build(deps): bump keycloak.version from 26.6.3 to 26.6.4 (#390)

* build(deps): bump keycloak.version from 26.6.3 to 26.6.4

Bumps `keycloak.version` from 26.6.3 to 26.6.4.

Updates `org.keycloak:keycloak-core` from 26.6.3 to 26.6.4
- [Release notes](https://github.com/keycloak/keycloak/releases)
- [Commits](keycloak/keycloak@26.6.3...26.6.4)

Updates `org.keycloak:keycloak-server-spi` from 26.6.3 to 26.6.4
- [Release notes](https://github.com/keycloak/keycloak/releases)
- [Commits](keycloak/keycloak@26.6.3...26.6.4)

Updates `org.keycloak:keycloak-server-spi-private` from 26.6.3 to 26.6.4
- [Release notes](https://github.com/keycloak/keycloak/releases)
- [Commits](keycloak/keycloak@26.6.3...26.6.4)

Updates `org.keycloak:keycloak-services` from 26.6.3 to 26.6.4
- [Release notes](https://github.com/keycloak/keycloak/releases)
- [Commits](keycloak/keycloak@26.6.3...26.6.4)

Updates `org.keycloak:keycloak-crypto-default` from 26.6.3 to 26.6.4

Updates `org.keycloak:keycloak-model-jpa` from 26.6.3 to 26.6.4

---
updated-dependencies:
- dependency-name: org.keycloak:keycloak-core
  dependency-version: 26.6.4
  dependency-type: direct:production
- dependency-name: org.keycloak:keycloak-server-spi
  dependency-version: 26.6.4
  dependency-type: direct:production
- dependency-name: org.keycloak:keycloak-server-spi-private
  dependency-version: 26.6.4
  dependency-type: direct:production
- dependency-name: org.keycloak:keycloak-services
  dependency-version: 26.6.4
  dependency-type: direct:production
- dependency-name: org.keycloak:keycloak-crypto-default
  dependency-version: 26.6.4
  dependency-type: direct:production
- dependency-name: org.keycloak:keycloak-model-jpa
  dependency-version: 26.6.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Additional changes for Keycloak update

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: hangy <hangy@hangy.de>

Author: dependabot[bot]

Dockerfile

@@ -10,7 +10,7 @@ RUN --mount=type=cache,target=/root/.m2 set -x && \
     export SKIP_INTEGRATION_TESTS=true && \
     mvn -B package
 
-FROM quay.io/keycloak/keycloak:26.6.3 AS base
+FROM quay.io/keycloak/keycloak:26.6.4 AS base
 # Base image that the test and production images derive from.
 # Note the version number above is set by the update_keycloak_version.mjs script, so no need to edit manually
 

build-scripts/messages_xx.properties

@@ -911,14 +911,17 @@ ldapErrorCantEnableUnsyncedAndImportOff=*ldapErrorCantEnableUnsyncedAndImportOff
 ldapErrorMissingGroupsPathGroup=*ldapErrorMissingGroupsPathGroup*
 ldapErrorValidatePasswordPolicyAvailableForWritableOnly=*ldapErrorValidatePasswordPolicyAvailableForWritableOnly*
 clientRedirectURIsFragmentError=*clientRedirectURIsFragmentError*
+clientPostLogoutRedirectURIsFragmentError=*clientPostLogoutRedirectURIsFragmentError*
 clientRootURLFragmentError=*clientRootURLFragmentError*
 clientRootURLIllegalSchemeError=*clientRootURLIllegalSchemeError*
 clientBaseURLIllegalSchemeError=*clientBaseURLIllegalSchemeError*
 backchannelLogoutUrlIllegalSchemeError=*backchannelLogoutUrlIllegalSchemeError*
 clientRedirectURIsIllegalSchemeError=*clientRedirectURIsIllegalSchemeError*
+clientPostLogoutRedirectURIsIllegalSchemeError=*clientPostLogoutRedirectURIsIllegalSchemeError*
 clientBaseURLInvalid=*clientBaseURLInvalid*
 clientRootURLInvalid=*clientRootURLInvalid*
 clientRedirectURIsInvalid=*clientRedirectURIsInvalid*
+clientPostLogoutRedirectURIsInvalid=*clientPostLogoutRedirectURIsInvalid*
 backchannelLogoutUrlIsInvalid=*backchannelLogoutUrlIsInvalid*
 pairwiseMalformedClientRedirectURI=*pairwiseMalformedClientRedirectURI*
 pairwiseClientRedirectURIsMissingHost=*pairwiseClientRedirectURIsMissingHost*

pom.xml

@@ -4,7 +4,7 @@
   <name>ProductOpener Keycloak extensions</name>
   <groupId>openfoodfacts.github.keycloak</groupId>
   <artifactId>keycloak-extensions</artifactId>
-  <version>26.6.3</version>
+  <version>26.6.4</version>
   <packaging>jar</packaging>
   <properties>
     <java.version>21</java.version>
@@ -15,10 +15,10 @@
     <maven-shade-plugin.version>3.5.1</maven-shade-plugin.version>
     <maven-site-plugin.version>4.0.0-M16</maven-site-plugin.version>
     <maven-assembly-plugin.version>3.8.0</maven-assembly-plugin.version>
-    <revision>26.6.3</revision>
+    <revision>26.6.4</revision>
     <changelist>-SNAPSHOT</changelist>
     <sha1/>
-    <keycloak.version>26.6.3</keycloak.version>
+    <keycloak.version>26.6.4</keycloak.version>
     <junit.version>6.1.0</junit.version>
   </properties>
   <build>

theme/theme/base/admin/messages/messages_en.properties

@@ -25,15 +25,18 @@ ldapErrorCantEnableUnsyncedAndImportOff=Can not disable Importing users when LDA
 ldapErrorMissingGroupsPathGroup=Groups path group does not exist - please create the group on specified path first
 ldapErrorValidatePasswordPolicyAvailableForWritableOnly=Validate Password Policy is applicable only with WRITABLE edit mode
 
-clientRedirectURIsFragmentError=Redirect URIs must not contain an URI fragment
+clientRedirectURIsFragmentError=A redirect URI must not contain an URL fragment
+clientPostLogoutRedirectURIsFragmentError=A post-logout redirect URI must not contain an URL fragment
 clientRootURLFragmentError=Root URL must not contain an URL fragment
 clientRootURLIllegalSchemeError=Root URL uses an illegal scheme
 clientBaseURLIllegalSchemeError=Base URL uses an illegal scheme
 backchannelLogoutUrlIllegalSchemeError=Backchannel logout URL uses an illegal scheme
 clientRedirectURIsIllegalSchemeError=A redirect URI uses an illegal scheme
+clientPostLogoutRedirectURIsIllegalSchemeError=A post-logout redirect URI uses an illegal scheme
 clientBaseURLInvalid=Base URL is not a valid URL
 clientRootURLInvalid=Root URL is not a valid URL
 clientRedirectURIsInvalid=A redirect URI is not a valid URI
+clientPostLogoutRedirectURIsInvalid=A post-logout redirect URI is not a valid URI
 backchannelLogoutUrlIsInvalid=Backchannel logout URL is not a valid URL