Skip to content

Release next: Keycloak 26.6.1, dependency updates, location condition authenticator#216

Open
BenLad17 wants to merge 31 commits into
mainfrom
release/next
Open

Release next: Keycloak 26.6.1, dependency updates, location condition authenticator#216
BenLad17 wants to merge 31 commits into
mainfrom
release/next

Conversation

@BenLad17
Copy link
Copy Markdown
Member

Summary

  • Bump Keycloak to 26.6.1 (pom.xml + Docker image)
  • Add location-based conditional authenticator (contributed by @Spechey)
  • Add Keycloak 26.6.1 to CI test matrix
  • Update CI actions (upload-pages-artifact v5, action-gh-release v3)
  • Update lombok to 1.18.46, Ruby to 4.0.3

Test plan

  • CI passes for all Keycloak versions in matrix (26.5.0–26.5.7, 26.6.1)
  • Location condition authenticator works in Keycloak admin flow
  • Existing conditional authenticators unaffected

mathieu-claudel-kns and others added 16 commits April 9, 2026 20:06
- Use Constants.CFG_DELIMITER_PATTERN instead of hardcoded "##"
- Add null guard for missing authenticator config (fail-closed)
- Use getOrDefault for CONFIG_VALUES to prevent NPE
- Fix getRequirementChoices() to return [REQUIRED, DISABLED]
- Fix setDefaultValue(false) type mismatch on MULTIVALUED_STRING_TYPE
- Fix variable typo: reveseDecision -> reverseDecision
- Fix help text typo: "Revert de condition" -> "Revert the condition"
- Remove unused imports
- Clean up trailing \n in help text strings
@deepsource-io
Copy link
Copy Markdown
Contributor

deepsource-io Bot commented Apr 26, 2026

DeepSource Code Review

We reviewed changes in 60ffb5a...92cee69 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade   Security  

Reliability  

Complexity  

Hygiene  

Coverage  

Code Review Summary

Analyzer Status Updated (UTC) Details
Java Apr 27, 2026 4:43a.m. Review ↗
Code coverage Apr 27, 2026 4:43a.m. Review ↗

Code Coverage Summary

Language Line Coverage (Overall)
Aggregate
100%
Java
100%

➟ Additional coverage metrics may have been reported. See full coverage report ↗


Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

…tion

Save userId before realm deletion and wait for deletion to complete
before querying login records. Avoids NotFoundException from
user.getId() when the realm is already gone.
Deleting the framework-managed realm caused OAuthClient.close() to fail
in afterEach (re-created realm lacks the test OAuth client), aborting
the destroy loop and cascading 409s to all subsequent tests.

Fix: create a separate temp realm + user, insert a record directly via
JDBC, delete the temp realm, verify cascade. Framework realm untouched.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants