infinispan</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34671">#34671</a> `ClientConnection.getRemoteAddr` can return a hostname when behind a reverse proxy <span class="badge bg-secondary">keycloak core</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34687">#34687</a> New credential templates broken in KC26 <span class="badge bg-secondary">keycloak login/ui</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/34905">#34905</a> [Keycloak CI] Outdated surefire artifacts names - Quarkus IT and UT <span class="badge bg-secondary">keycloak ci</span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35213">#35213</a> CVE-2024-10451 Sensitive Data Exposure in Keycloak Build Process <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35214">#35214</a> CVE-2024-10270 Potential Denial of Service <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35215">#35215</a> CVE-2024-10492 Keycloak path trasversal <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35216">#35216</a> CVE-2024-9666 Keycloak proxy header handling Denial-of-Service (DoS) vulnerability <span class="badge bg-secondary">keycloak </span></li>
-<li><a href="https://github.com/keycloak/keycloak/issues/35217">#35217</a> CVE-2024-10039 Bypassing mTLS validation <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34590">#34590</a> Attributes missing in OrganizationRepresentation when using Admin REST API in Keycloak 26 <span class="badge bg-secondary">keycloak admin/api</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34678">#34678</a> [Admin UI] [Create resource-based permission] Resource input is disabled <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34858">#34858</a> Deprecated CLI options and new options are not stable in their sorting <span class="badge bg-secondary">keycloak dist/quarkus</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34864">#34864</a> On logout from admin console, a serverinfo call with 401 response in the logs <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34888">#34888</a> Authentication Link and IDP Fails with 400 Bad Request After Migrating to Version 26 and Delete Authentification <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34899">#34899</a> Upgrade 24 to 25 fails because db jpa changes drop nonexisting indexes. <span class="badge bg-secondary">keycloak core</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34930">#34930</a> Update Email doesn't update username when Email as Username and Attributes are enabled <span class="badge bg-secondary">keycloak user-profile</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34944">#34944</a> Adding "sub" claim to lightweight access token causes HTTP 403 Forbidden Error in Keycloak 26.0.5 <span class="badge bg-secondary">keycloak oidc</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34975">#34975</a> getAll() organization members only returns the first 10 members <span class="badge bg-secondary">keycloak organizations</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/34987">#34987</a> KC25 Migration guide for caching options needs clarification <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35006">#35006</a> Mis-formatted unordered list in the caching docs <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35015">#35015</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsRemoval <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35087">#35087</a> Flaky test: org.keycloak.testsuite.model.session.AuthenticationSessionTest#testConcurrentAuthenticationSessionsCreation <span class="badge bg-secondary">keycloak ci</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35229">#35229</a> Fix typo in v24 changelog: "longer" -> "no longer" <span class="badge bg-secondary">keycloak docs</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35232">#35232</a> reCAPTCHA v3 not working <span class="badge bg-secondary">keycloak login/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35276">#35276</a> Your login attempt timed out <span class="badge bg-secondary">keycloak authentication</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35282">#35282</a> [Keycloak CI] - Test PoC failing on Keycloak 26.0 branch <span class="badge bg-secondary">keycloak </span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35288">#35288</a> Upgrade 26.0.5 -> 26.0.6 completely breaks admin events in the admin UI <span class="badge bg-secondary">keycloak admin/ui</span></li>
+<li><a href="https://github.com/keycloak/keycloak/issues/35328">#35328</a> Error when creating a permission ticket when there are 2 or more Keycloak servers in a cluster <span class="badge bg-secondary">keycloak authorization-services</span></li>
</ul>
diff --git a/securing-apps/saml-galleon-layers.html b/securing-apps/saml-galleon-layers.html
index 964d20f39d96..8ea99bffc879 100644
--- a/securing-apps/saml-galleon-layers.html
+++ b/securing-apps/saml-galleon-layers.html
@@ -105,7 +105,7 @@
Example of provision u
<feature-pack>
<groupId>org.keycloak</groupId>
<artifactId>keycloak-saml-adapter-galleon-pack</artifactId>
- <version>26.0.6</version>
+ <version>26.0.7</version>
</feature-pack>
</feature-packs>
<layers>
@@ -146,7 +146,7 @@
Example of provisi
<feature-pack>
<groupId>org.keycloak</groupId>
<artifactId>keycloak-saml-adapter-galleon-pack</artifactId>
- <version>26.0.6</version>
+ <version>26.0.7</version>
</feature-pack>
</feature-packs>
<layers>
diff --git a/server/all-config.html b/server/all-config.html
index 85f4523fb2c9..e8a6dd72340e 100644
--- a/server/all-config.html
+++ b/server/all-config.html
@@ -2644,7 +2644,7 @@
Truststore
STRICT and WILDCARD have been deprecated, use DEFAULT instead.
-Deprecated values: WILDCARD, STRICT
It is possible to configure Keycloak to store user sessions in the cache only and minimize the database utilization.
-
Since all the sessions in this setup are stored in-memory, there are two side effects related to this:
-* Losing sessions on all Keycloak nodes restart
-* Increased memory consumption
+
Since all the sessions in this setup are stored in-memory, there are two side effects related to this:
+
+
+
+
+
Losing sessions on when all Keycloak nodes restart.
If you are installing from a zip file then by default there will be an install root directory of keycloak-26.0.6, which can be created anywhere you choose on your filesystem.
+
If you are installing from a zip file then by default there will be an install root directory of keycloak-26.0.7, which can be created anywhere you choose on your filesystem.