build(deps): bump the maven-production group across 1 directory with 7 updates

[dependabot]

Bumps the maven-production group with 7 updates in the / directory:

Package	From	To
org.keycloak:keycloak-core	26.6.3	26.6.4
org.keycloak:keycloak-server-spi	26.6.3	26.6.4
org.keycloak:keycloak-server-spi-private	26.6.3	26.6.4
org.keycloak:keycloak-services	26.6.3	26.6.4
org.keycloak:keycloak-crypto-default	26.6.3	26.6.4
org.keycloak:keycloak-model-jpa	26.6.3	26.6.4
redis.clients:jedis	7.5.2	7.5.3

Updates org.keycloak:keycloak-core from 26.6.3 to 26.6.4

Release notes

Sourced from org.keycloak:keycloak-core's releases.

26.6.4

Commits

• dc1bfc5 Set version to 26.6.4
• 39d40b1 fix(keycloak-admin-client): fix JS failures due to Kiota bug (#49643)
• d459fc3 Upgrade to Quarkus 3.33.2.1 (#776)
• 6d61885 CVE-2026-11800 Remove support for symmetric algorithms in JWT public key vali...
• 32cdceb Consider case-sensitivity when validating prohibited schemes of client URIs (...
• 1bc0dd3 Restrict java keystore files to a realm folder (#703)
• be81d60 CVE-2026-9705 check if client is enabled when RAT is used
• 11b83fc GroupResource.addChild missing requireManage(child) (#707)
• e5507d9 [26.6] Missing requireMapClientScope in ScopeMappedResource and ScopeMappedCl...
• bdb4db3 Skip owner managed resources when enforcement mode is set to permissive (#692)
• Additional commits viewable in compare view

Updates org.keycloak:keycloak-server-spi from 26.6.3 to 26.6.4

Release notes

Sourced from org.keycloak:keycloak-server-spi's releases.

26.6.4

Commits

• dc1bfc5 Set version to 26.6.4
• 39d40b1 fix(keycloak-admin-client): fix JS failures due to Kiota bug (#49643)
• d459fc3 Upgrade to Quarkus 3.33.2.1 (#776)
• 6d61885 CVE-2026-11800 Remove support for symmetric algorithms in JWT public key vali...
• 32cdceb Consider case-sensitivity when validating prohibited schemes of client URIs (...
• 1bc0dd3 Restrict java keystore files to a realm folder (#703)
• be81d60 CVE-2026-9705 check if client is enabled when RAT is used
• 11b83fc GroupResource.addChild missing requireManage(child) (#707)
• e5507d9 [26.6] Missing requireMapClientScope in ScopeMappedResource and ScopeMappedCl...
• bdb4db3 Skip owner managed resources when enforcement mode is set to permissive (#692)
• Additional commits viewable in compare view

Updates org.keycloak:keycloak-server-spi-private from 26.6.3 to 26.6.4

Release notes

Sourced from org.keycloak:keycloak-server-spi-private's releases.

26.6.4

Commits

• dc1bfc5 Set version to 26.6.4
• 39d40b1 fix(keycloak-admin-client): fix JS failures due to Kiota bug (#49643)
• d459fc3 Upgrade to Quarkus 3.33.2.1 (#776)
• 6d61885 CVE-2026-11800 Remove support for symmetric algorithms in JWT public key vali...
• 32cdceb Consider case-sensitivity when validating prohibited schemes of client URIs (...
• 1bc0dd3 Restrict java keystore files to a realm folder (#703)
• be81d60 CVE-2026-9705 check if client is enabled when RAT is used
• 11b83fc GroupResource.addChild missing requireManage(child) (#707)
• e5507d9 [26.6] Missing requireMapClientScope in ScopeMappedResource and ScopeMappedCl...
• bdb4db3 Skip owner managed resources when enforcement mode is set to permissive (#692)
• Additional commits viewable in compare view

Updates org.keycloak:keycloak-services from 26.6.3 to 26.6.4

Release notes

Sourced from org.keycloak:keycloak-services's releases.

26.6.4

Commits

• dc1bfc5 Set version to 26.6.4
• 39d40b1 fix(keycloak-admin-client): fix JS failures due to Kiota bug (#49643)
• d459fc3 Upgrade to Quarkus 3.33.2.1 (#776)
• 6d61885 CVE-2026-11800 Remove support for symmetric algorithms in JWT public key vali...
• 32cdceb Consider case-sensitivity when validating prohibited schemes of client URIs (...
• 1bc0dd3 Restrict java keystore files to a realm folder (#703)
• be81d60 CVE-2026-9705 check if client is enabled when RAT is used
• 11b83fc GroupResource.addChild missing requireManage(child) (#707)
• e5507d9 [26.6] Missing requireMapClientScope in ScopeMappedResource and ScopeMappedCl...
• bdb4db3 Skip owner managed resources when enforcement mode is set to permissive (#692)
• Additional commits viewable in compare view

Updates org.keycloak:keycloak-crypto-default from 26.6.3 to 26.6.4

Updates org.keycloak:keycloak-model-jpa from 26.6.3 to 26.6.4

Updates org.keycloak:keycloak-server-spi from 26.6.3 to 26.6.4

Release notes

Sourced from org.keycloak:keycloak-server-spi's releases.

26.6.4

Commits

• dc1bfc5 Set version to 26.6.4
• 39d40b1 fix(keycloak-admin-client): fix JS failures due to Kiota bug (#49643)
• d459fc3 Upgrade to Quarkus 3.33.2.1 (#776)
• 6d61885 CVE-2026-11800 Remove support for symmetric algorithms in JWT public key vali...
• 32cdceb Consider case-sensitivity when validating prohibited schemes of client URIs (...
• 1bc0dd3 Restrict java keystore files to a realm folder (#703)
• be81d60 CVE-2026-9705 check if client is enabled when RAT is used
• 11b83fc GroupResource.addChild missing requireManage(child) (#707)
• e5507d9 [26.6] Missing requireMapClientScope in ScopeMappedResource and ScopeMappedCl...
• bdb4db3 Skip owner managed resources when enforcement mode is set to permissive (#692)
• Additional commits viewable in compare view

Updates org.keycloak:keycloak-server-spi-private from 26.6.3 to 26.6.4

Release notes

Sourced from org.keycloak:keycloak-server-spi-private's releases.

26.6.4

Commits

• dc1bfc5 Set version to 26.6.4
• 39d40b1 fix(keycloak-admin-client): fix JS failures due to Kiota bug (#49643)
• d459fc3 Upgrade to Quarkus 3.33.2.1 (#776)
• 6d61885 CVE-2026-11800 Remove support for symmetric algorithms in JWT public key vali...
• 32cdceb Consider case-sensitivity when validating prohibited schemes of client URIs (...
• 1bc0dd3 Restrict java keystore files to a realm folder (#703)
• be81d60 CVE-2026-9705 check if client is enabled when RAT is used
• 11b83fc GroupResource.addChild missing requireManage(child) (#707)
• e5507d9 [26.6] Missing requireMapClientScope in ScopeMappedResource and ScopeMappedCl...
• bdb4db3 Skip owner managed resources when enforcement mode is set to permissive (#692)
• Additional commits viewable in compare view

Updates org.keycloak:keycloak-services from 26.6.3 to 26.6.4

Release notes

Sourced from org.keycloak:keycloak-services's releases.

26.6.4

Commits

• dc1bfc5 Set version to 26.6.4
• 39d40b1 fix(keycloak-admin-client): fix JS failures due to Kiota bug (#49643)
• d459fc3 Upgrade to Quarkus 3.33.2.1 (#776)
• 6d61885 CVE-2026-11800 Remove support for symmetric algorithms in JWT public key vali...
• 32cdceb Consider case-sensitivity when validating prohibited schemes of client URIs (...
• 1bc0dd3 Restrict java keystore files to a realm folder (#703)
• be81d60 CVE-2026-9705 check if client is enabled when RAT is used
• 11b83fc GroupResource.addChild missing requireManage(child) (#707)
• e5507d9 [26.6] Missing requireMapClientScope in ScopeMappedResource and ScopeMappedCl...
• bdb4db3 Skip owner managed resources when enforcement mode is set to permissive (#692)
• Additional commits viewable in compare view

Updates org.keycloak:keycloak-crypto-default from 26.6.3 to 26.6.4

Updates org.keycloak:keycloak-model-jpa from 26.6.3 to 26.6.4

Updates redis.clients:jedis from 7.5.2 to 7.5.3

Release notes

Sourced from redis.clients:jedis's releases.

7.5.3

This is a maintenance release with fixes for FT.HYBRID queries and connection pool handshake overhead. Recommended for any deployment using FT.HYBRID with Combiner.as(...) or MultiDbClient.

🐛 Bug Fixes

• Fixes FT.HYBRID COMBINE argument count omitting YIELD_SCORE_AS tokens, causing the command to be rejected when a combined-score alias is set via Combiner.as(...). Fix by @​guyroyse in redis/jedis#4575, backported to 7.5.x in redis/jedis#4576.
• Fixes double initialization of a pooled Connection in TrackingConnectionPool (used by MultiDbClient). redis/jedis#4547, backported to 7.5.x in redis/jedis@dd42b3e.

Full Changelog: redis/jedis@v7.5.2...v7.5.3

Commits

• d0ca056 Add Redis 8.8 GA to test matrix on 7.5.x (#4578)
• 2e73f17 Backport #4571 and #4573 to 7.5.x: stabilize XINFO STREAM tests (#4577)
• 458bccf Backport #4575 to 7.5.x: fix FT.HYBRID COMBINE arg count for YIELD_SCORE_AS (...
• dd42b3e [7.5] Backport #4547: Fix double initialization of pooled Connection in Track...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 43.33%. Comparing base (107bdc3) to head (1186df8).

Additional details and impacted files

@@            Coverage Diff            @@
##               main     #388   +/-   ##
=========================================
  Coverage     43.33%   43.33%           
  Complexity       58       58           
=========================================
  Files            18       18           
  Lines           450      450           
  Branches         46       46           
=========================================
  Hits            195      195           
  Misses          227      227           
  Partials         28       28           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[hangy]

@dependabot recreate

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.